Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d3c578ac-d2d8-3ea4-8963-4f20a1566a33.roa
File: d3c578ac-d2d8-3ea4-8963-4f20a1566a33.roa (raw, json)
Hash identifier: tMwalhvPAiu5S6Cu0uxPLWA+jZZEgD7EhkZlqzWb/bQ=
Subject key identifier: DD:95:84:44:17:68:1C:BB:11:6E:C5:5C:19:0B:C2:E4:F4:7E:52:CB
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DB84B9F9BD9D2EE51F978B7C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d3c578ac-d2d8-3ea4-8963-4f20a1566a33.roa
Signing time: Wed 27 Apr 2022 12:00:00 +0000
ROA not before: Wed 27 Apr 2022 12:00:00 +0000
ROA not after: Fri 28 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b8:4b:9f:9b:d9:d2:ee:51:f9:78:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 27 12:00:00 2022 GMT
Not After : Apr 28 04:00:00 2023 GMT
Subject: CN=917480dd-d70a-4a24-a252-93b7cfbd02f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:33:59:20:02:ab:c6:aa:13:da:0d:9f:d3:
9d:58:3c:3f:96:23:62:bd:34:50:fa:bf:96:dd:80:
df:00:ec:9e:72:f8:33:13:2c:74:bb:a5:e6:6f:b7:
76:d8:98:4c:cc:93:25:98:38:05:56:19:7d:f6:7c:
e1:bd:32:2c:c8:ec:cb:f8:52:e6:3c:66:45:b3:a0:
fe:a6:a7:6b:3c:a9:32:67:5f:03:cb:58:ad:af:cb:
a9:74:47:b4:56:6a:fd:bf:69:59:b3:97:22:21:fa:
c2:7e:4d:10:72:85:0a:40:79:af:19:06:8c:06:c0:
bc:93:73:c0:c1:38:b1:28:65:a0:a4:3f:18:58:ec:
8c:03:c3:39:cb:fb:0a:ce:c3:86:4c:98:7c:63:50:
cd:22:86:ea:09:2e:96:08:05:57:fd:0e:62:9e:3c:
70:94:f0:46:1e:3a:17:75:e0:52:83:bf:d1:73:04:
be:91:4c:cd:1e:77:69:4a:04:c5:1e:ed:dc:e7:62:
30:c7:0a:00:8f:b6:61:f1:1e:c0:9a:8f:29:b2:87:
9c:03:55:97:29:eb:17:cc:de:c8:61:57:f2:0f:ae:
99:4c:26:68:12:ee:7c:f3:42:54:ea:88:ec:d2:2e:
dd:5b:3f:e7:da:be:4b:f1:a0:67:6d:e7:2f:9c:93:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:84:44:17:68:1C:BB:11:6E:C5:5C:19:0B:C2:E4:F4:7E:52:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d3c578ac-d2d8-3ea4-8963-4f20a1566a33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:36:28:34:c4:b3:7e:ea:8b:fc:08:c7:ae:1a:8a:93:f8:01:
31:a7:46:1c:e3:68:18:5b:b5:26:f7:af:50:6f:80:0c:5b:be:
2d:88:2a:d5:ad:f0:a5:ed:b5:6a:66:0b:26:ff:35:ef:28:ba:
81:39:f2:25:e3:c7:14:5e:d3:f0:67:0c:d4:1d:3a:e9:56:b5:
b7:ba:8f:90:d0:ea:3c:9f:5b:a1:70:9e:75:a8:d0:e1:1b:be:
05:55:c0:b6:76:83:42:70:bf:71:5b:6c:fd:69:b0:f2:e6:c4:
e8:cd:1d:64:d8:6f:76:c5:52:9b:54:16:99:eb:18:63:a5:c1:
f7:b5:6e:c6:5b:a2:60:88:b8:2f:d4:86:97:84:68:ba:40:8d:
44:76:75:77:3b:7a:d6:50:49:77:5d:31:b7:92:7f:ed:aa:79:
dc:3f:08:dc:42:92:6b:8c:38:30:11:da:ba:20:22:a8:83:40:
3c:b4:9d:27:61:ea:8b:33:7d:45:1c:19:b3:2f:fd:7e:b0:b4:
66:07:d4:52:0a:07:84:f2:94:04:ad:75:77:08:73:6d:03:bb:
9d:f2:30:c4:be:0b:5b:e2:96:8f:85:ed:b8:cd:05:03:45:33:
b8:4d:d8:44:9a:64:5d:0a:27:ad:8a:48:42:41:2d:7b:ff:4a:
fd:92:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org