Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/776fc620-2281-3194-bb5e-f6eca0c38aa1.roa
File: 776fc620-2281-3194-bb5e-f6eca0c38aa1.roa (raw, json)
Hash identifier: FIcyMAOJIBrK11+np4G4VbkVJ3w/zahE1rE4va3TbT0=
Subject key identifier: 3E:8F:0E:81:4B:E1:6A:36:29:84:DD:31:C0:1A:8F:C8:98:5F:D1:DE
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F259856F0FB3E3DA91D564700
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/776fc620-2281-3194-bb5e-f6eca0c38aa1.roa
Signing time: Mon 05 Sep 2022 12:00:00 +0000
ROA not before: Mon 05 Sep 2022 12:00:00 +0000
ROA not after: Wed 06 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:25:98:56:f0:fb:3e:3d:a9:1d:56:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 5 12:00:00 2022 GMT
Not After : Sep 6 04:00:00 2023 GMT
Subject: CN=fb5269ed-881c-4cb0-83df-772c4e5c2e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:12:45:23:09:51:5b:e1:21:0e:97:47:8e:
fd:f4:e3:de:52:0a:0b:b3:44:cb:2b:c0:e7:49:47:
4b:08:bd:01:7d:4a:92:57:97:4d:8c:6d:52:bd:34:
4f:d5:43:6a:00:3e:c4:32:94:f3:7c:08:2b:ee:3b:
a6:5b:34:a6:48:84:ef:73:48:de:5f:42:88:97:d0:
f3:bf:b2:a1:1a:35:43:46:ae:63:ec:4a:34:b4:9d:
f4:75:82:48:45:aa:87:69:e2:6b:b0:ce:9a:be:78:
b6:a1:d8:63:f0:93:f8:36:47:47:62:8d:06:e8:83:
ed:2f:27:d5:4e:aa:23:ed:77:8b:c2:63:cf:e5:bc:
9d:f5:a5:b1:50:42:d2:b1:a2:90:7d:c9:26:e0:b7:
a7:1a:08:a2:b2:82:62:f9:ef:06:1e:e5:f6:58:5a:
95:00:23:42:cc:4b:a9:f3:59:88:57:1a:fd:4f:ea:
02:3f:b1:62:59:d5:53:fd:ae:13:8e:d8:66:b9:7f:
9f:86:32:ee:d1:e3:d6:83:d7:dd:7a:70:8f:0c:93:
1f:aa:e7:d6:4a:ae:f3:08:a9:74:f3:f3:1a:61:86:
98:80:86:97:d1:6b:83:22:d9:4b:0c:85:73:cf:89:
29:db:07:ad:39:6e:5c:40:3b:4c:fc:ef:44:1a:9f:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8F:0E:81:4B:E1:6A:36:29:84:DD:31:C0:1A:8F:C8:98:5F:D1:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/776fc620-2281-3194-bb5e-f6eca0c38aa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:2e:eb:67:ab:8b:a7:9c:a8:c1:0a:1d:af:81:0f:a1:82:40:
2b:64:39:35:45:98:3d:e9:db:3d:f1:ac:d0:00:58:6d:8a:c2:
dd:16:0b:03:0c:d0:a1:49:82:b9:22:7f:3d:a5:f7:08:2a:03:
b3:d8:32:8f:07:ff:1c:8c:bd:9f:fd:5c:3b:80:52:85:c7:79:
68:58:4d:86:3f:c3:50:3c:83:1d:54:d3:86:05:16:8f:a7:e5:
15:e7:7d:13:62:c9:d4:56:d3:4d:28:dd:95:9f:b5:c4:62:44:
5b:3e:90:4a:65:a8:01:2c:65:53:ab:e9:99:6d:4d:81:22:d4:
89:a9:fb:a0:38:56:11:ef:4e:46:77:34:8f:e7:24:a0:d8:92:
35:60:6b:40:69:6e:e9:79:d4:c4:a9:e0:5d:5a:ed:77:44:d4:
cc:bc:01:c2:f9:95:6e:46:dc:a3:4a:58:64:c7:ff:6f:a0:ec:
33:06:66:bc:60:00:98:f9:ef:33:c3:c3:1d:5a:55:ab:fb:47:
0e:53:45:09:d0:7a:59:fb:72:0e:17:16:84:e9:2b:c5:fa:06:
49:ba:91:1e:29:89:2b:ca:3f:03:dc:42:5b:38:f8:d9:46:64:
45:87:aa:2d:72:66:8b:e0:ca:f4:d7:1b:9c:fc:b1:7b:02:a0:
8b:9a:14:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:04 2025 by rpki-client