Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a65f3487-20a9-35f0-b84d-c06ddf20a8ab.roa
File: a65f3487-20a9-35f0-b84d-c06ddf20a8ab.roa (raw, json)
Hash identifier: mEx+DQaKFONWaC86kDA6UpmlBUu7YhswUuhMK7Vqswk=
Subject key identifier: 94:AD:30:7F:C1:3C:76:27:6E:C1:E6:BE:51:A2:DE:EB:04:29:E1:23
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EFEAB5A34799AE550D00974C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a65f3487-20a9-35f0-b84d-c06ddf20a8ab.roa
Signing time: Mon 22 Aug 2022 12:00:00 +0000
ROA not before: Mon 22 Aug 2022 12:00:00 +0000
ROA not after: Wed 23 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:fe:ab:5a:34:79:9a:e5:50:d0:09:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 22 12:00:00 2022 GMT
Not After : Aug 23 04:00:00 2023 GMT
Subject: CN=90c0101d-9217-455c-a929-c0b489c35eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:5c:8f:ff:10:5d:ef:2a:90:4f:0e:3a:35:
42:e2:d9:dd:4a:5d:00:73:f7:00:25:ef:2a:fd:29:
6d:63:db:3b:c1:3d:03:22:7d:c3:4e:ff:eb:63:a5:
10:b9:03:fd:54:b5:7b:e2:93:63:1d:99:c5:56:25:
bc:f2:19:a6:28:54:be:46:78:e0:d8:ca:02:0b:7d:
cc:3c:0d:f4:4c:03:26:dd:e3:e0:8f:81:ed:6c:67:
b8:85:4b:7d:fe:52:d1:37:95:53:57:3a:cb:36:eb:
e6:f7:8f:a4:c1:aa:e4:0d:eb:94:f5:dd:1b:01:76:
b4:41:fb:73:e1:00:4a:28:1f:6a:50:a2:27:31:f0:
3f:d2:d4:c9:aa:4c:3e:37:64:df:63:0b:43:a2:57:
b8:c2:a7:5b:b2:5f:5d:a0:02:6d:08:e4:7b:8b:5c:
dc:cc:63:02:2f:40:b7:e6:ae:21:3a:1f:cf:1c:9b:
b6:b9:bb:02:4d:4c:a7:78:c6:36:bc:19:e9:b3:70:
5d:a7:8d:23:77:87:67:f1:2f:8c:b3:a4:77:c6:59:
0f:19:c8:cb:a5:d7:4d:27:80:d7:2e:b7:a1:b3:08:
24:b7:fb:1f:69:0a:03:66:24:d9:b7:07:b9:ab:aa:
0a:23:73:0a:7d:f4:1f:95:c8:15:0f:a0:0a:5d:1e:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AD:30:7F:C1:3C:76:27:6E:C1:E6:BE:51:A2:DE:EB:04:29:E1:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a65f3487-20a9-35f0-b84d-c06ddf20a8ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7d:c4:40:b3:a0:ff:24:9c:38:6f:d5:fb:ff:41:20:27:56:
f7:9b:ea:4a:65:22:e3:b8:f1:8d:48:91:7e:90:0c:a4:dc:c1:
74:f8:e2:bb:76:fe:cb:c0:5b:11:96:03:ea:9c:1e:16:9d:c2:
ce:7c:cd:2a:71:71:a8:ef:0b:19:c9:0f:de:19:9b:b8:a6:f4:
17:f5:11:57:ac:a9:e6:69:ef:5e:36:75:bf:ec:cd:d3:3d:4f:
9d:0b:83:76:f3:8e:bb:e5:95:93:f6:91:87:fa:c1:55:7c:b7:
99:93:f4:e1:29:9b:c3:85:f7:23:be:fd:02:f8:56:e0:e3:96:
82:d1:03:d1:35:eb:5d:e6:9d:89:22:3d:0a:ef:ab:04:47:46:
7f:c1:92:df:3c:21:8c:65:4b:50:6b:da:fb:05:b4:97:f7:c7:
40:71:71:05:7e:94:dd:4c:fa:0c:4c:96:59:4b:38:6e:9a:db:
18:e8:f8:70:56:fd:1b:f9:df:bc:03:c1:bf:92:d6:74:6e:3a:
ac:87:d6:25:fe:73:94:d2:50:38:55:22:15:80:fd:07:65:3d:
6f:d0:27:56:d6:e4:34:1b:ca:9f:e8:4c:9b:6c:db:e8:01:e8:
ac:31:13:d7:4e:f4:6a:21:85:62:2a:54:8f:29:b9:af:e2:e6:
cc:23:d4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org