Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fa6d5a4c-d2e2-36bd-a470-a5609aca0de5.roa
File: fa6d5a4c-d2e2-36bd-a470-a5609aca0de5.roa (raw, json)
Hash identifier: zXA60cRGhOVqSbQMQl8rHiVDAPOcqwStLpWvlJSRRyg=
Subject key identifier: 64:66:A1:C2:60:6B:6E:E3:E5:79:BE:D1:2D:9C:C1:D2:5E:BA:FB:89
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CD611FE2062B8D53E599608C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fa6d5a4c-d2e2-36bd-a470-a5609aca0de5.roa
Signing time: Sun 06 Feb 2022 05:00:00 +0000
ROA not before: Sun 06 Feb 2022 05:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:d6:11:fe:20:62:b8:d5:3e:59:96:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 6 05:00:00 2022 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=40594bd1-6041-4302-ae6b-c869403111ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:b7:f5:c8:4c:66:bb:fd:49:ec:f0:db:5f:
d1:83:82:30:eb:41:c8:72:69:5f:ff:11:1d:35:f7:
2a:7f:e3:b7:d0:63:9d:4c:82:26:a3:7e:1b:80:91:
32:97:2a:21:6a:5e:2f:89:80:a7:d9:ad:04:c9:d7:
61:a9:fa:14:13:3c:8b:ec:d1:ac:4f:50:61:c2:f2:
ea:fb:e6:3a:10:c4:75:83:b3:f2:50:9b:2c:19:ab:
77:6b:d1:86:5e:14:45:3a:78:ad:1f:a5:b3:18:47:
4b:7b:60:1a:1e:a9:3a:12:d9:c1:e6:a5:de:21:8b:
da:ec:a5:8a:86:0b:e5:9d:df:1d:ad:cb:e2:08:a4:
00:b9:7f:87:b1:61:95:1f:79:9b:3f:23:1d:c1:6a:
93:dd:51:4e:28:9d:79:fe:1b:e0:d9:98:22:5b:eb:
ce:da:a1:16:0b:f5:5a:90:0a:d9:d9:9e:4e:8d:69:
20:39:5c:c7:25:96:f1:cf:10:3a:52:79:6f:d2:c4:
43:b2:ab:03:1c:7e:76:3c:99:49:de:4e:c9:6e:28:
60:f0:27:61:3e:5b:12:54:bd:8b:65:88:89:17:81:
9e:5b:b0:c2:ee:50:0f:9d:c5:aa:33:eb:b7:4f:34:
c6:cf:3d:4a:54:17:4a:bc:33:c7:82:9a:8a:79:8d:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:66:A1:C2:60:6B:6E:E3:E5:79:BE:D1:2D:9C:C1:D2:5E:BA:FB:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fa6d5a4c-d2e2-36bd-a470-a5609aca0de5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:08:83:8e:50:20:69:5b:d8:1d:44:64:08:80:c7:c7:8f:dd:
3d:e9:a0:aa:e8:f2:63:b4:2d:3e:d1:0f:d9:3f:ab:d5:e1:98:
a8:a1:eb:84:02:ad:b1:66:13:45:3a:74:c1:02:23:d8:cd:68:
55:52:57:31:1e:9e:09:76:16:32:19:8e:f0:59:e8:3d:9e:72:
bd:63:4c:42:0e:24:ac:26:89:3e:c6:ab:bd:7b:f6:14:0f:9a:
98:90:ce:d1:4b:75:be:11:99:95:65:dc:21:a0:7c:4f:34:71:
b1:8b:07:f0:6d:ce:79:b2:95:b7:4a:69:c8:0d:e1:2b:41:1f:
e4:93:dd:27:c9:84:e6:a3:f6:29:5d:c4:b7:62:d3:a0:22:63:
e0:3e:13:d5:5c:84:8b:b0:37:d9:13:88:cb:1f:1f:46:6d:2c:
b0:3d:e8:8d:66:e4:92:11:d1:b7:bc:b0:62:f9:cd:3c:0d:d8:
85:ed:10:9c:3d:ec:19:87:8d:b1:5f:a6:9e:77:76:ab:9f:18:
3b:fc:42:3a:6f:58:86:b7:f7:de:78:a0:c7:56:77:39:1a:47:
54:b3:d4:bf:2e:de:0f:48:ba:f5:0b:70:24:b4:1c:5d:67:dd:
b2:a1:93:ce:df:73:ee:e4:bf:40:82:5f:e6:1f:b4:f4:b7:7a:
36:77:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:53 2023 by rpki-client on console-fra.rpki-client.org