Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ac1edf82-9fd8-3ef1-80c8-9f1f2997ceef.roa
File: ac1edf82-9fd8-3ef1-80c8-9f1f2997ceef.roa (raw, json)
Hash identifier: SqgH4kxMNzBMNl+Ncmb5fHu4k3HS11VvGmac0wTWFfA=
Subject key identifier: 03:D8:E6:A3:DE:62:FF:BF:F2:5F:62:98:FA:18:89:F1:21:C7:05:A9
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E898C7498AB1068157C25D600
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ac1edf82-9fd8-3ef1-80c8-9f1f2997ceef.roa
Signing time: Mon 11 Jul 2022 12:00:00 +0000
ROA not before: Mon 11 Jul 2022 12:00:00 +0000
ROA not after: Wed 12 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:89:8c:74:98:ab:10:68:15:7c:25:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 11 12:00:00 2022 GMT
Not After : Jul 12 04:00:00 2023 GMT
Subject: CN=503a9969-56c4-4388-ab7d-a26376e99bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a0:b0:99:20:e4:60:2c:53:fd:23:86:ec:0c:
e0:1f:d3:34:7a:ba:dd:aa:70:68:50:21:a8:47:0d:
1e:28:8f:a9:29:94:13:dc:cc:44:39:26:68:f6:28:
f7:34:f8:09:90:2b:25:19:1c:76:e7:5e:b8:c3:93:
40:ac:2d:53:68:f8:e4:c0:44:1b:11:7f:24:1c:7b:
24:59:63:c4:ed:31:06:7d:ef:5b:cc:b3:0f:84:58:
4d:3a:99:a0:cc:f5:0c:32:44:a4:0f:08:45:f0:71:
23:90:fa:3a:77:4b:f0:d3:4f:83:d4:d0:bb:f8:29:
b2:7a:e5:2b:74:ec:a7:44:f4:1a:e8:d1:4b:63:68:
9c:44:8a:fa:6e:ed:86:eb:3a:de:71:b8:bd:75:19:
a1:13:31:76:1e:83:59:c3:49:eb:0b:44:f1:7a:e0:
df:b4:5a:4f:7f:19:eb:f1:f6:ff:a5:58:00:45:9a:
83:fb:b2:5b:18:71:45:30:b7:9a:d5:70:b2:28:46:
21:bf:56:4f:8d:fe:8a:34:37:b7:e7:e3:f2:b5:13:
30:3f:51:ea:fd:dd:7d:7a:73:84:d6:ce:b2:0a:81:
b4:f7:1f:8c:c4:b2:37:9a:5c:f6:5a:7f:8c:37:1b:
58:1e:e7:54:d3:19:a7:c8:37:cd:a0:6a:4f:32:e5:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:E6:A3:DE:62:FF:BF:F2:5F:62:98:FA:18:89:F1:21:C7:05:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ac1edf82-9fd8-3ef1-80c8-9f1f2997ceef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:e0:13:cb:10:1d:04:b2:4a:b6:55:86:2f:7e:c7:cc:f7:8f:
93:ed:35:53:78:b1:f7:65:cb:4a:18:a3:41:8f:96:43:eb:69:
f7:11:be:2c:9f:15:d8:c0:b4:75:16:3b:62:fe:4e:ae:2f:b2:
f3:c8:fd:76:c1:dc:6e:33:e4:9a:3a:0c:7e:35:3b:f1:d8:bf:
8d:b1:9b:ea:9a:78:81:81:51:84:7c:21:6c:38:45:83:20:35:
49:eb:42:4a:77:1a:ce:04:87:ec:28:4c:3e:54:4e:cb:61:5f:
b6:85:ff:ab:57:a7:47:9f:7c:d2:73:3b:96:43:60:04:4f:cf:
8e:a1:05:9d:2c:b7:6d:45:df:94:9c:d0:73:a4:9b:a6:b6:09:
3c:3f:06:f9:95:e6:a7:45:97:e7:6f:14:90:09:5e:e7:64:c8:
e1:b2:e4:5b:2c:8e:80:fa:7f:ec:f7:67:dc:d5:17:d4:bd:20:
ee:f5:ef:2a:c4:5b:e8:24:cb:32:53:be:f0:30:fc:e8:86:3b:
1f:05:ec:14:1e:44:72:fb:22:ed:b9:0a:31:3a:58:54:22:23:
10:4a:c4:1f:0b:06:b1:a2:4a:25:ce:84:f7:27:00:b0:64:7a:
39:2d:69:f9:e9:83:72:6e:77:81:81:00:f9:ae:a7:57:65:9a:
ad:57:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org