Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a31b2c9e-e96c-3537-a47c-536a9d890ea2.roa
File: a31b2c9e-e96c-3537-a47c-536a9d890ea2.roa (raw, json)
Hash identifier: jaXpYocVgl2v3BcoWr63BI2T/C6ZliSkcWOAyOY1Ncw=
Subject key identifier: 7C:A1:4F:33:7D:FC:EA:A6:38:D0:F4:BD:7E:3A:FD:9F:63:DA:46:84
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F8D76749494D28EF505AB9E80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a31b2c9e-e96c-3537-a47c-536a9d890ea2.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Fri 13 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8d:76:74:94:94:d2:8e:f5:05:ab:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2023 GMT
Subject: CN=e6a1d7a3-f816-4ecd-a80a-2f56acef02c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e9:ac:77:dc:9b:ce:a7:d9:30:9b:91:3e:cc:
30:9b:c8:48:a8:09:18:51:4d:10:db:62:64:c0:fc:
ef:b6:51:52:d6:85:61:74:75:57:59:ea:ee:7a:aa:
05:08:6c:ee:f0:16:6b:35:a2:d1:88:18:2f:ac:d4:
3c:e2:18:b8:d5:45:f5:93:a4:e7:b5:bb:b7:13:83:
33:15:df:80:34:56:f0:7c:03:36:81:a6:9b:e4:17:
fa:85:d1:4a:a2:7e:d5:88:c0:27:f1:aa:df:10:d8:
58:63:49:57:4e:5a:8c:cf:92:05:f3:2f:84:a1:4e:
7f:11:06:12:41:0d:86:41:68:98:0d:23:5f:fa:39:
93:54:b9:05:69:60:60:db:0a:fe:55:a3:13:7d:dc:
e5:b3:cd:ae:58:d0:f2:72:be:ff:84:94:ed:45:6a:
57:55:f6:2d:da:83:83:20:99:1e:8d:a0:c9:0f:30:
cd:10:05:36:1d:5f:7a:49:3c:f1:51:93:72:ee:60:
24:d2:a9:be:8a:86:04:3b:12:10:90:26:da:28:54:
bd:9d:c4:3f:4b:c0:9c:86:b4:ce:09:c9:3c:9d:71:
40:28:9b:83:6e:b0:c9:a5:3a:79:bd:c5:96:71:e2:
ed:76:f9:dd:79:5d:9e:ab:ce:18:cc:cf:97:1d:8f:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:4F:33:7D:FC:EA:A6:38:D0:F4:BD:7E:3A:FD:9F:63:DA:46:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a31b2c9e-e96c-3537-a47c-536a9d890ea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:c0:b1:68:5d:f1:6f:b8:88:c3:8e:32:00:58:4f:b7:24:e6:
83:a4:61:99:79:c6:79:c9:db:55:18:a3:b7:34:9c:2b:6d:49:
e8:ef:39:c4:50:d8:16:ca:88:ef:bd:00:7c:da:61:be:c4:bb:
35:7e:27:77:f7:2b:92:6e:0d:cc:b4:d3:8c:c5:46:03:06:2e:
69:46:43:87:f0:84:68:d1:cc:cb:b9:81:35:db:25:be:02:f0:
a4:91:a0:d9:61:6b:68:83:62:be:e8:7c:c4:6c:a2:bc:08:38:
31:99:89:20:d8:a1:83:41:8f:d9:14:db:71:2f:92:db:41:6d:
bc:2d:11:0c:08:52:6a:20:b7:1c:5d:e1:da:f0:78:d9:d8:c2:
f1:c3:40:83:29:eb:d6:40:99:96:35:6f:11:f4:aa:d1:63:cc:
c5:7b:d9:fb:f3:51:da:7a:92:a5:b5:d9:8b:bc:5e:e7:9b:32:
06:b6:ad:84:a7:37:5b:f1:18:33:ff:e2:3a:53:10:d6:df:16:
9b:7b:a2:c8:07:62:23:df:8e:48:9a:9a:b6:c6:b6:56:a5:5b:
b7:97:43:8f:ac:03:27:98:7c:6b:e3:46:3d:75:84:6c:89:83:
02:df:fb:9f:98:eb:f2:dc:c6:f2:67:9e:66:db:96:99:20:3b:
59:4a:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org