Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9ddb88d2-8a55-37ff-a875-2daf7314bf60.roa
File: 9ddb88d2-8a55-37ff-a875-2daf7314bf60.roa (raw, json)
Hash identifier: 45S6vZo5Zt6Q8VJXA306srkmLTRRKE8mA63+Bp8u8Ug=
Subject key identifier: 72:6D:A4:CF:D6:78:36:AD:FA:4A:B8:F2:37:5B:C2:A8:39:4D:D8:11
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E362B82C090376BD783A7F7E0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9ddb88d2-8a55-37ff-a875-2daf7314bf60.roa
Signing time: Sat 11 Jun 2022 12:00:00 +0000
ROA not before: Sat 11 Jun 2022 12:00:00 +0000
ROA not after: Mon 12 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:36:2b:82:c0:90:37:6b:d7:83:a7:f7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 11 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2023 GMT
Subject: CN=69d1b29f-9f71-42ee-b730-e3641b937cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:d8:99:81:c8:4b:f0:b0:03:e7:a9:95:a0:
c1:23:bc:20:88:47:80:60:5c:25:61:66:31:fe:ac:
c2:71:87:29:ae:ab:3f:6b:36:95:4d:8f:7a:b6:d3:
0f:61:9c:04:16:1f:0e:48:d3:4f:73:f4:11:5e:c9:
fa:34:75:b7:ce:b9:81:05:5e:b3:36:45:28:21:03:
ae:06:a9:2c:e2:f8:1c:2d:b4:01:f0:f6:21:86:cb:
40:1f:3d:6a:55:a1:e9:51:07:3c:58:d1:10:2e:d5:
66:dc:45:13:46:9f:ca:7a:64:af:34:be:65:7f:65:
5a:8a:3a:0d:aa:b4:ee:4d:70:e8:71:83:67:39:c6:
9e:50:8e:20:e5:19:d4:28:a6:ad:d8:e4:84:ed:49:
1e:89:cf:ec:37:db:d9:4f:0c:1a:5c:c0:22:b2:ea:
5a:96:e0:6e:53:ea:80:21:f2:f8:19:cd:31:93:cb:
1c:41:a8:a0:e3:18:8a:03:2b:a0:3a:9b:fd:19:8b:
53:da:f2:ab:0a:96:79:6d:31:e1:f3:3c:9c:c1:4e:
63:f0:58:1e:ab:d4:74:6e:63:d4:b2:fb:df:a1:18:
c1:5b:6a:6a:97:3e:03:3e:05:7d:e2:5b:c7:c0:83:
77:b4:22:fd:2c:1c:fe:2a:42:8f:97:f4:a4:bb:ab:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6D:A4:CF:D6:78:36:AD:FA:4A:B8:F2:37:5B:C2:A8:39:4D:D8:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9ddb88d2-8a55-37ff-a875-2daf7314bf60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:91:4f:9c:d2:e5:42:a6:5c:17:03:f4:64:9f:99:b9:d2:9a:
16:5f:df:03:26:d4:d8:8c:df:1f:d1:7d:eb:f8:a7:53:35:1e:
02:df:b0:b9:06:1b:72:84:49:b5:aa:95:3b:5c:be:8f:c5:e2:
33:03:54:1b:b0:1d:9a:d4:5e:a5:fd:ad:5c:35:d2:b2:f8:93:
65:9b:ce:2f:75:79:c9:1d:94:bf:6c:e1:da:4a:f9:5f:b6:40:
36:a1:1d:20:be:aa:cf:a8:df:11:ad:18:3b:d8:95:f5:85:91:
98:c2:31:05:a8:78:70:3d:1f:88:d3:7b:61:94:5b:1d:a2:d0:
54:f0:35:af:9c:1d:6e:f0:a2:7c:bb:e5:3a:4e:67:44:27:9b:
12:64:eb:50:87:3e:7b:2d:a2:62:6b:73:53:0c:4e:bf:d6:7f:
41:a1:ae:99:c7:37:9e:f9:e1:8d:2a:70:f8:f1:62:7c:cc:e2:
03:a7:c9:f2:fe:7b:51:ca:9e:89:27:5c:16:82:3c:7e:7b:88:
7f:3a:10:7e:47:54:09:e5:d6:b8:34:a7:57:b3:de:85:4a:15:
6e:d8:6d:0b:6f:82:7b:29:75:7a:c1:71:3c:40:6e:57:79:aa:
aa:b5:fb:df:d6:3b:69:39:dc:60:47:6d:b5:c4:45:fe:7c:93:
16:c3:8a:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD42K4LAkDdr14On9+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDYxMTEyMDAwMFoXDTIzMDYxMjA0MDAwMFowLzEtMCsGA1UEAxMk
NjlkMWIyOWYtOWY3MS00MmVlLWI3MzAtZTM2NDFiOTM3Y2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEDYmYHIS/CwA+eplaDBI7wgiEeAYFwlYWYx
/qzCcYcprqs/azaVTY96ttMPYZwEFh8OSNNPc/QRXsn6NHW3zrmBBV6zNkUoIQOu
Bqks4vgcLbQB8PYhhstAHz1qVaHpUQc8WNEQLtVm3EUTRp/KemSvNL5lf2VaijoN
qrTuTXDocYNnOcaeUI4g5RnUKKat2OSE7Ukeic/sN9vZTwwaXMAisupaluBuU+qA
IfL4Gc0xk8scQaig4xiKAyugOpv9GYtT2vKrCpZ5bTHh8zycwU5j8Fgeq9R0bmPU
svvfoRjBW2pqlz4DPgV94lvHwIN3tCL9LBz+KkKPl/Sku6vCZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHJtpM/WeDat+kq48jdbwqg5TdgRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvOWRkYjg4ZDItOGE1NS0z
N2ZmLWE4NzUtMmRhZjczMTRiZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuRT5zS5UKmXBcD9GSfmbnSmhZf3wMm1NiM3x/Rfev4p1M1HgLfsLkG
G3KESbWqlTtcvo/F4jMDVBuwHZrUXqX9rVw10rL4k2Wbzi91eckdlL9s4dpK+V+2
QDahHSC+qs+o3xGtGDvYlfWFkZjCMQWoeHA9H4jTe2GUWx2i0FTwNa+cHW7wony7
5TpOZ0QnmxJk61CHPnstomJrc1MMTr/Wf0GhrpnHN5754Y0qcPjxYnzM4gOnyfL+
e1HKnoknXBaCPH57iH86EH5HVAnl1rg0p1ez3oVKFW7YbQtvgnspdXrBcTxAbld5
qqq1+9/WO2k53GBHbbXERf58kxbDijg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org