Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/dd05e620-c8f5-3de3-b851-978b9232d12b.roa
File: dd05e620-c8f5-3de3-b851-978b9232d12b.roa (raw, json)
Hash identifier: 1NrhBU20GIPmK2G37Ezmk+r6ro241rHSjAcLveO1xQM=
Subject key identifier: 4C:B6:C2:31:44:DE:F9:8A:B2:35:39:85:0C:09:65:0B:E1:5C:87:78
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F2BCB1E4FC4E13AC78C3BC2A0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/dd05e620-c8f5-3de3-b851-978b9232d12b.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Fri 08 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2b:cb:1e:4f:c4:e1:3a:c7:8c:3b:c2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Sep 8 04:00:00 2023 GMT
Subject: CN=255aaff9-9fb2-48bf-9a16-82e275bd892e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:1d:6f:90:7b:a3:f8:de:2e:75:70:b3:d9:
53:29:4e:54:d1:22:18:89:65:19:b8:26:30:97:bd:
9f:b3:e7:5b:74:71:cb:9e:4f:41:0b:10:6c:f8:c1:
d4:c2:ea:0a:4b:6a:89:ae:05:c0:5a:4d:fb:28:b6:
37:6f:db:a2:6b:2a:3c:1f:05:32:22:c8:b5:5f:62:
a0:d5:86:6c:1c:93:ac:be:8a:d4:50:c6:78:c4:f6:
7e:72:29:59:39:80:71:4d:35:7f:ba:e7:cb:8b:08:
01:15:a4:ba:99:99:d6:98:06:ec:cb:37:1a:60:3c:
52:28:00:ad:12:a7:24:c5:21:11:ff:fd:e0:19:bb:
a7:a3:62:7b:95:05:57:30:31:4f:78:16:6f:59:7e:
ab:e7:ff:05:19:e8:5e:a2:d5:2c:3c:9a:5c:27:c4:
54:d7:aa:e5:4a:36:97:30:11:dc:ef:ad:6b:93:c9:
5b:36:41:09:8b:00:77:38:ec:0c:35:ce:bb:49:11:
df:44:e7:b3:a9:9b:3d:78:4b:53:2a:13:8f:e4:c3:
f6:c7:b7:65:5c:db:4c:4d:93:b7:40:fb:48:9a:15:
2e:49:22:9d:5a:c8:b3:c1:4f:43:82:78:47:f5:0f:
5d:1c:2b:33:e7:8e:c0:31:a9:25:88:ac:2a:1b:dd:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:C2:31:44:DE:F9:8A:B2:35:39:85:0C:09:65:0B:E1:5C:87:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/dd05e620-c8f5-3de3-b851-978b9232d12b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:be:2d:e8:b5:c4:60:19:21:7d:0a:16:1d:24:b8:5f:f2:8c:
6b:83:09:4e:4b:ac:30:3c:00:f0:f8:43:23:0d:f2:37:90:24:
06:7f:d6:ce:43:85:25:08:ed:2b:af:62:50:7c:94:cf:9e:0b:
d6:a1:55:d4:e1:db:80:67:f9:94:2d:a1:b2:db:38:fa:35:1c:
77:32:75:2b:d6:da:b8:05:59:04:23:b9:b0:2c:fa:51:b3:aa:
c6:c6:41:c2:65:03:0f:e4:34:53:df:cc:36:41:d2:a0:ab:7c:
46:b4:93:16:c9:32:71:d9:42:98:9f:f6:fc:02:7f:d7:7f:d0:
6d:09:52:aa:77:fa:19:99:ce:40:43:87:9e:3f:00:f6:08:dd:
82:5c:45:ef:75:94:62:8b:a7:f7:ec:da:30:c3:08:19:18:d8:
37:ac:d1:60:9d:9f:dc:d4:9e:8c:ac:83:b0:9a:e2:f6:ff:fb:
57:c2:95:12:44:ca:c5:e6:be:fd:88:28:fc:f3:ba:15:c6:a7:
66:f9:0d:80:52:d2:b0:1d:c4:02:96:93:ed:74:a3:f4:8b:71:
16:4e:fb:2c:82:6f:ba:1f:de:07:c7:2e:0d:14:ca:5f:cb:cc:
a4:8d:df:bc:23:c3:20:13:3f:43:0c:c9:a9:f2:a2:8e:d4:c4:
22:f8:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org