Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c71ea663-99c0-36a8-9bf9-307b112810bd.roa
File: c71ea663-99c0-36a8-9bf9-307b112810bd.roa (raw, json)
Hash identifier: eFlZ+CyTebjbWgwacaQ7L8rj+J4a9osVZ4ynv+HNFWk=
Subject key identifier: 6C:FA:03:6F:EF:B2:61:A5:05:42:C4:08:2F:DA:99:42:4A:41:0A:EF
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EAABC14514FA1DCDB1A353180
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c71ea663-99c0-36a8-9bf9-307b112810bd.roa
Signing time: Sat 23 Jul 2022 12:00:00 +0000
ROA not before: Sat 23 Jul 2022 12:00:00 +0000
ROA not after: Mon 24 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:aa:bc:14:51:4f:a1:dc:db:1a:35:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 23 12:00:00 2022 GMT
Not After : Jul 24 04:00:00 2023 GMT
Subject: CN=b66a0230-4ae9-4653-be89-980e530c71d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:b9:ef:54:55:0b:75:aa:82:a2:d9:5f:e2:
18:0c:11:a8:d8:02:cf:38:ca:ee:ec:27:61:ea:b6:
93:54:1e:a4:4c:e7:5e:c0:99:6b:a9:c3:e2:08:3c:
be:68:f5:b8:4b:f1:b5:45:35:87:21:c5:96:8f:fa:
b5:6a:94:f9:dd:5b:a9:90:cf:61:b2:ec:a5:20:82:
c0:84:db:81:0f:06:89:09:a0:91:bc:b6:48:d7:a7:
1a:4f:fc:4b:08:8f:bd:bf:79:a9:cf:63:6e:63:34:
a6:3a:51:f3:d3:16:61:ae:e0:7c:e5:41:da:aa:89:
50:5a:18:30:03:8e:9d:02:41:2a:32:54:e8:66:25:
8f:5d:7c:2d:73:5d:f5:cd:2b:9d:8b:c9:9c:26:47:
84:e2:02:e6:f5:52:42:e4:51:91:7f:33:94:c5:c0:
a1:ce:78:cb:e1:8c:3f:8f:07:d7:9e:0f:73:98:0e:
97:b5:3d:17:9c:56:38:2b:e0:85:96:5f:8e:a2:d8:
d1:7b:b0:59:84:3f:9e:42:d1:09:ad:d7:ab:65:11:
a0:27:8e:5d:cb:22:7b:c8:eb:35:10:b2:c4:59:b4:
42:4e:2d:1b:49:5d:c4:e2:f2:eb:e2:78:fb:92:dc:
af:91:34:af:11:4a:8f:36:44:74:0c:f7:72:aa:55:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FA:03:6F:EF:B2:61:A5:05:42:C4:08:2F:DA:99:42:4A:41:0A:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c71ea663-99c0-36a8-9bf9-307b112810bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:43:69:d7:30:92:be:4e:5c:ed:cb:e3:f8:0b:7f:df:78:4c:
bc:fc:fe:95:0b:f8:db:20:16:b5:33:a1:60:6e:f6:1e:b7:7b:
01:a5:fe:4a:ab:d9:e1:0a:b3:de:de:3c:7e:63:d0:ba:61:30:
2f:ba:ba:92:98:4d:cb:d0:23:84:7c:1c:5b:f1:59:ef:1a:7b:
10:92:ab:2d:29:6e:3a:78:eb:9a:aa:3c:0b:5f:fa:56:55:78:
a8:99:c2:cd:26:dc:a3:c0:42:11:62:1c:57:4d:db:9b:f3:e6:
89:55:3c:da:35:8a:68:04:1d:8a:01:02:ec:f6:28:ec:f5:f6:
c7:06:c9:4d:ee:aa:9e:70:b7:be:ff:8e:f3:e8:9e:56:4d:a1:
ff:c1:e0:da:2b:83:d7:cc:22:e8:2b:94:f5:b2:d5:26:f5:60:
4b:43:bf:91:3e:1f:5f:22:a5:c7:91:7f:7c:b5:4c:20:90:f3:
24:ba:87:bd:e5:1a:bd:00:78:17:e3:e1:3d:b2:cc:7e:17:41:
b1:ee:a8:ca:5e:94:aa:39:ea:7a:a2:44:29:68:3e:10:d8:b8:
72:68:c4:fb:fc:34:db:0c:58:c9:67:98:a4:0c:e4:c2:23:38:
67:68:35:6f:52:8a:2d:3d:cb:e8:c0:2f:8a:a2:69:78:60:24:
86:a1:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org