Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b43bb5a1-1ba3-35e5-b98e-27221c3fb6f1.roa
File: b43bb5a1-1ba3-35e5-b98e-27221c3fb6f1.roa (raw, json)
Hash identifier: FFUbOnGifBIwO5fZs6qvSCnhibDpNYMHPAyw7LSDzw8=
Subject key identifier: A4:F3:D0:20:A9:2A:E7:16:5E:AA:4F:E9:D9:96:B5:B1:68:9C:C0:0B
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CF4E1BAA24832355348EA4F00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b43bb5a1-1ba3-35e5-b98e-27221c3fb6f1.roa
Signing time: Thu 17 Feb 2022 05:00:00 +0000
ROA not before: Thu 17 Feb 2022 05:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:f4:e1:ba:a2:48:32:35:53:48:ea:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 17 05:00:00 2022 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=6216b25f-8fd9-4b39-94e0-471c4c31f3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:12:07:62:44:be:e5:8a:c6:4f:6e:e3:76:
41:5a:4f:77:89:7d:b5:df:0a:f1:93:53:c6:55:b7:
2a:e9:42:c2:34:c5:a7:77:2f:51:b9:69:a8:74:19:
e8:54:2c:21:b3:e3:be:f4:2f:2b:f6:e7:59:d5:1b:
d9:80:f0:61:70:ed:58:ef:39:2e:ff:70:2b:8b:0f:
d7:80:3e:4c:73:98:6d:63:24:02:bd:93:0b:88:55:
6b:56:b3:41:be:c1:91:32:b5:02:29:9d:2e:1d:e4:
cc:dc:2a:06:f2:c8:09:bb:5a:ce:b4:0f:0c:ba:57:
80:b8:47:70:1f:ce:9d:bb:2c:93:ff:db:5d:a5:cd:
17:b4:a5:ec:0d:bb:f0:fe:38:bf:06:55:25:26:84:
17:f9:b7:e0:57:0e:15:ed:3c:24:cc:13:43:db:bc:
fe:b9:a7:23:d3:3f:6b:e2:1f:65:d1:ba:0f:71:05:
02:cb:4e:35:df:cb:81:de:c5:85:e7:55:ee:42:c5:
7f:df:a8:59:4a:1f:2b:57:49:9e:f4:56:4a:ad:d5:
09:b6:eb:32:fa:92:5a:f2:bc:e6:90:5f:69:24:7e:
fb:27:2c:c8:b3:b1:c8:5e:86:11:3a:a3:93:00:65:
69:ec:53:f4:29:4a:94:02:06:78:c5:bd:02:c4:65:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:D0:20:A9:2A:E7:16:5E:AA:4F:E9:D9:96:B5:B1:68:9C:C0:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b43bb5a1-1ba3-35e5-b98e-27221c3fb6f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:a9:41:90:56:d1:12:68:75:cd:da:81:3d:75:85:57:25:6d:
08:06:df:0e:28:16:1f:e4:ed:bb:84:75:04:1c:39:e4:55:c2:
d7:7d:c4:8c:a2:7a:a2:30:91:cc:3d:e1:70:15:10:e9:56:20:
ee:94:33:a5:7f:87:c9:80:49:c8:ca:71:f0:77:63:ea:89:8a:
4f:24:18:52:c7:21:29:da:7d:0f:bd:e9:0b:b3:99:fb:c5:8e:
ad:2b:aa:b6:8f:90:c0:3f:7c:68:84:2e:8b:ff:21:f0:d8:cf:
f0:4c:f9:a7:5f:41:b5:e0:d9:4b:a4:8e:0a:b2:48:a9:ff:c7:
b3:05:d2:0b:9c:50:22:ea:da:2d:7a:2c:03:d3:a0:c2:36:7f:
c9:ba:55:42:86:e3:64:af:58:9d:20:f0:f5:15:2f:5f:31:9b:
32:70:f2:f9:9e:59:24:3a:1d:27:a7:ee:dc:66:ed:c2:da:85:
83:d5:fb:4c:ec:dd:b9:8a:2c:75:65:65:61:bc:d2:bb:b5:8b:
5a:09:0e:d4:fb:16:cd:a6:8b:3e:b7:b9:a1:3a:88:7e:c9:02:
42:78:9b:f8:f5:1e:36:91:19:67:fd:87:51:91:2d:b0:8b:53:
47:ff:fa:29:29:bd:b0:13:9f:76:66:5a:4f:30:db:22:12:c6:
a4:ea:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org