![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0030c1f2-cf3e-3c02-9e2c-bf2cc8ec0bd3.roa
File: 0030c1f2-cf3e-3c02-9e2c-bf2cc8ec0bd3.roa (raw, json)
Hash identifier: aV+u8+nUB/rZiPOEYeC2vrCnl0M/lR3Kzf0tI6PDhnI=
Subject key identifier: 10:BC:54:2B:1D:00:96:23:B5:F5:79:3F:D1:5C:BD:B3:FB:A2:06:78
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328584013185AE9C9CF24C2149F7520
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0030c1f2-cf3e-3c02-9e2c-bf2cc8ec0bd3.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Thu 30 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:18:5a:e9:c9:cf:24:c2:14:9f:75:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Nov 30 05:00:00 2023 GMT
Subject: CN=ea8adbce-a105-4906-8924-2975d66d5ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:59:ae:7d:6b:92:01:06:82:95:3e:e9:bb:
6a:17:ce:4a:f2:8c:9b:de:84:c9:6d:32:c9:e8:3b:
5c:d7:fd:74:51:c9:32:f9:2c:a0:f1:43:fb:86:d1:
b5:a5:32:e7:64:28:ff:85:9d:72:c6:38:ed:82:18:
e4:35:eb:0f:c7:58:95:4d:87:07:e1:75:2c:50:27:
aa:a5:40:46:30:e7:60:68:8d:e8:ca:3d:7d:43:b0:
7c:79:6f:fe:78:96:e6:7b:f7:33:4c:77:b1:2e:82:
f5:c7:07:18:c3:a7:aa:9a:14:d7:c0:24:90:6a:e1:
d7:8c:97:de:9f:04:71:cc:7c:1f:a0:6a:ed:1e:a4:
27:2e:7d:f9:69:8a:f5:dd:15:96:e2:3d:15:56:53:
29:b4:49:0f:84:9f:34:5a:d8:27:d4:3b:52:48:11:
bf:be:98:70:a2:66:61:4a:c8:ce:3b:5b:c7:58:84:
b6:d7:db:88:8f:3a:6b:54:bf:c3:98:3c:13:e4:12:
e5:99:f7:12:07:3b:f2:58:50:e7:3a:32:f5:bd:9d:
bb:d4:d6:16:47:d1:26:73:f1:4a:5b:25:c0:5c:3b:
7d:5e:e0:41:3e:6a:c0:61:8f:61:68:92:5c:4c:1c:
2a:62:dc:4d:df:6d:29:f5:d9:f7:c9:bf:59:ce:29:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BC:54:2B:1D:00:96:23:B5:F5:79:3F:D1:5C:BD:B3:FB:A2:06:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0030c1f2-cf3e-3c02-9e2c-bf2cc8ec0bd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ae:9f:c3:62:a2:84:eb:ea:b8:58:20:ac:33:3c:10:c5:52:
26:c3:5b:3a:54:cf:9d:c0:5a:1d:6c:11:32:f0:6c:d4:bd:06:
3d:1d:db:81:b7:37:c0:19:64:09:fb:d1:0c:bb:97:9e:a2:5e:
00:9e:bf:5a:23:24:04:9d:e7:e7:6b:cb:a3:ce:8c:e3:7f:5f:
9e:bb:8f:41:7a:8b:bc:48:fa:4c:a5:a9:2d:bf:f1:be:d2:f2:
09:2b:19:85:11:fb:04:18:47:76:25:9b:e1:c2:1d:6e:a4:c9:
dd:77:48:3b:98:a5:6f:49:68:f6:72:32:e5:5b:2d:bc:14:3c:
13:cf:58:91:29:78:fa:21:68:30:f0:13:ac:e4:38:fc:68:0e:
73:3e:89:3f:01:0d:05:6a:5b:d0:85:b0:4b:1c:3f:16:35:c6:
65:a3:b8:42:49:71:44:88:87:a6:da:07:5c:e7:89:b7:62:5b:
47:29:45:ca:53:a8:58:e8:b9:af:f4:96:b6:19:b5:9e:07:d8:
d2:ea:0f:58:21:b5:7f:4c:67:fc:b8:b3:7a:47:b3:e8:6a:3f:
1c:0d:25:3c:4e:76:b7:c5:61:13:91:7f:e9:6e:32:71:97:3f:
3a:b6:ba:28:33:2a:a0:a3:28:64:3b:24:71:3c:f2:94:58:e1:
21:c7:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:49 2025 by rpki-client