Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9deceda5-57fa-3f44-ba49-1ffe4b322739.roa
File: 9deceda5-57fa-3f44-ba49-1ffe4b322739.roa (raw, json)
Hash identifier: 8wazQPxJG3+i6vI2vvisExV4b424tVlqopHAJltfE0E=
Subject key identifier: 7E:33:59:03:3E:C9:91:68:5E:B1:97:0E:0C:C1:36:30:10:46:99:38
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FC4C2DD033A43CCFE8B37F400
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9deceda5-57fa-3f44-ba49-1ffe4b322739.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Thu 02 Nov 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c4:c2:dd:03:3a:43:cc:fe:8b:37:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Nov 2 04:00:00 2023 GMT
Subject: CN=50c5cc91-69d6-422c-80e6-4578806bb795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:07:a0:90:d6:01:6a:ea:df:df:c2:60:4c:
5a:63:6c:9c:c7:b2:b7:ca:4f:ec:56:52:43:ff:3f:
5a:f1:47:32:12:a5:13:a9:e8:bc:6c:2f:28:36:72:
7f:60:23:ff:04:bd:b5:38:86:ef:9e:fc:30:69:5f:
40:be:26:39:2d:ff:da:c9:43:3c:98:b6:41:95:c1:
56:3c:01:24:98:84:f9:e3:ed:14:f6:fa:53:80:31:
8c:a7:78:d0:f4:c4:f9:46:9e:f8:94:57:62:a5:71:
5b:c6:dc:34:2d:36:79:7c:74:89:60:65:e6:8d:a3:
57:c3:4d:72:53:a6:97:4a:4a:a6:8b:99:7b:85:1c:
82:67:a7:b1:d5:c3:19:9b:1d:08:64:ae:35:96:42:
8a:12:d6:30:34:11:b3:24:1f:dc:e9:54:e8:88:71:
b9:a7:d0:84:7a:5f:cb:3f:ab:3f:04:b6:e2:ae:a7:
6e:18:e9:8f:73:bd:5e:ea:14:87:3a:5d:47:f9:9d:
e7:1e:33:16:c8:20:9d:1e:8a:ac:b7:4e:49:c0:57:
5b:fb:e6:6e:0a:4a:16:95:81:f0:e3:ef:fa:7c:3e:
ba:bf:23:f9:5b:ca:fc:3d:03:41:8f:21:5b:04:0f:
c3:a2:9d:da:5f:51:51:b7:68:8c:54:6d:fb:a5:ea:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:59:03:3E:C9:91:68:5E:B1:97:0E:0C:C1:36:30:10:46:99:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9deceda5-57fa-3f44-ba49-1ffe4b322739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:3f:aa:e8:c9:f6:5f:7b:f9:c7:c3:8f:52:42:82:3f:14:e5:
52:34:e9:b2:6e:90:91:9c:41:10:92:a1:b7:36:f7:2b:be:9c:
a6:95:c9:62:c2:6a:82:54:cd:48:19:f1:8e:c7:e3:41:ea:1a:
8d:7f:6b:d3:65:99:5b:db:07:51:43:2a:59:c6:e6:81:a6:67:
7a:ec:da:d1:f7:50:78:b7:a7:00:6e:8c:79:0b:df:38:10:8d:
58:0a:36:9a:6a:98:3b:08:44:bf:9c:80:08:f0:0c:f6:f3:e2:
ef:00:ad:77:64:52:f4:06:a5:78:71:0c:30:89:ca:44:28:68:
32:e4:5e:d9:2f:9b:89:29:64:6f:d7:7f:ec:cf:7d:1a:43:fa:
5a:06:57:1d:52:dc:96:53:b0:fe:6a:5f:59:98:c1:ac:4a:da:
26:2a:16:75:b2:b4:a8:a3:83:fe:6b:dc:e1:03:07:bc:09:af:
f1:19:da:6b:ea:4e:ac:94:6d:cb:2b:8c:63:7a:e0:41:cd:a7:
98:dc:7e:c7:d2:94:80:28:5c:2b:34:5d:03:cc:0b:f4:d7:0b:
84:c7:15:82:97:d6:0b:38:b1:e7:76:6a:f4:f4:c6:2a:0f:88:
c1:74:7e:38:62:64:d0:fe:af:70:5c:b3:75:7c:08:be:7f:d1:
07:8e:0b:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/Ewt0DOkPM/os39AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTEwMTEyMDAwMFoXDTIzMTEwMjA0MDAwMFowLzEtMCsGA1UEAxMk
NTBjNWNjOTEtNjlkNi00MjJjLTgwZTYtNDU3ODgwNmJiNzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM8HoJDWAWrq39/CYExaY2ycx7K3yk/sVlJD
/z9a8UcyEqUTqei8bC8oNnJ/YCP/BL21OIbvnvwwaV9AviY5Lf/ayUM8mLZBlcFW
PAEkmIT54+0U9vpTgDGMp3jQ9MT5Rp74lFdipXFbxtw0LTZ5fHSJYGXmjaNXw01y
U6aXSkqmi5l7hRyCZ6ex1cMZmx0IZK41lkKKEtYwNBGzJB/c6VToiHG5p9CEel/L
P6s/BLbirqduGOmPc71e6hSHOl1H+Z3nHjMWyCCdHoqst05JwFdb++ZuCkoWlYHw
4+/6fD66vyP5W8r8PQNBjyFbBA/Dop3aX1FRt2iMVG37perjKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4zWQM+yZFoXrGXDgzBNjAQRpk4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvOWRlY2VkYTUtNTdmYS0z
ZjQ0LWJhNDktMWZmZTRiMzIyNzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0/qujJ9l97+cfDj1JCgj8U5VI06bJukJGcQRCSobc29yu+nKaVyWLC
aoJUzUgZ8Y7H40HqGo1/a9NlmVvbB1FDKlnG5oGmZ3rs2tH3UHi3pwBujHkL3zgQ
jVgKNppqmDsIRL+cgAjwDPbz4u8ArXdkUvQGpXhxDDCJykQoaDLkXtkvm4kpZG/X
f+zPfRpD+loGVx1S3JZTsP5qX1mYwaxK2iYqFnWytKijg/5r3OEDB7wJr/EZ2mvq
TqyUbcsrjGN64EHNp5jcfsfSlIAoXCs0XQPMC/TXC4THFYKX1gs4sed2avT0xioP
iMF0fjhiZND+r3Bcs3V8CL5/0QeOC1A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:44 2023 by rpki-client on console-ams.rpki-client.org