Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d81d61b4-6550-3ef5-b02e-515a07a9a8eb.roa
File: d81d61b4-6550-3ef5-b02e-515a07a9a8eb.roa (raw, json)
Hash identifier: AZL7YQ8ci4RrAk3zcEmh7Zhf7QGmfLE1v6EOOZdof8U=
Subject key identifier: 6B:7C:40:F4:01:8A:E9:7D:5A:5B:67:93:C4:ED:DC:79:D1:D3:AE:50
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CC26899D8A4AB46FA3DB792E0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d81d61b4-6550-3ef5-b02e-515a07a9a8eb.roa
Signing time: Sun 30 Jan 2022 05:00:00 +0000
ROA not before: Sun 30 Jan 2022 05:00:00 +0000
ROA not after: Mon 30 Jan 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c2:68:99:d8:a4:ab:46:fa:3d:b7:92:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jan 30 05:00:00 2022 GMT
Not After : Jan 30 05:00:00 2023 GMT
Subject: CN=da8d2af6-bb4f-4113-b386-885585d28106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:ef:7b:d9:33:f1:1e:41:85:52:ae:6d:da:
51:a9:8c:59:fb:fd:e8:f1:f6:89:f0:fe:10:31:b8:
15:b9:56:23:7a:2f:f0:48:9f:5e:2a:bb:a5:79:58:
76:e1:bd:db:15:a2:a6:e0:04:97:02:0b:15:f3:b7:
e1:53:d0:ae:ad:ce:52:54:4a:0f:0c:da:76:69:6c:
27:56:2e:78:1d:c1:46:62:62:c1:fc:ff:b0:3f:82:
8f:f0:b7:e9:60:a0:79:ea:6c:ef:9c:17:f4:e5:0b:
7c:38:99:36:b8:44:ea:2e:98:db:6d:72:58:50:56:
9a:7a:68:3c:73:ca:fa:76:7b:f5:1d:9a:e6:40:ac:
0b:2a:73:7d:59:93:f5:e4:d2:a2:82:cd:eb:e1:24:
24:e1:9f:0a:43:1d:5a:13:61:9a:4b:10:e8:7e:ea:
ef:f4:9c:b5:fa:f6:b3:78:92:78:76:e9:6d:02:da:
05:d4:b6:5b:bd:95:2c:f6:f2:36:71:60:73:9f:e2:
a7:dc:19:18:ea:e0:ad:4e:64:e1:23:85:95:e5:16:
03:72:a1:82:ec:bd:f3:95:e1:26:6a:7d:22:9c:8f:
5a:53:6a:23:0b:5a:43:eb:ae:a6:51:4e:c5:1c:b6:
57:e7:d0:f1:cc:46:cc:8d:de:c4:d7:f2:b3:af:1c:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:40:F4:01:8A:E9:7D:5A:5B:67:93:C4:ED:DC:79:D1:D3:AE:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d81d61b4-6550-3ef5-b02e-515a07a9a8eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:97:a5:50:65:e2:7c:a5:83:28:8a:a7:98:b3:71:fa:63:28:
96:9c:d5:3c:c5:16:af:88:4a:bc:ea:2c:42:2e:7c:d9:16:bd:
08:b0:74:58:1d:a6:d5:5d:a6:e4:00:0a:8c:36:26:7d:dc:19:
d9:a5:ac:b8:d8:4f:db:e1:29:c0:2c:77:e9:ba:b2:4c:bc:2b:
4f:cc:35:7e:96:a0:c7:7d:e5:57:00:58:2f:0a:42:29:29:96:
65:23:60:03:13:d1:c6:0e:2c:d0:23:6a:a8:5e:14:a9:c9:1b:
36:76:f8:5f:4c:9f:87:c3:82:6b:a9:e7:84:4a:91:da:99:30:
2c:e1:05:ff:30:3a:48:ec:98:b1:b7:d1:ab:34:ee:89:54:cc:
c8:06:1a:81:58:aa:64:f4:ab:4d:53:bd:1d:f6:9b:12:e9:7a:
2e:b9:2c:cf:76:c9:7d:97:d6:de:d4:f4:a1:24:81:29:52:94:
0a:7b:b3:87:21:a3:f3:45:f5:54:21:25:d4:bd:18:ca:ab:3b:
23:83:b6:e3:62:88:4f:07:14:41:bd:2b:fb:41:99:28:d8:e6:
a6:76:3b:f2:40:fd:ad:2d:0a:7f:c4:3d:88:0b:ff:d3:15:b8:
c8:1b:47:4c:3a:b1:11:80:70:dc:73:1b:12:ae:57:f5:e0:5b:
53:95:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org