Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c8ca8d59-6bdb-3d3b-b043-d4bb20817bd8.roa
File: c8ca8d59-6bdb-3d3b-b043-d4bb20817bd8.roa (raw, json)
Hash identifier: B0UcmZXD3UKCbqxLn2iu1xxHLGdnksjpHHIeldijddA=
Subject key identifier: AC:4A:6E:6A:7B:CE:25:71:EC:DA:EC:5E:92:B5:D2:90:00:93:2E:A4
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F60869FA4A6A35A5544CFF3E0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c8ca8d59-6bdb-3d3b-b043-d4bb20817bd8.roa
Signing time: Mon 26 Sep 2022 12:00:00 +0000
ROA not before: Mon 26 Sep 2022 12:00:00 +0000
ROA not after: Wed 27 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:60:86:9f:a4:a6:a3:5a:55:44:cf:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 26 12:00:00 2022 GMT
Not After : Sep 27 04:00:00 2023 GMT
Subject: CN=0e8ab141-7ddf-4ee2-9853-3f5c3b4c9a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:6b:21:11:7b:6b:81:32:cc:bc:82:c3:d0:
5f:f0:77:ff:cf:9c:65:02:39:fe:8f:05:d0:18:29:
3f:16:f1:fb:70:a9:e7:fa:3c:d2:21:c4:9e:45:45:
e6:a7:f7:a3:1f:fa:f8:84:8d:31:64:24:74:50:1f:
f1:1b:76:e0:8e:7e:45:f0:73:88:f2:1c:a5:34:05:
4f:41:3f:b8:7c:cb:6f:8e:f7:b6:2e:27:be:55:f6:
ae:02:47:07:2c:8d:ec:f0:bf:64:76:d9:74:3a:14:
d6:51:17:9d:2d:33:1e:2a:29:a5:e3:ec:64:fe:39:
8c:71:b7:9e:b3:5f:14:c3:2c:a6:77:d8:99:6f:21:
25:41:87:a5:40:21:d8:db:e7:ae:f8:0c:26:dd:0c:
99:2b:12:9b:2f:02:49:43:7d:ef:1f:7d:9b:90:33:
fc:48:d9:1a:7c:83:85:26:c4:14:13:b3:a9:ad:79:
68:fc:05:e4:21:66:70:e2:4a:ea:91:ce:60:0e:e4:
14:b8:01:15:b0:d0:81:1c:fa:7f:2b:94:6f:b2:38:
c0:f7:ab:da:be:38:56:47:66:0a:d3:4f:ec:01:fe:
6b:3d:ba:66:c2:ec:67:d7:50:2b:f8:57:3c:20:6f:
28:61:b3:d5:d8:34:12:ea:41:c3:cf:a3:2b:a1:8e:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:6E:6A:7B:CE:25:71:EC:DA:EC:5E:92:B5:D2:90:00:93:2E:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c8ca8d59-6bdb-3d3b-b043-d4bb20817bd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:1a:59:5c:dc:41:52:2f:b5:cb:a8:bc:d8:53:05:41:5a:50:
a5:f9:02:fa:90:0c:7c:8b:5f:03:3d:3e:18:56:c2:1a:77:04:
1a:2d:e5:c8:06:35:43:a2:73:4c:a6:15:7d:6e:f7:6c:d2:64:
55:2f:da:f4:12:ff:d9:38:8e:7b:a6:ba:30:4d:b9:38:1b:13:
30:63:c1:de:74:bd:61:b9:68:ed:bf:f6:49:59:4d:3a:4c:b2:
d2:5e:38:ad:f0:23:79:e6:d5:b6:23:84:0c:57:5b:4d:ff:10:
c9:c8:8a:94:28:c9:c1:fa:fe:31:28:ff:09:0c:1f:ce:db:1a:
81:4e:dc:ea:f6:4c:7f:34:bd:67:1c:ce:c5:e8:6f:d3:e5:aa:
eb:6e:5b:b8:65:98:38:a1:e8:d9:56:3f:99:07:08:50:3a:1f:
a1:57:e8:62:0b:8b:f4:18:6a:d2:bc:ae:f9:03:58:d7:13:8e:
e2:2e:24:7d:55:40:09:21:dd:95:3b:4b:a8:20:26:35:39:01:
8e:dc:6f:af:78:f9:54:61:e8:5f:ce:ce:70:d1:ca:28:9e:be:
9b:6e:43:44:49:38:7d:c3:ce:ad:1f:e6:f5:56:f6:fe:0d:51:
29:52:1b:64:62:6e:20:14:61:c0:ad:d9:9d:8d:b7:66:c9:55:
1d:6d:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org