Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d97b424e-4f4e-34e7-b56e-757de3d2716f.roa
File: d97b424e-4f4e-34e7-b56e-757de3d2716f.roa (raw, json)
Hash identifier: EKn0raF/3/FyxNKXjFN9KwU+NBYH5GZC4MbBNLWSAVU=
Subject key identifier: 80:2E:85:A6:6C:2B:60:CC:CA:D2:F1:87:5A:8A:91:DB:1D:10:FA:2B
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D972FE9BA54903EA91C9C8F80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d97b424e-4f4e-34e7-b56e-757de3d2716f.roa
Signing time: Sat 16 Apr 2022 04:00:00 +0000
ROA not before: Sat 16 Apr 2022 04:00:00 +0000
ROA not after: Sun 16 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:97:2f:e9:ba:54:90:3e:a9:1c:9c:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 16 04:00:00 2022 GMT
Not After : Apr 16 04:00:00 2023 GMT
Subject: CN=9ef2cfd9-9afc-42e5-bbac-8a632531a09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:6b:9f:19:31:62:92:ab:c9:60:c4:8f:25:
3d:9c:ce:3d:04:bf:34:7d:27:44:d6:c4:d8:4b:fe:
bc:5a:8f:13:f4:8c:ca:d1:fa:9b:42:e3:65:c2:6c:
dd:8b:56:27:d3:2d:bc:ff:9a:74:e1:5b:17:83:35:
eb:58:3b:69:3a:44:b8:ef:8f:07:9b:fd:9f:55:43:
65:ad:a7:38:40:0f:21:c2:2a:10:49:d6:45:ef:74:
e9:c7:70:8e:cb:03:20:6f:b4:bb:7b:12:a6:60:aa:
77:d2:1e:d5:ce:79:7b:2c:54:9b:35:d7:5d:37:38:
07:19:5b:5e:f8:5a:d9:80:69:2d:c9:c7:53:21:cf:
4c:64:1a:d4:d7:00:c5:e1:ef:60:30:89:79:a8:76:
9c:d1:d7:41:b4:60:95:cb:58:3a:9a:63:44:cc:f6:
dc:29:97:8a:4d:ac:e9:86:68:be:96:41:fe:d7:6f:
78:8a:5d:a2:55:b7:17:44:fd:ed:29:16:27:06:ce:
6c:64:a5:92:42:98:27:96:a8:75:ca:6a:4c:28:50:
09:1a:52:26:ba:9a:b4:1e:4d:29:b8:2b:25:dd:f0:
97:c9:e5:f0:b8:7d:67:1d:65:da:9c:27:f6:fd:88:
aa:7c:48:bf:19:57:97:54:36:a0:ec:c6:06:cc:5b:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2E:85:A6:6C:2B:60:CC:CA:D2:F1:87:5A:8A:91:DB:1D:10:FA:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d97b424e-4f4e-34e7-b56e-757de3d2716f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:19:3f:bb:cd:e8:31:5e:57:02:77:fe:3b:8d:09:c0:6e:6b:
b1:3d:fa:34:45:ce:6e:87:51:74:54:01:b5:9b:2c:bb:75:3e:
4f:f7:ec:e7:a2:2b:77:4d:0e:1c:aa:ea:e7:7b:bc:5c:02:03:
c4:6b:95:f5:bd:28:d7:af:9d:c7:cf:d3:ad:d1:0b:ab:bc:5b:
be:0c:71:6b:aa:ef:f3:dc:92:7c:65:3c:6e:3f:46:cc:2b:0f:
64:c3:aa:71:41:cd:cc:9a:62:6c:f5:ef:cb:0b:d6:44:97:6a:
e1:c9:3e:4c:46:e5:98:6a:dc:a8:f2:13:ec:6d:65:b5:31:14:
0a:17:17:cb:19:31:b1:4c:8a:c1:41:94:ba:85:d9:b1:0e:98:
a2:94:8f:48:53:96:43:d8:1c:17:a4:2a:9d:fa:13:1c:f9:d8:
69:9a:73:73:d6:5e:7f:9a:2f:d5:eb:28:14:80:a6:42:51:56:
90:a1:c6:bd:62:64:0a:65:5f:45:1e:13:70:0f:e7:8f:76:2e:
db:f1:8b:d7:49:82:f0:24:06:cb:7f:39:3d:dd:7d:73:3d:50:
48:5e:cc:92:f8:e5:e4:3e:2b:02:c1:04:90:5c:a3:ce:8a:76:
55:95:cc:41:f0:57:80:eb:d4:d0:49:6c:72:11:19:5b:df:aa:
3e:0e:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org