Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/da5ec3ed-7ce3-3736-9532-7cf566f79043.roa
File: da5ec3ed-7ce3-3736-9532-7cf566f79043.roa (raw, json)
Hash identifier: SSuAbm3xGNFtOnonOyDnfhTedGBwB1uPRBEClVAuP1Q=
Subject key identifier: BE:7A:6D:41:24:5F:79:D1:F0:08:AC:E6:D8:00:9D:FA:DD:EA:47:B4
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F3141FFE83861D7374B30E800
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/da5ec3ed-7ce3-3736-9532-7cf566f79043.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sun 10 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:31:41:ff:e8:38:61:d7:37:4b:30:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Sep 10 04:00:00 2023 GMT
Subject: CN=d4067ffb-f3b2-47bd-bc96-15df981ef6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:a3:ef:55:f6:78:4f:40:15:5e:60:42:2f:
02:00:1c:cd:15:ec:07:58:35:2e:90:17:1b:8b:85:
a0:3a:d6:c5:a3:1e:47:0e:67:02:d3:4a:d2:7b:9d:
66:a5:7d:0d:5d:5d:65:e6:da:24:e5:73:90:fc:4b:
05:6f:e8:13:f2:27:98:39:d2:bd:b4:53:d9:eb:2d:
fe:5b:e1:74:64:29:2d:c8:0f:d1:b3:e3:7d:a5:44:
81:46:90:79:9a:e0:ec:00:f5:56:64:55:a9:ab:9f:
bc:c0:63:17:9b:a9:1f:7e:4c:05:00:9d:33:a3:07:
e8:e8:f4:a9:b9:9b:9e:19:e5:a5:a0:45:d6:78:6d:
3a:9d:3a:74:84:56:4e:fc:36:e5:80:f1:51:0b:0e:
d3:a3:18:54:02:bf:2f:d5:b8:8e:21:7c:4b:e9:df:
2f:66:7e:98:78:d9:47:25:a4:94:c5:20:eb:6b:26:
db:06:6c:97:da:ce:16:9b:00:45:43:83:a5:23:96:
53:3a:a8:2c:9c:09:60:ba:bd:77:c8:9e:ba:8e:cb:
96:aa:4b:9d:3c:a5:a4:e8:85:cc:d6:c7:ea:c9:ed:
29:55:c3:40:e7:30:19:04:13:92:d7:c2:96:df:fc:
78:dd:49:4a:b2:7f:bb:c1:86:81:51:9b:36:bc:c6:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7A:6D:41:24:5F:79:D1:F0:08:AC:E6:D8:00:9D:FA:DD:EA:47:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/da5ec3ed-7ce3-3736-9532-7cf566f79043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:55:d2:2a:3f:d9:17:90:db:62:6e:03:be:ba:7f:f1:84:8b:
b8:c0:bd:ea:e4:4b:d2:1b:11:b2:05:76:06:84:c5:e0:e8:3d:
5b:6d:7a:3f:f6:cf:2e:85:0e:32:25:00:a5:b0:a2:1a:78:2a:
9f:3b:28:0b:fb:5a:ea:cf:6e:10:d4:73:fd:c1:0c:56:db:64:
a0:ed:7e:cf:11:1e:7f:7a:d7:2e:cd:8f:af:03:42:f1:cd:82:
29:e5:16:95:5c:ba:03:71:fd:a8:6b:42:45:74:e3:fa:ba:59:
a3:95:91:60:ce:ae:58:5c:e5:32:1a:50:06:60:d1:af:24:ab:
84:f4:d6:26:77:ec:00:30:f2:32:71:f1:cc:9f:18:fb:f6:5e:
f0:b6:6c:65:91:4a:ef:85:36:4d:ee:74:46:6b:53:11:3f:18:
45:40:ad:33:74:58:d6:3c:8c:4a:e6:db:67:f3:42:0c:e8:36:
94:74:1a:5f:6c:11:28:cc:d0:f0:16:56:5c:f7:18:6c:f2:60:
af:36:7a:d8:e0:4b:1c:59:e3:ba:4e:83:c8:cf:cd:d7:36:bc:
03:ef:41:ee:9e:c9:b2:8b:f2:61:44:71:6c:d5:22:db:b5:ee:
ec:06:3e:66:f3:3a:f6:c3:09:67:55:fa:5a:a3:21:f8:8c:92:
31:26:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:46 2023 by rpki-client on console-ams.rpki-client.org