Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7ade0957-6f67-3aec-a919-07c660df0942.roa
File: 7ade0957-6f67-3aec-a919-07c660df0942.roa (raw, json)
Hash identifier: jXa+zZR2pbN+qQS7DUNBCcy2PlxWcJvnZ10M2r8Cv8E=
Subject key identifier: 28:2A:29:16:04:0C:52:DF:5B:CA:3E:C2:30:E5:E7:5D:58:57:1B:2D
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EA88B0ACA17838950C8653040
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7ade0957-6f67-3aec-a919-07c660df0942.roa
Signing time: Fri 22 Jul 2022 12:00:00 +0000
ROA not before: Fri 22 Jul 2022 12:00:00 +0000
ROA not after: Sun 23 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a8:8b:0a:ca:17:83:89:50:c8:65:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 22 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2023 GMT
Subject: CN=6006bba1-83ef-4185-8062-168526dd2d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:fa:c3:c4:3d:30:c8:8d:c6:46:8e:b1:3d:
6a:79:3f:bb:a0:bc:00:e6:a9:f3:1c:3e:f5:8d:2a:
ad:67:78:67:e3:d9:cc:53:6e:3d:7c:cb:fa:1e:fd:
bb:45:e5:7c:62:5c:cc:83:8e:a7:08:b4:8e:82:5b:
0f:ae:7f:a7:f8:cb:d1:b4:29:cd:9f:1f:a6:06:fc:
70:cb:bb:db:8a:6f:b2:61:74:c6:a8:3f:0b:8f:07:
c7:cd:ce:c3:54:9d:8a:f1:72:f6:7c:8e:2a:07:4b:
44:12:ec:45:0d:01:a9:59:c9:ad:eb:24:7e:0b:82:
84:09:0b:59:8c:8a:b9:e2:68:36:da:ee:dc:3c:24:
3c:00:c2:00:96:6f:55:a9:45:13:25:f2:08:cd:64:
d6:0e:17:b2:22:bf:4c:77:be:68:b4:35:03:4f:9b:
47:0a:73:6b:9c:2f:00:3d:e1:f4:d1:91:58:79:e9:
a3:7a:fd:f7:a0:04:a0:45:fe:5f:ab:d7:ca:04:b0:
17:14:ff:ec:dd:97:24:8e:82:de:f0:3e:06:5c:e0:
c6:7e:6f:68:fc:05:eb:6c:9d:0a:1f:d3:16:e0:bf:
36:20:48:05:1f:1b:1b:bc:06:c4:f5:44:00:3c:2b:
26:37:f6:9e:13:55:7a:fb:e5:4a:a7:23:9e:d0:8b:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:29:16:04:0C:52:DF:5B:CA:3E:C2:30:E5:E7:5D:58:57:1B:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/7ade0957-6f67-3aec-a919-07c660df0942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:4b:7c:71:6a:04:76:ac:78:fe:55:c2:d5:54:05:80:74:c2:
a4:0f:ad:e1:0a:5a:d7:d9:31:e2:65:3f:f0:61:0a:e3:dc:62:
58:2e:54:e8:2e:99:dc:92:0c:4e:0d:5f:50:91:03:37:35:6b:
4e:61:5f:01:25:db:ae:82:a7:8c:ba:d2:ae:0d:9d:0b:1b:b3:
0b:15:06:db:34:9a:81:be:9b:59:b8:cc:f3:00:b7:99:69:9d:
2c:2f:e8:5f:03:a9:65:87:47:1e:56:d9:4c:34:b7:e6:f6:9d:
f4:70:22:8f:7e:dd:d3:31:ce:69:99:ab:50:c8:b4:87:40:73:
88:b2:84:ff:71:89:0a:ef:3a:62:37:0c:87:03:98:30:76:0a:
d1:77:ce:ae:b9:6b:16:ad:a8:e7:84:dc:48:35:ca:8c:d3:11:
82:15:3c:52:85:da:6d:cf:40:89:3e:e8:a2:9a:08:78:9d:4f:
28:15:65:34:7f:4f:e1:69:d0:fa:3e:73:21:ca:ce:2d:ee:f4:
fb:bd:4e:52:4c:f2:65:1e:39:fb:93:ad:cc:33:d3:66:58:35:
77:fe:b1:16:ca:1f:67:e4:8b:28:74:20:d4:25:56:5c:a8:d6:
e7:a6:43:7e:31:8e:62:7e:1b:5a:49:d2:54:bc:a3:e5:77:85:
23:74:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:41 2025 by rpki-client