Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/da34a959-f39a-3bf1-86ca-28f0468a0128.roa
File: da34a959-f39a-3bf1-86ca-28f0468a0128.roa (raw, json)
Hash identifier: a3GyIZFuPQW19AKjpb5YpBuTwAG7ssjotHmQME6oGoQ=
Subject key identifier: BC:B0:6E:24:B9:8D:33:3E:8A:D5:9C:1F:CF:28:84:6F:2C:56:69:9B
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F432858402C7410EC2D4F1A22F207ACE0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/da34a959-f39a-3bf1-86ca-28f0468a0128.roa
Signing time: Thu 08 Dec 2022 12:00:00 +0000
ROA not before: Thu 08 Dec 2022 12:00:00 +0000
ROA not after: Sat 09 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2c:74:10:ec:2d:4f:1a:22:f2:07:ac:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 8 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2023 GMT
Subject: CN=af24dc98-e42b-401c-8204-af0d0c72732b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8f:e3:0b:0e:a6:f8:65:f5:9b:1b:e5:7c:35:
76:53:e7:b8:0d:5b:6e:f1:2d:2d:b3:3a:85:b7:40:
0f:8b:62:df:96:9c:c8:ab:55:5f:fe:59:6b:e2:38:
cb:46:bd:8e:d4:77:42:27:90:d9:e1:e2:dc:b3:85:
31:47:35:e7:de:ea:77:d3:02:af:6e:bb:2b:31:c8:
94:68:4f:e6:f5:34:3d:6d:fe:99:d1:0b:e9:22:bf:
32:48:a9:88:b0:88:db:64:65:7f:0e:ee:b1:16:0e:
1f:57:c0:8b:a1:ef:06:43:91:6a:06:2a:af:3f:09:
73:dd:31:2f:50:7e:90:eb:03:90:bf:a5:8e:7c:82:
9c:4c:ef:8b:f0:68:90:4c:ec:b1:0e:e2:dc:b5:24:
6c:94:1c:24:23:da:62:79:d6:4b:38:13:a1:c3:e0:
1c:bd:bf:16:c7:0f:a4:e1:f6:cd:f7:16:48:29:13:
a5:09:88:ec:3d:62:b8:d6:6e:0a:82:e5:d4:b1:52:
40:4b:fe:89:aa:02:ce:3f:f1:a7:cc:78:96:c6:e0:
a7:df:c5:ad:6e:05:a7:bd:50:dc:2d:26:40:a0:4b:
fc:a9:20:76:97:4c:11:ca:4f:0c:b4:66:62:9d:fc:
ce:7a:82:58:bd:cc:ca:7f:a9:6a:23:00:d3:81:b7:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:6E:24:B9:8D:33:3E:8A:D5:9C:1F:CF:28:84:6F:2C:56:69:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/da34a959-f39a-3bf1-86ca-28f0468a0128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:cf:da:92:06:91:12:6b:3d:42:e9:e0:72:39:8b:66:cf:9a:
a7:f3:e9:51:fc:84:5b:27:9e:b3:d6:08:ac:b8:aa:5b:69:ab:
2b:06:84:76:97:f2:e8:e0:47:f9:77:10:16:7d:16:be:ce:3f:
76:dd:74:ad:94:11:4b:74:00:0e:76:78:89:63:ba:12:2d:a0:
ad:02:76:05:c1:fc:bb:42:be:11:83:f6:9e:78:af:b2:1c:eb:
79:19:95:b2:11:ec:93:72:76:16:9b:d8:54:6a:85:82:3d:ef:
75:c0:1e:5b:6a:80:11:6c:08:7d:31:b6:ce:e9:c4:81:27:ef:
10:2a:48:71:37:a0:ea:80:fc:74:72:a0:31:04:db:bf:1d:1f:
32:e2:41:e4:93:c5:52:ad:57:36:98:75:b7:1b:21:d2:6b:6b:
b8:fb:a9:c7:8d:6c:27:b3:ad:9c:6b:99:44:b9:4d:2d:fb:22:
d4:e0:ca:ad:f1:87:04:93:4f:57:e5:76:e1:3f:fa:3d:8b:86:
d3:7b:51:4c:56:f9:18:85:e8:3b:da:bf:f7:bc:e1:ff:d6:69:
29:08:6f:6e:85:9b:5f:83:d9:2b:1a:2e:bf:b2:68:20:4c:a6:
bb:91:ad:43:0c:1a:95:d4:c5:5d:d5:14:83:5d:16:3e:33:6f:
35:a5:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org