Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e46f6d8c-60eb-3d02-a01b-bbb1f6c3adab.roa
File: e46f6d8c-60eb-3d02-a01b-bbb1f6c3adab.roa (raw, json)
Hash identifier: aPJy6AwRAgvXz4gq39nwRyfFJAkXPSCuCWaW8EPquaU=
Subject key identifier: EB:83:8F:FD:83:36:BB:34:86:6C:C7:96:44:89:B2:E7:43:39:D3:81
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CFA05B70615A0A591F0555680
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e46f6d8c-60eb-3d02-a01b-bbb1f6c3adab.roa
Signing time: Sat 19 Feb 2022 05:00:00 +0000
ROA not before: Sat 19 Feb 2022 05:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:fa:05:b7:06:15:a0:a5:91:f0:55:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 19 05:00:00 2022 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=e3b3ef5e-3c8c-4d4a-8ec4-69391ced3a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3a:61:4b:61:c1:ce:2f:cf:d9:01:e0:0b:35:
49:5a:f0:9c:a5:14:e2:78:bd:61:22:f4:ab:38:6d:
98:26:4a:81:fc:d6:44:52:a2:a0:a7:59:82:9d:6e:
61:26:b6:aa:d0:ad:7a:2a:61:be:80:f6:92:e5:8d:
c8:75:c9:48:44:92:1a:60:7d:dd:56:78:92:66:88:
70:e3:97:97:d9:e0:62:5a:c1:f4:00:e4:b3:82:bb:
fb:7a:ea:0a:48:80:2d:7f:71:d2:be:89:67:12:6d:
6e:47:bd:b8:ba:17:10:99:9d:cf:a0:38:88:8e:45:
cd:bf:96:a2:50:97:d4:c5:4a:13:7b:dc:b9:da:0a:
d2:8e:54:44:c3:69:63:6d:a2:9b:ad:7c:69:97:a8:
b1:71:5a:0b:e7:bf:95:ea:57:49:e0:4d:6b:fb:a1:
bc:31:2a:a2:62:44:0b:97:53:04:48:22:12:ae:0a:
6b:26:b2:67:fb:80:93:a0:be:bc:38:99:bd:85:91:
78:95:48:3e:e1:9e:f5:55:25:31:78:24:14:97:3f:
39:d2:19:49:5c:5e:b6:0c:df:5b:b2:ce:21:6a:25:
39:1e:6a:d3:dd:8f:37:41:57:69:41:ab:4a:63:c4:
ad:3f:30:00:b3:33:ca:56:fd:76:57:28:bd:8d:0e:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:8F:FD:83:36:BB:34:86:6C:C7:96:44:89:B2:E7:43:39:D3:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e46f6d8c-60eb-3d02-a01b-bbb1f6c3adab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:67:86:ce:cd:d8:7e:17:db:93:93:cd:91:e3:5e:a6:04:32:
67:e1:b1:bd:ca:9c:0f:46:1d:d4:56:ff:7b:a4:34:f8:6d:8c:
dd:cd:66:e2:87:d5:34:f8:bd:70:c0:ca:37:03:c8:63:09:fe:
3a:d6:d1:02:0c:c1:dd:84:18:1c:ad:54:08:5c:ff:77:6d:0c:
29:5e:61:62:5b:ad:f6:1e:4f:c2:df:a8:f6:91:b1:11:d7:4b:
3e:7a:49:4d:33:e3:66:af:47:e4:5b:32:60:10:9b:ed:7d:51:
c5:58:ed:a7:c9:44:48:46:90:66:3e:0c:89:0a:3c:a8:ba:c2:
3a:d7:86:55:53:4e:07:d1:30:67:56:94:a0:27:ab:f0:2a:c6:
e1:7f:5b:52:31:df:bb:38:83:17:ea:98:aa:41:35:b1:00:41:
0b:99:17:55:b6:6c:10:7d:97:19:d1:19:9a:d6:61:80:6d:38:
dd:b4:23:7c:9c:6a:06:c9:0c:83:08:e8:f5:b8:34:ff:5a:9d:
d9:9e:46:d1:bc:a5:b4:9b:62:33:ce:23:18:d2:46:14:97:42:
ea:77:03:cf:2c:b9:eb:66:6a:ad:9d:94:9d:fe:c9:ab:c0:ab:
46:89:06:fc:81:26:13:47:f0:30:38:7f:88:9f:15:55:2a:17:
10:ac:02:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDz6BbcGFaClkfBVVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDIxOTA1MDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTNiM2VmNWUtM2M4Yy00ZDRhLThlYzQtNjkzOTFjZWQzYTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTphS2HBzi/P2QHgCzVJWvCcpRTieL1hIvSr
OG2YJkqB/NZEUqKgp1mCnW5hJraq0K16KmG+gPaS5Y3IdclIRJIaYH3dVniSZohw
45eX2eBiWsH0AOSzgrv7euoKSIAtf3HSvolnEm1uR724uhcQmZ3PoDiIjkXNv5ai
UJfUxUoTe9y52grSjlREw2ljbaKbrXxpl6ixcVoL57+V6ldJ4E1r+6G8MSqiYkQL
l1MESCISrgprJrJn+4CToL68OJm9hZF4lUg+4Z71VSUxeCQUlz850hlJXF62DN9b
ss4haiU5HmrT3Y83QVdpQatKY8StPzAAszPKVv12Vyi9jQ5cjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuDj/2DNrs0hmzHlkSJsudDOdOBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvZTQ2ZjZkOGMtNjBlYi0z
ZDAyLWEwMWItYmJiMWY2YzNhZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlnhs7N2H4X25OTzZHjXqYEMmfhsb3KnA9GHdRW/3ukNPhtjN3NZuKH
1TT4vXDAyjcDyGMJ/jrW0QIMwd2EGBytVAhc/3dtDCleYWJbrfYeT8LfqPaRsRHX
Sz56SU0z42avR+RbMmAQm+19UcVY7afJREhGkGY+DIkKPKi6wjrXhlVTTgfRMGdW
lKAnq/AqxuF/W1Ix37s4gxfqmKpBNbEAQQuZF1W2bBB9lxnRGZrWYYBtON20I3yc
agbJDIMI6PW4NP9andmeRtG8pbSbYjPOIxjSRhSXQup3A88suetmaq2dlJ3+yavA
q0aJBvyBJhNH8DA4f4ifFVUqFxCsAuk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org