Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f7a74648-983e-309b-839e-1ae0042f9d8b.roa
File: f7a74648-983e-309b-839e-1ae0042f9d8b.roa (raw, json)
Hash identifier: Q6GRL9GlNOnEMWWnIfjyAYQFRDVxMVbQkEAM1ZHkL+Q=
Subject key identifier: D0:BF:48:3E:71:4C:9E:20:C4:98:83:ED:7E:63:D0:D5:D7:F9:92:A4
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F28AECF8A45E36BF3F46C23D8
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f7a74648-983e-309b-839e-1ae0042f9d8b.roa
Signing time: Tue 06 Sep 2022 12:00:00 +0000
ROA not before: Tue 06 Sep 2022 12:00:00 +0000
ROA not after: Thu 07 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:28:ae:cf:8a:45:e3:6b:f3:f4:6c:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 6 12:00:00 2022 GMT
Not After : Sep 7 04:00:00 2023 GMT
Subject: CN=5d4d52e8-7c09-49a7-97e2-1bd8ff15a792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:1a:b8:92:f1:af:23:ec:63:34:4d:51:a1:
6b:17:ba:9b:90:c8:f0:01:f3:3b:95:58:2e:64:8d:
ed:3f:b5:95:9d:45:54:e8:bd:22:44:71:f7:b7:fe:
67:c6:97:72:56:d9:46:cf:3f:42:0a:50:4b:88:d1:
d8:8c:bc:f1:28:2b:8d:59:73:ad:9b:80:aa:03:6c:
e2:21:ba:0a:0f:1d:b4:f1:30:d4:d7:ba:5c:f5:4f:
00:27:bd:e6:e9:9a:5a:0f:9c:31:47:52:49:d8:47:
93:c7:63:61:c8:2c:c9:d5:ee:c6:26:b5:a2:e0:ed:
8d:00:9b:0d:77:ba:a6:35:ca:98:2b:00:9e:3f:79:
6a:bb:38:83:95:95:51:23:2b:0c:62:e1:28:1c:13:
26:2f:92:01:09:29:15:ca:dd:40:d4:bd:14:9d:cc:
19:8f:44:0a:6e:05:54:43:bb:f7:97:0b:02:90:46:
75:ee:2e:94:71:ec:c3:b7:d2:fd:10:ce:00:5a:05:
62:7a:fc:8e:9f:f9:d2:fe:bf:d4:f2:e8:a0:f0:8e:
dc:d6:ba:0c:e0:06:69:e9:20:d8:dd:da:23:81:6d:
61:7d:0f:4f:1b:bc:32:20:a7:28:58:74:9a:4f:2d:
fd:54:4a:b8:db:0f:14:be:2f:dc:b2:36:93:4b:d2:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:48:3E:71:4C:9E:20:C4:98:83:ED:7E:63:D0:D5:D7:F9:92:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f7a74648-983e-309b-839e-1ae0042f9d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:4d:ef:ab:b7:4d:89:d4:68:00:60:6f:88:14:f3:70:b5:2c:
b7:e1:b9:db:8b:e5:63:f4:c5:fb:71:dc:f1:69:fb:06:af:eb:
90:fb:75:39:7d:7a:39:e8:82:2c:06:fe:54:af:94:2a:8e:7e:
29:a6:69:ce:80:ba:6b:39:98:15:6a:31:4c:23:fe:af:f1:06:
fb:8a:6b:ef:30:93:6b:6e:3c:76:c4:88:93:8c:5a:8e:94:5a:
5e:b1:a3:29:04:20:b1:7c:0f:bf:3f:03:02:d6:f0:5d:7b:91:
78:55:09:9c:3d:9f:89:87:d2:3b:3e:f7:9e:d1:2e:0f:5b:9a:
bd:3a:0f:f8:5e:50:ba:c7:85:15:46:7a:1a:62:82:74:d6:65:
0f:6e:9e:47:d4:ca:57:16:19:50:e4:b3:cb:c9:35:bc:f5:4a:
75:11:9f:05:44:9f:d8:22:09:ab:c1:c7:c3:f0:2a:24:da:b3:
11:97:11:e4:65:3f:85:f9:9a:16:5e:42:93:9b:e8:20:14:0b:
e2:ca:0c:88:aa:0d:cb:47:35:22:4c:a9:3b:04:8a:09:68:47:
47:c0:9d:45:b0:b9:5a:95:63:62:25:cd:63:3a:c9:be:a5:96:
c0:b5:01:5e:a6:a7:df:85:38:6b:0a:5f:fc:2c:81:04:4e:11:
39:c3:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:46 2023 by rpki-client on console-ams.rpki-client.org