Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ee21fa17-209e-3efe-9c9b-a90fb4b30dcd.roa
File: ee21fa17-209e-3efe-9c9b-a90fb4b30dcd.roa (raw, json)
Hash identifier: 2Lda68nS+9D56e2dZ7lrMFgqyk/g/LNA/5cy24fG4zw=
Subject key identifier: 77:F0:49:3C:3E:14:40:7B:E8:73:09:03:59:3E:33:2D:57:C9:D9:75
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F203487FB8D30487179351300
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ee21fa17-209e-3efe-9c9b-a90fb4b30dcd.roa
Signing time: Sat 03 Sep 2022 12:00:00 +0000
ROA not before: Sat 03 Sep 2022 12:00:00 +0000
ROA not after: Mon 04 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:20:34:87:fb:8d:30:48:71:79:35:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 3 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2023 GMT
Subject: CN=315df432-9a1e-46aa-9185-83c43af75094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:a5:68:5c:ff:1b:95:8b:3a:b2:1a:e3:e9:
79:0c:99:27:05:96:3a:d1:a7:a1:fe:d2:b5:21:d9:
d3:d1:1f:1c:89:0b:e9:f4:cc:41:8d:68:df:40:17:
5f:60:8e:a6:8d:89:ee:ad:8a:db:04:cc:a4:05:6e:
f7:77:8d:38:b3:ce:4b:eb:1e:af:3b:14:95:d4:d8:
3a:c5:3d:50:29:16:5d:06:e8:0c:13:c7:39:19:19:
04:e9:13:dc:56:a8:90:5d:b0:f0:0e:a6:2f:9a:8c:
55:c2:aa:40:f3:4e:4b:d8:97:84:63:3d:bb:1c:8e:
fe:ed:26:7c:ed:5f:ca:3c:3c:1a:06:e1:31:6c:60:
77:f8:de:a8:75:b3:88:ef:b0:3d:fa:ba:7f:23:9c:
45:0a:92:3b:fe:42:b0:72:6a:c8:de:db:b8:56:b8:
9c:96:bd:18:77:4e:64:90:41:24:78:22:37:37:2d:
4a:ed:15:b8:da:2c:5c:36:3d:79:ce:56:40:f2:3a:
aa:69:7f:04:31:45:45:33:78:36:4b:d3:d8:d5:47:
ea:69:dd:da:e5:80:43:17:07:fd:e9:a9:6a:ee:e8:
b7:b3:f2:a0:2e:56:7f:71:79:a1:b0:c0:91:a4:1e:
59:fa:2a:ca:12:78:6f:bb:4c:bf:8f:45:2f:fd:fd:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F0:49:3C:3E:14:40:7B:E8:73:09:03:59:3E:33:2D:57:C9:D9:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ee21fa17-209e-3efe-9c9b-a90fb4b30dcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:db:2b:31:ef:24:7c:9a:47:bb:3c:6a:96:db:f4:f9:e3:8c:
5b:68:e8:cf:0e:ea:04:42:fa:b8:73:9e:e7:2d:6a:03:58:33:
e7:10:fa:f9:97:f5:c9:c5:18:83:ef:2d:04:81:d8:04:44:ca:
99:a7:86:ce:7c:66:7a:bf:08:8a:0f:c6:31:e5:02:d0:e6:0a:
a3:36:4f:1f:61:5e:75:ec:e2:ad:51:c1:3b:e6:e9:d4:97:22:
46:71:d3:f1:37:14:49:20:01:98:be:b2:31:dd:df:38:76:3c:
92:23:c2:89:04:e7:fd:53:5e:4f:16:ab:88:a0:7c:57:c3:18:
c0:44:a1:6e:8c:d0:7b:75:f9:cb:1e:aa:f4:08:2c:02:7e:09:
e6:56:b5:25:bd:50:fa:d7:58:16:df:00:b6:89:4e:0a:96:fd:
94:39:57:3c:06:91:d7:e3:57:59:e0:8d:2d:6b:e3:6e:b8:f9:
72:ff:d4:c2:f5:b5:36:65:bb:a8:62:53:03:5c:f8:7f:5d:eb:
d9:d5:98:4f:d7:af:3d:fa:9e:e0:27:fd:a9:9f:a4:49:2a:4c:
ce:55:d9:0e:b8:c1:c7:87:05:69:04:3a:16:5b:40:62:fe:78:
0d:a0:d0:bb:ea:74:d0:18:99:02:aa:85:6c:18:10:ee:3f:da:
3e:1c:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org