Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ea4a97ed-9c79-3c0f-8b5b-85da78af7d82.roa
File: ea4a97ed-9c79-3c0f-8b5b-85da78af7d82.roa (raw, json)
Hash identifier: xkGZ/REEW2qoUSLT+RjYz2VsPMAPowJ4tZKQFTET7WQ=
Subject key identifier: 92:1A:90:78:82:2F:0B:7D:2A:39:6A:F3:81:C9:57:79:FF:21:C0:27
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D6FAE9C0B8F1A57E81124D280
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ea4a97ed-9c79-3c0f-8b5b-85da78af7d82.roa
Signing time: Sat 02 Apr 2022 04:00:00 +0000
ROA not before: Sat 02 Apr 2022 04:00:00 +0000
ROA not after: Sun 02 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:6f:ae:9c:0b:8f:1a:57:e8:11:24:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 2 04:00:00 2022 GMT
Not After : Apr 2 04:00:00 2023 GMT
Subject: CN=48bafcad-6137-43ae-a73d-8dd0de429b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:de:47:e8:48:f9:94:a1:aa:37:18:5c:12:
ee:fe:45:e8:2f:fd:29:c5:39:30:fd:15:d8:31:69:
b6:29:b6:c3:67:f0:84:92:6a:ad:38:fd:68:98:3c:
0a:26:00:6c:98:49:c9:22:5c:dc:df:ba:dc:a9:79:
20:7a:76:34:fd:a3:c4:ce:8e:f2:17:c6:cf:54:d6:
07:9c:e4:77:8b:cd:a1:5b:e3:bd:a5:1f:7a:18:23:
13:f4:7b:db:2d:1d:8c:49:83:15:75:72:34:cf:63:
4a:48:5c:ae:49:2a:ef:19:75:c2:c0:b9:20:89:85:
99:33:3f:80:df:48:77:b7:e4:1b:8a:f1:47:15:9c:
ff:bc:23:05:19:c8:e3:8b:49:a1:bb:31:d5:01:aa:
f3:35:c1:ad:05:f4:a3:da:f7:56:d7:08:1f:68:7b:
d2:c8:d0:5b:e4:38:26:28:bf:ee:e0:ea:7e:dd:5f:
83:67:63:c2:ce:f5:a3:15:6a:5a:ad:cf:84:cc:82:
28:62:d6:9f:3d:2c:be:43:6c:b1:e7:81:6f:c4:d6:
4d:09:1b:20:20:af:1f:05:3a:f3:bb:75:4e:fc:02:
5c:ca:30:9c:6d:18:79:d1:6f:89:ba:a3:be:b2:97:
be:9f:e0:23:f5:10:1b:97:ca:05:6e:b7:95:93:a5:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1A:90:78:82:2F:0B:7D:2A:39:6A:F3:81:C9:57:79:FF:21:C0:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ea4a97ed-9c79-3c0f-8b5b-85da78af7d82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:a5:0e:87:31:61:e7:dc:ce:46:b0:9c:36:00:1b:10:6e:93:
a2:8b:90:7b:ca:a7:ad:6c:28:d1:df:ea:9e:4d:3a:16:37:02:
2d:25:27:6d:35:84:69:d3:52:49:09:3f:ee:44:f0:83:ed:37:
af:df:f0:44:e9:19:97:23:1b:83:56:c8:91:f6:ca:51:b2:79:
15:06:8f:85:65:10:70:4b:0a:2b:f0:7a:bc:cd:2f:f1:80:44:
5c:57:ed:93:ff:07:64:b7:d3:74:37:f2:52:ff:4a:f4:5f:50:
61:32:2e:36:40:1c:9a:64:0a:7b:e2:ba:a0:a3:a5:2d:4a:0d:
68:40:36:aa:42:41:30:4b:b7:a0:5a:33:d7:53:94:3b:a0:e9:
05:47:85:c0:74:8f:9d:8a:ca:20:ab:d6:39:cf:23:c0:a5:18:
9e:7b:b4:6a:67:81:37:04:e1:72:ce:45:e9:b7:90:1a:2f:f5:
ec:4e:04:32:7b:85:25:39:53:c5:42:83:3c:db:17:88:ab:73:
8f:aa:2e:06:23:d3:91:d1:8f:09:47:d6:61:9a:9e:f4:a6:2f:
ed:d6:a3:66:fa:ef:32:10:47:f1:4a:15:56:09:38:dc:15:d8:
ca:63:7f:17:cb:36:34:ab:e4:0e:3e:8f:d3:3b:a8:82:78:15:
bb:9e:d3:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1vrpwLjxpX6BEk0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDQwMjA0MDAwMFoXDTIzMDQwMjA0MDAwMFowLzEtMCsGA1UEAxMk
NDhiYWZjYWQtNjEzNy00M2FlLWE3M2QtOGRkMGRlNDI5YjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp7eR+hI+ZShqjcYXBLu/kXoL/0pxTkw/RXY
MWm2KbbDZ/CEkmqtOP1omDwKJgBsmEnJIlzc37rcqXkgenY0/aPEzo7yF8bPVNYH
nOR3i82hW+O9pR96GCMT9HvbLR2MSYMVdXI0z2NKSFyuSSrvGXXCwLkgiYWZMz+A
30h3t+QbivFHFZz/vCMFGcjji0mhuzHVAarzNcGtBfSj2vdW1wgfaHvSyNBb5Dgm
KL/u4Op+3V+DZ2PCzvWjFWparc+EzIIoYtafPSy+Q2yx54FvxNZNCRsgIK8fBTrz
u3VO/AJcyjCcbRh50W+JuqO+spe+n+Aj9RAbl8oFbreVk6X7aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIakHiCLwt9Kjlq84HJV3n/IcAnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvZWE0YTk3ZWQtOWM3OS0z
YzBmLThiNWItODVkYTc4YWY3ZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGelDocxYefczkawnDYAGxBuk6KLkHvKp61sKNHf6p5NOhY3Ai0lJ201
hGnTUkkJP+5E8IPtN6/f8ETpGZcjG4NWyJH2ylGyeRUGj4VlEHBLCivwerzNL/GA
RFxX7ZP/B2S303Q38lL/SvRfUGEyLjZAHJpkCnviuqCjpS1KDWhANqpCQTBLt6Ba
M9dTlDug6QVHhcB0j52KyiCr1jnPI8ClGJ57tGpngTcE4XLORem3kBov9exOBDJ7
hSU5U8VCgzzbF4irc4+qLgYj05HRjwlH1mGanvSmL+3Wo2b67zIQR/FKFVYJONwV
2MpjfxfLNjSr5A4+j9M7qIJ4Fbue08g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:46 2023 by rpki-client on console-ams.rpki-client.org