Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f2c02e29-e09d-3097-b681-102e6cb714ec.roa
File: f2c02e29-e09d-3097-b681-102e6cb714ec.roa (raw, json)
Hash identifier: RAgEtD1x3SKI/9OWd+Lb3/1g/ytCdOFKfKPZqwYGx5g=
Subject key identifier: D8:B2:9D:25:51:CA:AB:BC:54:6B:F2:83:B7:B1:3E:B7:80:A9:17:22
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FC1FF1BBB30869F95B497EC40
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f2c02e29-e09d-3097-b681-102e6cb714ec.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Wed 01 Nov 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c1:ff:1b:bb:30:86:9f:95:b4:97:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Nov 1 04:00:00 2023 GMT
Subject: CN=ed08f750-47c8-4e3f-baad-33c0d1125614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:2b:d7:40:c9:8b:2f:dd:48:56:c8:b6:e6:
5c:92:4f:ea:c0:d5:4b:8e:c7:74:12:67:ec:0f:86:
ba:7c:d3:f1:a4:66:eb:ee:3f:0d:63:42:22:8a:45:
2a:ed:7f:dd:17:fe:e3:b2:2d:63:00:ed:39:f1:4f:
83:82:6f:d4:02:6d:09:72:1c:6c:d3:2e:0e:62:9c:
5b:02:0a:d5:a8:7f:87:e4:aa:d8:76:9e:fc:61:16:
76:8e:c5:1d:e2:1d:09:7c:4d:c2:01:ce:99:10:fc:
21:26:d5:78:9c:62:82:8a:94:05:ae:30:58:fc:52:
ab:f6:49:1a:a1:d6:da:c6:41:db:d0:07:d5:d9:0c:
63:3c:18:02:5d:2a:d5:a0:56:2a:af:89:37:91:4f:
42:68:ff:6a:bd:18:6c:93:ae:9b:97:c1:f0:44:95:
33:bc:b8:fc:fb:8a:ad:12:58:cb:0f:40:eb:9b:09:
3e:68:6b:1a:26:24:d9:ee:09:41:73:16:c5:be:33:
38:41:53:4e:58:da:3c:e2:c0:56:6f:0f:ff:c0:2a:
86:d4:0d:4c:4a:b9:10:d3:bc:f5:4a:f8:cf:e8:6f:
bc:36:2e:f1:0d:3c:c5:65:89:cb:09:71:16:01:43:
41:58:23:a4:2d:b3:18:11:65:4d:e2:22:6c:8c:86:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B2:9D:25:51:CA:AB:BC:54:6B:F2:83:B7:B1:3E:B7:80:A9:17:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f2c02e29-e09d-3097-b681-102e6cb714ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:4f:af:2f:a8:e3:0a:f9:d8:f6:6e:6a:dd:f7:cd:83:fb:11:
a7:19:9f:80:ac:76:f9:58:26:38:b0:58:61:53:13:62:fe:71:
6d:63:31:02:1d:5d:ad:af:0d:da:9b:be:07:54:f3:71:1e:44:
17:76:2c:7d:33:95:7f:48:79:70:fe:4e:a9:97:93:a4:7d:52:
28:7e:bd:0c:48:4f:f6:19:73:54:37:3f:9b:ac:82:82:95:a3:
b3:11:cf:23:61:2a:ab:e0:b8:ae:71:5f:a4:6c:75:9f:06:a4:
ca:0a:6c:c5:4f:ea:c0:0b:d9:c1:2b:20:07:6a:c2:e8:e6:e7:
00:27:de:75:4b:02:b4:ce:10:73:9f:61:e3:08:c1:0f:4e:c5:
41:fb:2a:9f:89:0b:dc:bb:1d:49:74:9a:f1:4a:ce:be:b5:d7:
ea:82:47:17:e2:6c:c2:f4:bc:b7:b9:70:3f:0b:fb:c7:e5:84:
0b:1e:8f:0b:ce:1e:9f:7d:ae:b5:ab:96:9d:31:ac:a1:9c:ea:
31:b9:44:e6:73:3d:39:60:5a:14:ff:84:1c:73:4e:e7:65:df:
36:f5:59:0f:d1:cf:3a:32:5c:b0:31:1e:85:ee:74:76:7d:99:
b6:ba:6e:a5:27:75:29:fd:f5:df:51:81:37:a5:91:e2:82:13:
a8:de:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org