Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/cf348839-5c00-3f72-b2c3-1d47545e7621.roa
File: cf348839-5c00-3f72-b2c3-1d47545e7621.roa (raw, json)
Hash identifier: cvNQi0sGNSCPcjxYBNmqTf7I/yKfbjOHdU1Xta0Dh5E=
Subject key identifier: 04:D0:FD:8C:9F:5F:EC:3B:70:6E:E5:CD:A1:C3:F3:C3:DF:95:9C:FE
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E7E8102864D0D7F6C8385CF60
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/cf348839-5c00-3f72-b2c3-1d47545e7621.roa
Signing time: Thu 07 Jul 2022 12:00:00 +0000
ROA not before: Thu 07 Jul 2022 12:00:00 +0000
ROA not after: Sat 08 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:7e:81:02:86:4d:0d:7f:6c:83:85:cf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 7 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2023 GMT
Subject: CN=eeb0f174-90f4-4abe-a521-1d3dd953f42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:ec:a8:f7:60:4f:27:5e:03:b3:a0:d0:54:
01:15:26:44:0e:be:22:20:b8:98:5d:95:8c:b7:02:
eb:b2:a3:13:2b:1b:38:53:6e:2b:c5:6a:2d:27:34:
18:58:da:1c:57:45:e7:25:ee:f5:11:98:be:fc:d9:
75:ea:8f:6c:82:d5:28:e2:9e:70:c0:18:d1:6e:32:
19:6e:cf:b9:0f:8e:31:a9:80:f1:83:93:19:53:97:
6c:66:93:e2:07:97:c3:b8:16:ff:ba:8f:cb:2a:0c:
70:2d:bc:93:b1:1b:44:e1:29:5b:e4:7f:c9:a8:30:
31:17:03:3c:ce:25:f6:76:1e:5f:f4:9d:8b:e4:ae:
fe:ad:80:d7:cc:f9:87:4e:c7:e7:da:34:3a:b3:47:
6f:99:2c:9e:3e:fc:17:17:81:03:5a:f5:3e:1f:ad:
53:a5:ce:7d:38:97:75:fe:6b:dd:ea:4b:ff:c9:8f:
81:1f:16:9f:81:d0:e2:5d:05:ed:b8:ac:cc:0c:55:
74:62:a4:82:c3:78:10:ca:9f:de:2a:a4:b9:75:0b:
0d:fc:83:45:35:3f:92:4a:4b:74:c2:68:45:07:71:
08:49:fa:54:a6:7e:d8:07:4d:e4:19:89:ff:29:28:
79:72:4d:4f:d3:8a:87:2e:d3:79:b4:1e:e0:b1:14:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D0:FD:8C:9F:5F:EC:3B:70:6E:E5:CD:A1:C3:F3:C3:DF:95:9C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/cf348839-5c00-3f72-b2c3-1d47545e7621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:c7:77:cb:d1:2b:84:c2:52:e7:16:78:fb:c0:c7:81:12:f1:
d0:90:9f:df:49:aa:ab:0c:90:50:c6:86:f3:d8:b1:a7:19:fa:
c5:09:11:f7:98:29:78:dd:14:65:34:4d:8f:fb:4e:f6:40:2c:
60:ca:0f:10:5e:e1:fe:1f:83:46:9c:42:19:69:8f:e7:ec:54:
63:3e:f0:f2:65:b1:c3:94:53:31:b4:be:6f:f2:b5:46:0d:56:
0e:4b:a1:af:b0:43:23:3d:17:bb:6a:ff:2b:a9:25:ae:73:a3:
79:eb:fb:63:c9:be:8a:52:d2:64:dd:3b:9b:05:fe:d0:a9:54:
80:c7:36:de:94:10:8d:9b:fe:f0:4f:68:04:a3:94:e4:de:2c:
c5:df:f1:d9:4a:9f:c0:95:7c:fa:df:88:f1:e9:f0:00:38:4c:
3b:81:cd:dd:2e:15:2f:5e:34:74:82:9f:62:9e:d2:43:37:13:
43:11:54:86:2c:d6:10:fe:72:59:09:6e:da:d3:94:66:4f:74:
e7:22:d4:4f:39:ea:da:bc:ad:59:37:d1:d2:d5:84:f1:c3:4f:
17:95:6d:09:d4:68:0e:2f:8d:40:5a:7b:40:a8:79:ca:7f:ba:
dc:63:61:89:a2:d8:c6:96:86:bb:ab:96:22:79:28:d5:fd:ac:
d2:76:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:52 2023 by rpki-client on console-fra.rpki-client.org