Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e5947072-bae5-39fc-925b-5839adc22a38.roa
File: e5947072-bae5-39fc-925b-5839adc22a38.roa (raw, json)
Hash identifier: Bj7xw1fVA8Pq1SLltNL12Lox9V2A6GVGumDvgY2eAaI=
Subject key identifier: 99:57:BB:01:C2:22:41:BA:95:08:89:AD:CF:21:0B:08:AA:97:EE:7F
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D7262965038B578B3830D8D20
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e5947072-bae5-39fc-925b-5839adc22a38.roa
Signing time: Sun 03 Apr 2022 04:00:00 +0000
ROA not before: Sun 03 Apr 2022 04:00:00 +0000
ROA not after: Mon 03 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:72:62:96:50:38:b5:78:b3:83:0d:8d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 3 04:00:00 2022 GMT
Not After : Apr 3 04:00:00 2023 GMT
Subject: CN=f541bdd4-ae81-4bfc-a7f3-7b6141206366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:06:45:18:b5:23:84:1c:50:34:a2:89:e0:
f2:25:fa:db:79:32:60:a1:2f:bd:b1:9a:e7:f6:3d:
52:c1:3d:bd:58:67:b6:f6:f2:30:b5:88:ea:71:b6:
8e:bb:8c:69:1d:5e:9e:82:9c:65:ce:56:2f:cf:c3:
82:8f:cb:cb:27:5c:59:1a:5b:a3:6b:0d:6c:98:89:
f0:07:26:f4:06:6a:fe:69:48:29:26:88:7b:e1:fb:
26:d5:57:73:14:b0:30:d8:3c:7a:02:9f:ee:19:55:
08:8c:9c:d9:58:1d:36:db:c3:c1:1f:1e:8a:48:3a:
6c:9c:8c:c6:1b:64:eb:74:66:a1:5a:8b:f2:d3:0d:
92:f3:a3:65:66:be:95:20:e9:db:5c:d4:87:b2:4a:
9d:05:ba:77:9d:6a:9a:c3:25:d1:85:4f:14:ee:09:
b1:31:11:53:dd:9f:e0:57:af:a5:6b:ad:7a:b8:f0:
a2:f6:4f:21:6d:cd:46:f1:12:4b:c9:a2:95:0f:ad:
f4:5b:63:ab:22:13:23:49:1a:66:82:fe:74:d6:2b:
53:8b:1c:e2:1e:73:a2:d2:27:8e:64:f6:ee:a2:b9:
2e:a4:b5:b8:84:89:66:9d:14:ec:bd:79:37:56:d9:
52:98:9f:f6:17:7f:13:f3:15:fa:12:a3:82:fb:76:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:BB:01:C2:22:41:BA:95:08:89:AD:CF:21:0B:08:AA:97:EE:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e5947072-bae5-39fc-925b-5839adc22a38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:42:1f:dd:f2:ce:67:8e:b0:ab:59:8e:cd:82:54:62:2e:86:
51:5d:86:a6:f7:d7:41:45:ae:c6:96:c2:90:ab:6d:6d:2f:73:
b2:99:ef:b5:65:17:43:26:8e:db:0a:17:a7:cc:73:9b:85:75:
d3:9b:cf:76:03:6e:31:9f:52:8d:80:69:49:4a:99:97:e7:9a:
e4:62:87:b9:ac:f3:dd:a9:48:95:19:90:e5:80:03:1d:bf:0d:
4a:dc:fe:09:4a:29:56:e6:a5:75:c2:22:1d:ca:db:1e:a8:3a:
9e:2b:9c:05:c3:b1:2b:a3:11:7b:83:1f:79:60:7f:ac:4a:ec:
e4:72:76:3d:5b:8e:b6:22:85:0e:50:35:d4:d4:a9:5d:0b:b5:
27:56:0b:c9:4e:b8:33:9e:47:03:cb:28:d1:05:a3:5e:5d:02:
d8:9e:91:76:a6:7f:2b:b0:95:87:4a:e7:be:0d:7e:63:43:e7:
e0:53:14:85:2b:42:ae:2a:eb:6e:3f:75:70:6a:eb:4d:60:03:
e2:3c:aa:97:eb:0b:08:8a:90:96:3d:7e:fa:c7:44:09:c0:0a:
b3:58:bb:ca:ea:2c:07:c5:22:ac:5f:6f:64:23:ec:d6:58:3f:
a1:dc:b4:fb:35:d2:13:90:20:8e:40:16:96:7f:c3:74:9c:d0:
f1:f4:7e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:52 2023 by rpki-client on console-fra.rpki-client.org