Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/6b4f3376-f1fc-3a2c-aace-0a96329c0b0f.roa
File: 6b4f3376-f1fc-3a2c-aace-0a96329c0b0f.roa (raw, json)
Hash identifier: aGiFEhDOf1cF7SHX8zn7xTOoL/66OZapGp8YAtkOips=
Subject key identifier: 97:A2:77:EC:77:83:26:6B:DB:30:32:13:F6:9A:1C:68:09:96:51:3F
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FCA9F822E974CBEF01F6ED440
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/6b4f3376-f1fc-3a2c-aace-0a96329c0b0f.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Sat 04 Nov 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ca:9f:82:2e:97:4c:be:f0:1f:6e:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Nov 4 04:00:00 2023 GMT
Subject: CN=10fa77f0-cd0b-4afe-aa42-53ac8309cce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:53:39:cd:95:c4:ba:e6:fd:63:1d:ea:c2:
89:70:ad:bc:99:23:3d:24:26:a4:c4:36:39:21:2a:
96:b3:65:9f:8f:73:10:42:37:b9:37:ad:4e:24:2f:
96:8c:f7:48:25:d4:cd:d8:67:f7:9e:42:1f:37:16:
4c:72:90:d5:40:73:e4:23:91:e4:1a:b9:19:93:0f:
73:7b:f2:4e:d2:9f:28:0e:3d:e7:00:e1:ac:cf:1e:
0f:b1:08:4c:6e:f7:ed:78:fa:f0:30:15:a5:18:26:
0f:55:e4:43:a2:b0:6e:db:93:95:a1:06:b9:c7:7c:
71:e8:5a:f3:26:30:f4:03:7c:c5:f7:3c:96:81:26:
f5:94:60:1c:31:a9:c0:9c:31:e5:a1:ca:48:e5:83:
a6:e7:e4:dc:23:bd:48:30:25:b1:07:06:75:91:d7:
a8:7e:56:91:9c:73:c7:93:7b:7b:bf:28:b6:bb:e2:
5f:0b:f2:a9:37:b9:82:86:44:f7:f8:13:e1:50:12:
d7:75:14:ee:f8:3e:f4:45:ae:bd:cc:f2:c1:f3:b6:
71:3e:22:fc:36:5c:07:bf:86:57:8f:d6:a7:f2:f2:
32:d0:55:c1:2f:cd:5a:88:08:1c:18:d8:61:80:55:
98:0d:ba:5e:83:37:36:3e:c1:50:8d:ce:8d:18:9a:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:77:EC:77:83:26:6B:DB:30:32:13:F6:9A:1C:68:09:96:51:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/6b4f3376-f1fc-3a2c-aace-0a96329c0b0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:fb:89:db:c2:37:71:2d:be:38:13:00:74:57:88:b7:89:a7:
2c:36:c8:97:00:e8:e4:4a:9a:53:e2:30:f7:22:30:38:ee:f8:
71:a3:09:d8:aa:cf:77:96:95:8d:a2:d4:83:20:50:49:c3:27:
e7:88:17:44:a9:fe:99:b6:a7:4e:83:17:8a:b6:5f:b6:63:f3:
e1:39:2d:0f:9b:f5:b8:02:da:fc:cb:5d:8f:74:14:7c:c2:f9:
9e:c0:0b:21:27:00:17:ff:ba:c3:00:03:68:d1:5f:38:2f:df:
73:90:8d:ec:bd:08:ed:a4:de:1a:3d:6c:0d:55:ce:3d:f3:55:
41:6e:d6:71:8a:5d:a3:e1:17:f8:46:86:a5:a0:0e:75:52:f4:
ae:98:84:43:49:21:c4:76:0d:ad:8b:b7:82:80:33:d4:b4:b5:
9d:de:b6:94:73:8c:e2:cf:7e:be:85:ac:40:ea:20:5b:d0:ef:
25:cf:9c:d3:95:9b:a1:2c:a0:d3:6b:dd:9b:59:fd:3a:cc:7d:
c9:51:c4:03:99:aa:cc:c0:5a:4e:ad:e7:2d:d0:85:43:4b:d1:
cb:d8:4d:7b:bd:e7:df:3f:d7:69:7e:de:6a:c2:b6:ca:d9:0f:
cc:5b:0e:29:91:d5:d2:f5:4b:ef:1c:2b:60:41:32:5d:f7:12:
48:e6:83:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:02 2025 by rpki-client