Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/52b83dad-cd98-3479-8e52-779d3d8a7410.roa
File: 52b83dad-cd98-3479-8e52-779d3d8a7410.roa (raw, json)
Hash identifier: gmnXdNd/5FlpA66cqa+M/+vY6FctN4VOKau2N0Hwn5U=
Subject key identifier: 93:89:34:03:84:48:09:88:FA:74:AB:DF:D1:53:56:46:C3:51:63:D8
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E492596F27FAF05CFF4D81240
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/52b83dad-cd98-3479-8e52-779d3d8a7410.roa
Signing time: Sat 18 Jun 2022 12:00:00 +0000
ROA not before: Sat 18 Jun 2022 12:00:00 +0000
ROA not after: Mon 19 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:25:96:f2:7f:af:05:cf:f4:d8:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 18 12:00:00 2022 GMT
Not After : Jun 19 04:00:00 2023 GMT
Subject: CN=984c8166-d85f-4779-bb83-0415e15b7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:b6:04:90:e0:12:67:29:dd:05:42:18:eb:
a7:e3:54:de:97:dd:5e:d9:9f:ea:f6:f5:e1:da:37:
20:73:7f:18:d7:68:09:e0:6d:02:bb:1d:43:3f:74:
43:e1:02:5a:64:0d:fa:c3:41:60:90:71:94:54:8d:
bd:aa:ae:20:fd:9d:03:41:3a:c9:68:a0:0f:ce:cf:
bf:90:4c:fb:67:5c:2b:c7:5e:41:7a:7d:c0:fd:58:
00:d7:7f:1d:e3:45:e5:79:75:8b:a5:83:59:9e:6c:
de:cb:02:d5:2d:45:1b:a9:f6:f7:bb:bc:a7:63:b2:
a5:15:52:e7:bf:64:e1:ea:33:18:bc:a9:8e:2a:73:
f9:18:1f:d0:22:b3:6d:d6:4f:24:9e:74:16:1a:eb:
16:5e:27:ac:95:ea:8d:f1:c1:5d:d2:dc:ca:7c:14:
98:17:5d:c7:b0:40:e7:cd:f5:99:b3:f8:cb:2f:88:
fc:70:f1:e3:5e:b8:3e:ec:60:6e:62:6e:0f:39:39:
39:b8:95:37:00:21:76:5c:b9:00:c3:ac:08:4f:47:
e4:a7:c6:6c:af:76:40:cb:e9:da:35:a4:06:d1:dc:
d1:ab:2e:5c:a4:d0:5c:f7:91:03:ca:de:26:8d:f4:
74:03:d3:6c:03:2b:6a:f0:28:1d:81:ec:2b:15:dd:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:34:03:84:48:09:88:FA:74:AB:DF:D1:53:56:46:C3:51:63:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/52b83dad-cd98-3479-8e52-779d3d8a7410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:88:f5:8c:77:92:a4:51:58:ad:21:70:04:06:70:84:c6:67:
d1:0c:c5:9f:cf:76:6b:62:85:3e:0c:07:fc:d5:e4:f1:a6:bd:
35:c9:47:c0:5a:7f:cb:4c:10:74:a0:40:b1:cc:e9:65:5e:ed:
6d:29:6d:de:5b:51:e8:d1:4d:9e:12:40:d8:42:38:60:45:34:
4f:f9:ac:cd:2c:63:9c:96:e8:a3:cd:2d:12:ff:a9:aa:1f:9b:
f9:d8:c4:43:be:a2:68:a8:9e:3b:f5:71:3a:f4:c1:11:89:12:
d7:9d:bc:31:d7:ef:e1:ea:fb:64:a6:db:21:bf:d5:45:b6:ba:
3c:54:df:3c:0d:a0:fd:3c:e6:45:71:95:82:5d:0d:e0:36:d6:
95:2b:d6:33:d5:d2:5d:6a:10:fc:18:98:a7:76:1f:52:fd:cb:
56:26:48:3a:a8:4c:64:96:1c:59:8a:d9:47:d5:4d:29:9a:11:
e2:dd:b1:7c:cf:72:c1:07:b7:54:76:14:13:f6:91:d2:b4:fe:
ec:d8:2b:fd:2a:84:07:db:d2:e7:c5:9d:16:7d:11:75:9e:cd:
76:c8:c8:51:2c:21:f4:b0:a4:bb:0f:02:36:86:8c:7a:33:ac:
66:87:ff:ab:9f:8b:d1:5a:84:99:46:97:14:e5:b3:fc:4d:a3:
1b:31:81:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5JJZbyf68Fz/TYEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDYxODEyMDAwMFoXDTIzMDYxOTA0MDAwMFowLzEtMCsGA1UEAxMk
OTg0YzgxNjYtZDg1Zi00Nzc5LWJiODMtMDQxNWUxNWI3NjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51e2BJDgEmcp3QVCGOun41Tel91e2Z/q9vXh
2jcgc38Y12gJ4G0Cux1DP3RD4QJaZA36w0FgkHGUVI29qq4g/Z0DQTrJaKAPzs+/
kEz7Z1wrx15Ben3A/VgA138d40XleXWLpYNZnmzeywLVLUUbqfb3u7ynY7KlFVLn
v2Th6jMYvKmOKnP5GB/QIrNt1k8knnQWGusWXiesleqN8cFd0tzKfBSYF13HsEDn
zfWZs/jLL4j8cPHjXrg+7GBuYm4POTk5uJU3ACF2XLkAw6wIT0fkp8Zsr3ZAy+na
NaQG0dzRqy5cpNBc95EDyt4mjfR0A9NsAytq8CgdgewrFd0WtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJOJNAOESAmI+nSr39FTVkbDUWPYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvNTJiODNkYWQtY2Q5OC0z
NDc5LThlNTItNzc5ZDNkOGE3NDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWI9Yx3kqRRWK0hcAQGcITGZ9EMxZ/PdmtihT4MB/zV5PGmvTXJR8Ba
f8tMEHSgQLHM6WVe7W0pbd5bUejRTZ4SQNhCOGBFNE/5rM0sY5yW6KPNLRL/qaof
m/nYxEO+omionjv1cTr0wRGJEtedvDHX7+Hq+2Sm2yG/1UW2ujxU3zwNoP085kVx
lYJdDeA21pUr1jPV0l1qEPwYmKd2H1L9y1YmSDqoTGSWHFmK2UfVTSmaEeLdsXzP
csEHt1R2FBP2kdK0/uzYK/0qhAfb0ufFnRZ9EXWezXbIyFEsIfSwpLsPAjaGjHoz
rGaH/6ufi9FahJlGlxTls/xNoxsxgWQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:25 2025 by rpki-client