Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ea772587-3284-35b9-8615-054319927a93.roa
File: ea772587-3284-35b9-8615-054319927a93.roa (raw, json)
Hash identifier: p3imQtNTkwGuSW7LsqcFxXIoZNqmeY5W9rPejDmet6Q=
Subject key identifier: 90:64:34:4A:C6:EF:06:B9:53:6D:AB:3B:B4:33:4C:DF:41:52:B1:15
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F432858401B6A0FFE7D0A7AD98A5CC7C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ea772587-3284-35b9-8615-054319927a93.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sun 03 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:6a:0f:fe:7d:0a:7a:d9:8a:5c:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Dec 3 05:00:00 2023 GMT
Subject: CN=879adaba-f1ef-44ce-8403-8092509f087c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:de:ba:a8:ba:df:9c:ec:2a:09:2b:b5:dd:
0a:2f:6b:eb:e0:3c:69:02:78:97:14:fb:0c:7c:b5:
71:e2:52:d7:5e:16:18:c0:6d:23:0d:cb:5c:00:1f:
89:4c:c2:3a:55:6c:00:00:fe:8d:7b:b9:38:84:3f:
ad:48:e4:5b:f9:63:29:8d:24:eb:8e:f4:c3:ad:6b:
45:e7:79:c0:84:19:10:b3:c7:a0:78:8f:4d:e8:f5:
3b:8a:94:d6:78:f7:b9:10:44:50:3b:72:73:1a:41:
4b:aa:3e:9d:b5:cf:cc:d0:49:52:0f:cb:7b:68:22:
ea:67:be:21:4c:c3:49:25:86:60:ad:0b:c1:e1:a0:
98:5e:29:25:41:b7:0b:6e:f6:5e:5c:c0:b0:0b:d3:
c0:35:28:91:97:3d:b0:23:cc:42:54:af:81:af:73:
54:1d:77:3f:85:65:03:b0:c0:80:4e:68:ac:83:c2:
d4:11:c7:93:05:78:e8:6c:51:f3:56:1e:dd:e3:96:
1d:51:2d:7c:53:b0:5f:62:c3:6d:73:61:71:f1:60:
be:ce:1b:3a:38:03:05:0b:ad:94:bd:2b:9a:3c:0d:
1c:88:45:df:e1:bc:2b:2c:d9:77:2a:3b:05:6c:2e:
f4:d6:01:0b:fa:4d:30:67:e4:c4:a7:69:93:70:71:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:34:4A:C6:EF:06:B9:53:6D:AB:3B:B4:33:4C:DF:41:52:B1:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ea772587-3284-35b9-8615-054319927a93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:3b:c1:e1:49:fd:07:7f:e5:e9:c0:5b:60:d6:da:23:27:0a:
17:53:f3:e4:d2:99:e7:f1:4b:1a:53:40:11:eb:b5:a6:c4:f2:
b7:f5:4a:7f:13:2e:96:a4:b9:ca:ca:90:49:1e:60:49:21:7c:
60:53:fc:bd:6f:ba:0d:ea:22:13:2b:1e:78:58:71:96:78:7b:
fd:e5:9e:d2:d7:7f:05:49:ee:5d:3f:ff:4b:f3:08:3e:ca:94:
a6:8a:d3:4f:f7:b3:33:98:12:12:86:1a:7c:44:13:26:99:ed:
30:f4:cf:f8:ce:ee:ba:9b:c2:7e:09:2b:cb:5a:08:0c:93:e1:
a5:7a:ca:3a:63:ee:99:c4:52:dd:d9:de:a8:94:fb:7d:2e:ae:
73:de:bd:42:0b:12:16:77:44:f3:e0:63:e5:06:87:4d:c0:68:
7b:3a:c0:f0:c0:0d:62:ab:41:b8:3e:18:68:39:93:79:37:54:
9a:16:8d:12:07:a2:77:53:1f:96:92:fa:2e:3b:de:c9:e6:49:
cb:6c:f1:81:98:43:e5:ce:40:92:5f:46:6b:0d:66:83:1d:cf:
cd:b7:14:c4:25:01:0a:cb:bd:f7:f9:fb:cd:41:04:a9:20:49:
1a:d2:30:c6:1f:2a:30:a2:fd:71:8d:ed:ae:c3:4b:c6:23:97:
88:bd:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org