Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ae4284df-46b6-3b18-aae0-19a2fa0e3f53.roa
File: ae4284df-46b6-3b18-aae0-19a2fa0e3f53.roa (raw, json)
Hash identifier: hw6xXDFzY4NL1mpMY2LJ2og/8YDETJIFReQT4+mdKeE=
Subject key identifier: 51:E1:A0:26:27:8E:3B:30:AE:04:8D:C4:6F:60:CF:65:1F:1F:B7:29
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FC78AE1B1A283AEE428C40080
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ae4284df-46b6-3b18-aae0-19a2fa0e3f53.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Fri 03 Nov 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c7:8a:e1:b1:a2:83:ae:e4:28:c4:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Nov 3 04:00:00 2023 GMT
Subject: CN=255f0a83-a2a6-4d4c-bf73-8b0837ee2587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:91:06:2b:a2:78:25:1a:3b:3f:5c:e5:58:
ef:38:0c:c4:c3:64:de:b7:59:f2:4c:3a:8a:4e:8a:
42:15:3c:02:de:4c:3c:b7:38:66:90:9f:65:d8:e3:
52:c2:73:87:8a:d5:63:b1:d1:6b:03:7c:47:af:f5:
f4:09:e5:fb:15:f5:66:39:bb:a9:46:0a:f4:b9:73:
3f:bc:be:3c:34:e8:ae:1b:57:23:e0:e5:e1:96:31:
de:43:91:7b:fe:77:b5:73:47:a1:94:69:3e:32:32:
31:52:ac:3a:9c:a2:65:59:10:31:f8:b5:c7:b4:12:
1a:27:b5:7d:83:fd:78:f4:9a:e3:a6:d9:b0:0d:71:
53:b2:6b:d4:38:02:64:a5:a1:4e:5f:c5:2c:81:55:
f6:62:9e:65:0b:32:46:29:f5:d5:ec:2d:1f:a3:c0:
d4:90:b0:75:e5:c3:12:53:28:53:0e:69:29:fa:a7:
a0:44:b2:74:9c:66:54:37:e1:9a:f1:09:f9:67:3e:
e8:98:d3:c7:92:83:b6:98:32:44:d9:9b:05:be:3b:
2d:34:9f:89:6d:fe:22:97:b7:dc:1f:eb:3b:3f:b8:
f6:98:7f:c8:ff:d1:50:ba:fa:17:51:64:d0:5d:0d:
8b:71:c4:95:12:75:cb:3f:92:0b:03:bb:19:5f:ea:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E1:A0:26:27:8E:3B:30:AE:04:8D:C4:6F:60:CF:65:1F:1F:B7:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ae4284df-46b6-3b18-aae0-19a2fa0e3f53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:9b:90:b7:2b:e7:eb:04:f0:0c:e2:6c:44:70:dd:3a:87:40:
b2:6a:ca:54:69:0f:37:80:19:3e:47:77:ab:87:c5:2c:ab:b5:
51:17:92:18:7e:50:86:01:5c:de:10:cc:d3:1f:1f:3f:97:a2:
dc:5c:eb:3d:c2:09:1d:c9:c5:6e:02:6e:0a:5c:19:15:4d:fa:
6e:e2:ac:6d:b9:e8:fb:de:f1:77:17:c0:33:d6:9d:e1:f4:fc:
9c:f0:44:24:4f:8d:d3:ad:2e:80:71:41:9e:ec:48:67:16:bb:
ed:e7:0d:c1:eb:fd:d3:86:57:56:81:f3:cf:ac:e2:bf:a0:6f:
b2:b8:05:50:3a:dc:ec:19:71:67:55:cb:55:56:2f:ac:24:f3:
40:94:f9:c9:5b:3f:93:c6:2b:c4:71:44:9a:51:bd:c2:7a:b3:
18:33:18:0e:00:2e:6a:76:cb:b7:7a:1a:2b:ea:9b:67:c0:d4:
73:54:75:75:43:10:73:60:7b:fb:71:4a:f3:b3:da:53:96:32:
56:b6:23:87:2c:62:5d:55:bf:3b:6b:55:3a:e6:42:e9:0d:25:
b8:dc:0f:43:07:fb:8f:53:64:f2:e0:af:9a:b2:64:87:b5:20:
78:fd:d6:a5:69:4c:2d:99:fb:e1:c4:9d:15:82:46:9d:9b:83:
30:c5:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org