Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d4c017a1-5b90-3523-9157-aa72a155117c.roa
File: d4c017a1-5b90-3523-9157-aa72a155117c.roa (raw, json)
Hash identifier: JwpIZ6PJzbVObtT6IDi4EzjZV0DP0mnBFRU46uawFhE=
Subject key identifier: FD:6A:24:82:6C:33:57:F4:30:43:EA:69:81:CC:5D:A1:41:F8:80:F8
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328584018988B987FD872810F0A2F80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d4c017a1-5b90-3523-9157-aa72a155117c.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Sat 02 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:18:98:8b:98:7f:d8:72:81:0f:0a:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Dec 2 05:00:00 2023 GMT
Subject: CN=d2ca30d0-e8dd-4892-8ab6-4e242f61016a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:ea:60:e1:e0:c5:fd:5f:5c:78:54:45:55:
4a:65:81:42:39:68:67:12:76:50:49:f2:e2:4c:50:
1e:6f:b5:c1:1d:15:6f:79:45:73:e9:b2:d1:da:e3:
e8:ac:a1:02:9e:a8:85:99:4d:07:a4:42:1b:4a:56:
0b:8b:cb:01:bf:ba:46:45:d9:9e:86:66:37:ac:94:
ee:a8:eb:cf:54:80:84:d4:38:31:67:a3:70:d4:57:
a9:a4:a3:75:78:1b:42:53:50:ea:dd:06:47:64:89:
d4:85:53:de:a7:ef:f6:38:0c:7b:8b:80:12:75:e8:
47:c3:e8:80:48:24:37:9a:90:1a:9c:d6:15:39:8f:
11:fd:83:a9:8c:b8:bf:3b:18:ea:b1:d6:f2:8b:5b:
fe:71:b2:e8:6d:da:ef:45:60:f9:5d:84:91:2a:a1:
7e:77:27:40:90:7a:04:09:45:4e:ef:1a:ca:f8:1f:
3b:a8:c2:67:06:f7:ab:8e:bd:10:f7:be:89:03:97:
f1:97:4e:fd:5e:f6:e7:bc:b7:e9:e1:52:62:be:c2:
f6:57:23:1e:fa:e3:e5:44:5d:95:87:1c:bb:68:b8:
14:6f:6d:41:a6:a7:19:57:c3:d1:14:e3:11:04:e6:
c4:6e:0a:0a:3a:c2:2c:df:15:40:08:86:44:34:1e:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6A:24:82:6C:33:57:F4:30:43:EA:69:81:CC:5D:A1:41:F8:80:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d4c017a1-5b90-3523-9157-aa72a155117c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:4e:01:0e:b8:f3:df:2a:c3:f5:e0:1b:15:69:f6:a6:87:67:
45:66:bb:e4:23:09:57:52:7c:1e:88:fa:0d:37:04:41:fb:b2:
e5:22:1d:ff:1d:69:44:f7:a4:75:7c:1b:ef:af:6c:13:95:0b:
be:9e:91:b3:54:4d:cd:78:80:5c:f6:02:34:86:81:6b:b7:64:
a5:45:79:f9:de:d0:ba:fe:64:db:f1:48:11:26:9e:20:a6:b4:
7a:de:4f:68:d7:a7:a3:e8:89:e5:a7:6b:bf:0a:9c:74:b0:9b:
3d:a0:09:7a:09:7d:4f:64:e3:1b:52:e7:bb:55:13:94:3d:cc:
34:ec:4d:35:37:8e:a9:d4:1f:3b:48:a0:b8:00:a4:c5:2c:0b:
d6:42:06:d6:e4:6f:ae:40:ba:72:9f:63:71:ef:ff:7d:d0:64:
61:f8:67:23:6d:98:26:ac:7e:cd:df:e3:09:40:1b:40:27:eb:
60:74:56:07:e4:f7:6e:44:97:9b:e4:0d:d2:71:8c:fa:88:41:
3e:ed:8e:70:08:72:56:f0:7e:1d:e3:92:e8:7a:8e:24:59:dc:
a3:fa:81:a8:4d:71:55:a8:cb:a4:e3:37:27:86:12:1f:0d:d1:
c1:b2:9b:fe:f7:b9:89:9a:82:3e:8c:73:9c:79:be:c0:bf:30:
d8:22:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org