Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2ababaa5-fa79-3538-9157-ea492cb0b868.roa
File: 2ababaa5-fa79-3538-9157-ea492cb0b868.roa (raw, json)
Hash identifier: PUCyptkdfEDUT/5GyZBiqAR++YrIno+xKRggQ8oJTAQ=
Subject key identifier: 4B:E9:2F:3F:10:73:19:CF:D3:E6:53:51:58:00:55:6E:B3:9B:23:FF
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CD3815F6EACE2EF48587F7980
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2ababaa5-fa79-3538-9157-ea492cb0b868.roa
Signing time: Sat 05 Feb 2022 05:00:00 +0000
ROA not before: Sat 05 Feb 2022 05:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:d3:81:5f:6e:ac:e2:ef:48:58:7f:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 5 05:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=48e08d02-1e44-4917-b4f2-b8a63ee35d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:ad:0b:7f:fd:71:79:5b:5d:51:b9:41:32:
9c:93:7e:ff:8c:49:61:b7:d5:69:ea:18:e0:bc:47:
41:c7:20:68:1f:bb:46:53:e6:9c:16:a0:70:2f:56:
10:0f:6f:33:45:2e:45:01:9b:50:af:e4:7b:f6:21:
db:23:c2:3e:9d:e1:4d:a3:3a:bf:b9:e2:aa:ef:57:
63:8b:b2:33:31:ad:2e:46:25:52:36:09:f1:f9:69:
2b:c6:92:13:e3:34:ef:43:f2:44:03:d5:5c:8e:cc:
b1:30:28:27:f7:8b:0a:37:2d:63:d8:73:6f:2b:dc:
b9:14:fe:ca:3b:60:c2:2f:f1:8d:b7:14:c0:e4:b6:
2a:71:42:bc:86:a6:54:87:a3:60:a7:71:a2:ca:7b:
eb:d1:5b:1b:ee:77:ed:13:9f:a2:56:67:6c:83:ec:
6b:49:bf:9f:c2:96:1a:83:4a:62:42:d4:15:d7:50:
7b:b5:03:e9:09:73:c6:09:c8:75:e5:64:18:ca:96:
27:34:9e:b1:c7:89:5e:1f:57:f8:2f:5d:35:83:a1:
dc:6f:3b:97:29:7c:9a:42:5b:35:68:77:07:0e:4c:
9b:d3:bc:78:83:08:cf:94:58:fc:cd:91:00:31:61:
fa:0f:d5:51:ba:df:a2:fd:b4:dc:e5:76:32:dd:e5:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:2F:3F:10:73:19:CF:D3:E6:53:51:58:00:55:6E:B3:9B:23:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2ababaa5-fa79-3538-9157-ea492cb0b868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:85:cb:c1:17:2d:85:a3:91:ac:a0:45:21:ec:58:eb:f9:b5:
a1:b1:14:9c:18:aa:9d:48:78:35:c3:ac:fd:22:ca:54:d7:47:
d7:73:23:98:3c:1a:58:b1:17:f2:55:09:b0:3b:ba:f8:c9:86:
bb:34:0a:5a:f8:6e:08:cf:3b:05:a2:b8:32:8a:f1:73:db:e2:
65:83:b6:af:d4:40:6d:61:d0:e6:37:f5:ca:0b:cd:21:44:ee:
7e:38:73:e4:85:f0:ba:04:d1:08:71:ea:bf:51:d8:9b:f4:da:
13:5a:db:50:50:19:39:7f:32:8d:a6:69:d9:47:e2:9a:45:1e:
97:c9:8e:9f:d5:2f:3a:75:76:e1:6b:cd:44:f9:c1:c4:c7:28:
72:45:d4:1b:78:ed:d0:c0:99:f9:04:da:3a:0d:37:1b:7d:94:
55:97:f8:fb:c0:e0:72:4d:b3:d6:21:60:bd:35:8b:a0:4d:4f:
78:88:4d:fb:78:e1:6d:8d:df:53:b3:03:27:50:a6:82:01:e4:
de:1f:5f:17:c9:a5:ec:05:37:dc:2f:0f:90:e7:35:35:93:7f:
07:52:e6:20:72:9f:92:f7:cc:4f:fb:ba:cf:9c:a8:33:fe:85:
bb:8b:64:82:4f:2b:66:f4:a7:97:68:c1:bd:b7:ae:13:a7:64:
28:50:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:49 2025 by rpki-client