Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1a90a585-3183-3812-b2f1-1e980d4782b5.roa
File: 1a90a585-3183-3812-b2f1-1e980d4782b5.roa (raw, json)
Hash identifier: 7iKbiLJYXxMgSoKlGVzeEYEMr9zpGz9HSxeUZ/AZTGw=
Subject key identifier: D3:BA:8E:7F:42:BB:96:B6:5B:AD:33:0E:55:36:68:DB:1D:3C:1A:AD
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DD9F12820E41893F148561B80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1a90a585-3183-3812-b2f1-1e980d4782b5.roa
Signing time: Mon 09 May 2022 12:00:00 +0000
ROA not before: Mon 09 May 2022 12:00:00 +0000
ROA not after: Wed 10 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d9:f1:28:20:e4:18:93:f1:48:56:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 9 12:00:00 2022 GMT
Not After : May 10 04:00:00 2023 GMT
Subject: CN=2cf54c40-189c-43c7-9d71-7f45f6132890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2e:ca:b8:1d:4e:de:9c:5c:1d:e6:d4:53:54:
6f:88:d0:8d:77:b1:19:0d:a0:f6:ca:6a:cb:5f:67:
9b:89:44:a6:2b:4b:90:0c:aa:c4:6a:a5:33:15:71:
44:72:fa:f5:e2:07:56:9c:69:46:69:65:68:0d:ac:
4d:ee:f8:b7:e0:d4:91:fa:bf:5b:30:5e:aa:8f:65:
66:a3:5a:7a:29:ff:87:f8:80:96:e9:34:2d:9b:bf:
dd:05:32:2d:56:5d:f0:33:cb:73:69:35:bb:19:df:
c7:94:63:ea:02:a2:8c:a8:d6:70:65:df:0b:af:c0:
ba:9a:18:9a:52:95:c5:9f:1e:5a:a2:ac:93:bd:13:
75:e0:b6:42:23:fe:41:d8:51:3c:cc:7e:e8:f0:d4:
49:71:0c:85:06:e2:ae:ea:d9:80:c2:80:7d:0a:95:
03:4a:5e:80:c7:f7:09:8f:f4:77:cf:21:45:2b:58:
a9:a1:85:ad:79:10:30:6f:3b:cb:12:c4:d1:0a:3e:
99:e6:37:05:7e:bd:d6:39:e5:23:99:60:80:b7:64:
d3:b7:19:2a:d1:72:68:45:76:d5:c7:ee:d9:d9:bf:
2a:2f:87:c0:94:fc:34:f2:49:d0:91:00:23:83:78:
b5:13:57:60:97:dc:74:ad:c7:de:94:90:95:ff:87:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BA:8E:7F:42:BB:96:B6:5B:AD:33:0E:55:36:68:DB:1D:3C:1A:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1a90a585-3183-3812-b2f1-1e980d4782b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:62:b3:76:06:86:ce:84:aa:8e:b2:98:5a:0d:0e:15:c6:77:
4a:ce:45:ce:1c:91:92:f5:ca:68:00:8a:dc:68:52:f2:d0:4b:
ae:16:bf:67:cb:6b:23:72:45:66:39:c7:ea:71:db:26:98:cd:
06:65:bf:d3:36:81:ef:ab:8e:6c:f0:3a:15:c4:61:f7:ed:95:
3c:3c:f5:9a:03:b4:54:cf:68:2b:71:45:6d:61:44:42:90:25:
08:5b:87:61:fb:50:9b:c8:cd:be:06:6e:10:60:12:18:80:14:
13:b9:d5:4d:6c:76:4f:67:ab:51:eb:b6:cd:fa:7e:e5:c6:df:
c5:27:3a:00:ff:c5:3f:38:dd:3b:64:8a:b8:8c:e6:ca:22:5c:
8b:10:66:e4:7f:8a:7a:be:bc:e3:e4:51:e5:fa:2e:fb:ed:21:
b5:b5:d2:3a:c2:4a:86:02:5d:31:5e:85:af:af:56:18:8f:be:
3f:e8:fa:ab:21:6f:fe:77:f7:85:0a:91:34:5f:67:da:be:d6:
cc:52:a4:85:a9:ba:a2:ff:30:b6:96:2d:05:1b:9e:a3:31:35:
7f:30:95:9a:d5:39:dc:46:6b:89:1c:13:83:2a:b8:63:75:1a:
c4:8b:d9:6d:84:3c:b6:67:ff:b5:76:e2:60:bb:9d:83:78:c4:
4c:e0:29:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:00 2025 by rpki-client