Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9f30fe79-0974-3803-88b2-082ba7824c45.roa
File: 9f30fe79-0974-3803-88b2-082ba7824c45.roa (raw, json)
Hash identifier: PDgFbVgoe/X+W8Hiv4Q6h9eIHMdmmenjbBRACoHFTf4=
Subject key identifier: 13:A0:06:8A:10:21:7B:1E:77:A0:4C:C6:7B:CC:93:B2:A3:61:0D:2C
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DD3C9A47F1C37F13D3D05B5C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9f30fe79-0974-3803-88b2-082ba7824c45.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Mon 08 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:c9:a4:7f:1c:37:f1:3d:3d:05:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : May 8 04:00:00 2023 GMT
Subject: CN=2d372435-782f-403a-aa32-2b5baf639968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:ba:23:66:37:9b:29:de:bb:40:5f:e3:9b:
55:6e:56:41:85:b6:de:0a:59:b3:c1:9b:76:79:97:
4f:22:49:4f:d8:ad:2f:6d:e4:74:e0:17:69:2f:1a:
fd:f3:d0:44:53:f7:18:ee:91:24:70:38:6f:18:0e:
99:17:9b:70:d4:a1:62:06:59:85:41:29:a2:3c:15:
a1:b8:6e:f4:62:22:ff:5e:92:34:d1:9e:81:15:58:
3d:df:71:d4:21:7e:bb:de:be:b2:b5:da:d6:77:e2:
9e:7e:f6:bd:1a:45:df:5f:4f:79:62:14:78:e1:ba:
72:63:8c:47:43:26:30:34:58:8b:0a:78:91:07:b7:
88:fc:cc:9d:cc:0d:aa:f5:44:d3:28:c8:88:99:9b:
62:9b:fc:e2:ed:dc:fa:d6:37:02:4f:bc:8f:27:5f:
8d:e9:0e:be:31:a2:58:02:4f:6e:f2:ca:86:45:d1:
5c:30:7f:3b:c1:8b:dc:6c:65:b1:9c:40:9f:4f:57:
e0:eb:97:02:e8:21:b4:3a:49:bb:63:f2:06:df:a6:
b9:cc:44:45:a4:bb:59:b5:c1:d1:06:0c:57:2e:9c:
ca:1b:82:43:e9:3b:cd:d0:ec:80:a5:5c:27:4f:3f:
f5:21:35:8b:32:d2:4a:2a:cf:a0:56:ce:58:c0:a1:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A0:06:8A:10:21:7B:1E:77:A0:4C:C6:7B:CC:93:B2:A3:61:0D:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9f30fe79-0974-3803-88b2-082ba7824c45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:73:3c:c6:48:91:2c:1c:ee:96:06:d0:e6:a7:b7:25:6a:10:
d7:b9:39:1a:98:82:c0:73:37:84:76:b5:df:0b:12:f0:1d:9c:
6e:df:6d:bc:76:2e:a2:66:ba:95:bc:7f:cb:20:42:bc:1c:8a:
67:90:1d:a5:a2:9c:8c:20:15:2c:9a:18:a7:d4:8c:e2:f2:0e:
c6:1e:c6:b5:3b:78:74:9d:d8:58:29:a7:f5:74:73:ad:14:20:
45:17:29:3b:be:36:79:41:ea:c3:b1:9e:f0:76:e6:40:fa:1f:
bd:3d:03:31:5b:b2:bb:f5:ec:ee:5a:d0:84:45:a1:9d:8e:e8:
87:af:80:b0:b4:b9:86:d5:c8:be:af:73:bb:11:d0:b4:c0:6f:
6b:72:8f:d0:e2:24:f9:1d:5b:28:41:37:7f:7c:a7:0d:d0:8a:
4a:2d:8b:21:3b:1e:5e:b0:25:88:3b:2f:a8:06:88:e1:f4:ba:
4f:d3:8e:7d:3b:c3:30:37:2c:88:46:01:22:c6:32:39:6f:56:
2b:9f:b1:78:0a:ad:a5:42:45:2c:d0:bb:72:20:1b:53:66:55:
50:f5:eb:ca:ce:31:39:fa:1d:c5:cd:d7:69:81:5c:1e:54:0c:
57:0b:b6:c9:4b:8b:00:e8:8c:18:3d:00:2c:0c:b5:1d:7c:8e:
17:be:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:44 2023 by rpki-client on console-ams.rpki-client.org