Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8587899c-34af-3389-81c4-58db79083dd9.roa
File: 8587899c-34af-3389-81c4-58db79083dd9.roa (raw, json)
Hash identifier: JBTAN6S3Qy3NexzMA13tru2Mdcw4Cd9Nw+9kcd5DB0g=
Subject key identifier: 8A:D3:CF:62:30:97:4E:60:79:15:34:E3:B6:1A:6F:64:8A:4F:81:1F
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D7AD56FA9E90F08C72EEC3DC0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8587899c-34af-3389-81c4-58db79083dd9.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Thu 06 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7a:d5:6f:a9:e9:0f:08:c7:2e:ec:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : Apr 6 04:00:00 2023 GMT
Subject: CN=7a96b44a-3177-48b4-b990-e815ce43fa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:47:81:94:fd:f3:6e:bb:bf:db:e1:34:68:
f4:37:ff:81:87:11:38:ba:ab:e2:e5:ae:49:67:7f:
a1:a0:9e:92:72:2f:0b:a6:f6:85:00:94:3d:8e:fd:
33:92:ca:85:41:3d:35:72:e0:f8:1d:83:ab:e8:25:
96:b7:96:fc:a3:78:db:5c:70:fa:66:6c:a1:ff:f0:
f8:56:a5:cf:46:ea:ec:08:55:fd:be:d9:03:22:ab:
a7:aa:55:df:4f:78:25:27:e2:00:a4:75:4a:4e:9a:
b5:8c:31:fd:1e:d9:9d:86:ad:05:db:d1:19:4e:6c:
2c:bf:16:f4:51:67:59:48:b3:02:23:ed:a0:e5:09:
e3:83:f4:81:e3:46:b6:2d:fa:f6:19:61:f8:a5:58:
8f:81:fb:96:ed:fc:ae:55:93:08:49:ae:0c:fc:1e:
ea:73:6e:df:4c:0c:b9:f2:a2:ec:4f:22:b0:b4:11:
79:80:f7:aa:bc:12:ff:a7:a8:0a:ab:6b:41:2e:a8:
cb:e7:3d:1a:88:50:99:36:d9:4f:1c:45:f7:d6:89:
a1:64:d5:13:d6:e9:ab:93:2d:96:6c:a2:17:21:86:
39:cb:91:d7:a8:06:70:f7:75:80:94:02:29:6c:1f:
7c:76:ab:d3:74:d9:69:72:d9:c2:e7:f2:bf:ab:21:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D3:CF:62:30:97:4E:60:79:15:34:E3:B6:1A:6F:64:8A:4F:81:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8587899c-34af-3389-81c4-58db79083dd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:c0:ca:1c:dd:0e:c7:8f:a6:09:eb:6e:b0:5e:20:2a:bf:b8:
af:db:08:82:20:bc:d1:3a:d4:da:94:2c:39:e7:f2:34:92:b5:
00:a6:e0:ca:0f:62:0d:8c:6c:fd:db:23:e9:41:27:d1:3d:d8:
37:86:d9:f9:79:ac:d3:3f:b3:e6:74:99:8f:b0:ef:2e:06:19:
83:5e:42:a6:4f:49:20:d0:a1:ef:59:6b:23:59:c2:0c:b2:a1:
07:d0:fa:9f:25:9f:9f:8c:9b:df:69:55:23:f0:fe:d0:44:54:
67:96:80:03:53:a9:36:3a:e3:b6:cf:92:0d:65:86:8d:2e:7a:
97:09:03:ed:a3:e3:e2:0e:15:2f:36:e4:a4:09:99:ba:ee:5c:
93:3e:df:35:a4:31:14:4a:99:8e:c2:3a:bd:9c:a2:ce:5d:8c:
51:52:12:1e:37:64:c6:75:df:2c:9a:95:c2:1b:64:66:66:d3:
09:32:da:02:5b:13:c2:aa:d1:cd:f4:18:6b:b8:57:ab:88:28:
bd:61:19:d9:f4:e7:23:42:f7:30:4d:7f:c2:63:02:bb:c0:ca:
98:ae:93:dd:08:42:63:ee:85:ee:2a:46:09:4d:32:06:b0:09:
03:31:88:92:f7:a5:a3:70:d2:04:ae:ea:17:91:35:b9:43:bc:
94:9d:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:38 2025 by rpki-client