Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c071acb9-24f7-3d6c-9cce-408ee70c2456.roa
File: c071acb9-24f7-3d6c-9cce-408ee70c2456.roa (raw, json)
Hash identifier: xGzJTybxPAMGAiIhfxynwZNcAG1JHy0FIA6qv4qPcbc=
Subject key identifier: 17:2B:94:B1:83:C7:DD:9E:13:96:85:1E:60:10:76:5A:31:4F:C6:32
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DB55348E95592D994DDDD5980
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c071acb9-24f7-3d6c-9cce-408ee70c2456.roa
Signing time: Tue 26 Apr 2022 12:00:00 +0000
ROA not before: Tue 26 Apr 2022 12:00:00 +0000
ROA not after: Thu 27 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b5:53:48:e9:55:92:d9:94:dd:dd:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 26 12:00:00 2022 GMT
Not After : Apr 27 04:00:00 2023 GMT
Subject: CN=41d96d6c-c6c2-4820-9834-34bd7bb793e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:7f:d7:46:f0:ca:a3:1c:dc:37:9e:34:db:
af:14:2d:fb:13:81:ef:21:8f:5f:cc:46:05:80:75:
2e:64:9a:bf:e5:93:d8:87:1b:e5:8e:ad:b3:2d:e5:
d9:c3:c1:d1:ed:f4:65:45:50:14:64:54:d1:22:b6:
8f:0a:c6:3a:fd:03:1a:63:05:2a:59:06:1e:c9:f1:
d1:b6:13:43:90:e9:70:b5:b2:ad:2c:bd:6c:84:b8:
85:02:32:f9:7f:0f:3e:4c:d7:cc:a2:95:34:db:38:
47:26:74:b3:c0:47:65:f3:50:59:3e:c5:ac:a2:b0:
a9:fd:bc:2a:08:aa:ca:0e:0c:c4:8e:ff:a5:b9:6b:
7d:02:33:5c:c2:9b:ae:f9:4e:e6:95:0e:79:cb:14:
57:71:97:eb:8e:d8:a7:47:71:f4:3c:4f:e9:0e:71:
a9:c9:b0:e2:c6:f3:77:58:75:1f:00:45:14:5f:20:
e5:c5:cd:28:68:2e:84:89:4a:2e:52:b0:78:9b:81:
a9:a9:ae:82:4d:ee:19:34:a9:59:85:4d:5f:08:82:
9c:b7:b7:c5:84:ba:7d:5f:d6:01:6a:73:1f:0b:6a:
b3:e8:29:45:b4:40:88:d4:01:9c:7a:c4:57:d3:89:
9b:1e:a2:cf:63:dd:ff:0a:1e:d6:3e:89:7e:bc:89:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2B:94:B1:83:C7:DD:9E:13:96:85:1E:60:10:76:5A:31:4F:C6:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c071acb9-24f7-3d6c-9cce-408ee70c2456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:2d:8f:50:41:80:1c:ec:a3:6d:fc:8a:06:3c:53:e5:af:24:
2d:81:a0:07:d2:a3:ba:4d:30:f5:8a:7d:1c:f3:b1:33:b5:14:
99:54:e1:07:5f:4a:05:7a:09:7b:18:bb:e7:4c:be:7e:ef:41:
97:d9:d5:a5:ef:c4:f5:f3:11:0e:51:73:18:59:79:9a:7c:06:
ce:71:41:20:08:2d:53:ef:86:76:d6:1e:f3:a2:43:38:49:b6:
ab:65:b1:17:52:1e:47:bb:3c:86:53:c1:8b:9b:b6:64:14:07:
68:fc:96:b3:9a:39:d9:4c:74:6f:a2:85:d8:44:54:47:cb:95:
8b:2c:22:44:93:ab:f2:67:b6:c3:b3:60:41:0c:6a:b8:8b:ef:
ea:4e:95:4a:77:c3:17:1f:91:29:72:6d:3a:e8:f9:e1:2c:75:
17:88:04:59:fb:cb:c6:b1:3f:23:70:0b:34:00:90:5d:99:5d:
56:a2:42:d5:13:b3:52:06:91:94:6e:3e:e0:38:58:67:a3:c5:
d4:7d:31:29:6c:8f:1d:45:8d:68:27:06:84:df:cf:30:84:2b:
0d:29:76:f9:c0:4a:52:f5:66:4f:dd:f1:33:3e:61:a1:0a:95:
e6:12:c5:d1:75:99:77:c1:df:6c:45:a7:ee:dc:63:08:07:c3:
83:b3:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org