Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ce688734-9937-30b3-8b9e-28557f14bdf6.roa
File: ce688734-9937-30b3-8b9e-28557f14bdf6.roa (raw, json)
Hash identifier: Ckv27yrz+n6v9+L/k0q67QodQb/tFyB538HYk9R05r8=
Subject key identifier: B6:A1:D3:67:C1:61:4B:07:64:F7:01:95:FF:79:43:9F:C3:C4:CB:FB
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E171D2A6988713DA4C0C85000
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ce688734-9937-30b3-8b9e-28557f14bdf6.roa
Signing time: Tue 31 May 2022 12:00:00 +0000
ROA not before: Tue 31 May 2022 12:00:00 +0000
ROA not after: Thu 01 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:17:1d:2a:69:88:71:3d:a4:c0:c8:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 31 12:00:00 2022 GMT
Not After : Jun 1 04:00:00 2023 GMT
Subject: CN=cc8fdcaa-b00a-4035-b288-dbf4ebc33d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:c9:0d:4c:fb:58:00:ec:e1:d0:76:1b:ed:
83:1e:59:c8:46:dc:f6:7c:86:2b:c8:5d:00:b5:e3:
a6:63:40:5b:82:16:ae:3b:a8:f0:d0:48:83:09:bf:
40:c2:74:72:fb:48:7a:14:5b:1a:0a:f6:f4:dd:08:
78:7b:4a:89:6e:33:6f:3e:0e:aa:98:b4:3a:a7:bf:
b2:40:83:b4:70:db:5e:fe:b0:24:7a:f0:e4:28:90:
b2:75:73:93:79:90:4b:0d:c4:ca:41:4f:87:f8:0d:
b1:36:e2:dc:3a:a0:cd:7a:c9:2f:fc:97:8b:e5:18:
07:b2:6f:f8:43:a9:15:a3:8a:a7:60:82:de:1f:08:
72:61:31:7c:51:8a:8a:2d:87:25:63:29:8d:7e:16:
44:e3:f4:98:3f:d0:af:ad:a6:e0:e7:e7:6a:0d:4d:
29:95:16:6b:c6:af:28:10:3f:ce:a9:06:3b:68:a4:
35:5b:f7:59:f2:0e:74:0d:1c:6b:4c:ad:8c:ba:8d:
dd:d7:ef:df:e0:90:30:d1:1b:73:62:c2:37:47:6d:
c5:38:7e:e7:d0:3d:7d:db:54:6a:a0:bf:8c:94:7d:
6f:21:02:7e:ad:10:37:ba:94:70:84:a6:14:25:f6:
c8:14:4d:d6:d3:bb:e1:bf:98:c5:17:6d:e3:58:84:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A1:D3:67:C1:61:4B:07:64:F7:01:95:FF:79:43:9F:C3:C4:CB:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ce688734-9937-30b3-8b9e-28557f14bdf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:80:07:3f:fd:bd:01:47:c1:86:b3:d0:4d:c0:47:f2:34:c5:
cd:41:aa:58:e7:32:c8:e4:90:47:3b:db:ce:b9:fe:46:8c:93:
1a:4b:57:95:4d:99:35:2e:22:33:d5:c6:b8:bd:62:7d:79:aa:
8b:ed:2d:0e:ca:6e:db:b2:0f:b7:6b:67:1d:30:16:13:08:d7:
20:fb:c8:5e:2c:a4:31:9f:83:7e:ec:ee:b6:8f:24:0f:93:48:
65:6a:77:ca:38:40:c1:29:fe:bd:04:13:1c:bc:e0:9e:71:f0:
fe:dc:49:5c:b9:8b:dc:dc:65:48:bc:f9:60:e8:a6:1a:4a:fb:
69:4b:f0:af:05:dd:a7:eb:20:5a:fa:1e:21:d4:b7:f9:de:70:
91:54:ce:a9:af:58:3f:1a:87:ed:2d:65:20:4b:ff:5a:34:ed:
5a:fe:b7:51:14:ba:fd:d0:03:b8:26:e9:96:2f:35:91:32:69:
99:5a:83:4d:56:3c:23:34:8a:b6:4e:5e:8e:a2:85:8f:79:da:
1b:1e:e9:1c:69:9c:e5:9c:ea:1f:af:9d:fb:9c:88:e2:78:e8:
b5:6e:10:04:4e:1b:c1:01:82:c9:b9:3c:e3:44:db:d1:73:3e:
70:25:3a:db:f0:85:53:5f:0e:b1:3d:7c:59:d2:16:73:de:5a:
3d:ce:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org