Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/865c4c31-cdac-360b-9208-5266f74c6552.roa
File: 865c4c31-cdac-360b-9208-5266f74c6552.roa (raw, json)
Hash identifier: bT3YgVGHhKnRavXjIPmsps/1Qt25mh9TzOrJYn0onDo=
Subject key identifier: 83:2B:D0:6C:8F:0A:82:F4:FD:7D:D8:9F:59:AE:1C:C6:02:4A:29:A4
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E7B582EA56ADA215CBA493320
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/865c4c31-cdac-360b-9208-5266f74c6552.roa
Signing time: Wed 06 Jul 2022 12:00:00 +0000
ROA not before: Wed 06 Jul 2022 12:00:00 +0000
ROA not after: Fri 07 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:7b:58:2e:a5:6a:da:21:5c:ba:49:33:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 6 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2023 GMT
Subject: CN=de2a7771-6fc6-4852-b263-97304e0966e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:ad:e6:69:49:f5:59:bd:ee:87:90:eb:85:
80:e7:03:f8:46:c9:91:6e:4a:4b:11:90:b3:bd:fe:
7a:f5:7c:49:61:42:7d:07:2f:b5:20:0f:5c:ab:6e:
1c:08:5b:a2:59:6d:be:c9:03:f4:b0:53:ba:94:df:
47:37:ed:a8:ee:53:6e:32:43:ea:d3:af:fe:61:05:
c1:6b:65:6f:7a:84:11:f3:af:19:12:6b:7f:62:0e:
48:b6:4e:44:e9:47:3e:6f:da:59:2e:fd:72:cf:8d:
c4:4c:ed:ac:d4:2d:e1:ce:9b:c9:00:6c:03:c8:a2:
ae:44:71:77:13:f2:7c:24:67:31:c3:eb:46:2f:bf:
d3:bc:c6:92:27:f7:cc:8d:e7:03:fd:e8:c2:3d:bb:
bf:64:ac:89:ca:b3:6f:72:7a:14:a5:b2:61:65:33:
47:92:eb:a2:f2:d0:64:7a:b2:1a:bb:31:58:30:91:
81:01:65:8a:33:d9:c4:bb:a4:bc:6e:b9:a0:93:b6:
1e:2f:d8:54:6e:5f:eb:23:b0:23:ec:f0:ce:90:e5:
5e:43:96:79:0f:57:f6:8e:05:c3:8a:95:2d:a3:b1:
e2:36:ec:b1:d5:d2:aa:9e:d6:84:8a:6c:a7:fc:cf:
bf:c0:5a:d0:63:dd:f3:5b:aa:eb:e7:aa:b7:e2:95:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2B:D0:6C:8F:0A:82:F4:FD:7D:D8:9F:59:AE:1C:C6:02:4A:29:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/865c4c31-cdac-360b-9208-5266f74c6552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:0a:42:75:fa:b8:0b:fb:08:79:b5:1c:3e:85:30:8e:4e:60:
bd:2a:44:b9:ba:ee:b9:14:3d:0d:20:2c:5b:69:87:f6:01:13:
4b:9f:e0:25:6e:80:38:a7:03:a1:60:d2:67:1d:87:2b:f2:eb:
ec:b9:75:f7:de:4d:81:44:8f:af:25:a0:b3:d3:c1:c3:bf:9e:
ab:ff:6c:5f:4d:50:2a:e1:ca:54:06:31:a1:d6:f3:41:df:53:
e5:78:30:60:b9:f9:da:67:8b:16:f1:0f:52:ad:7c:f0:a4:ef:
0f:77:f8:a0:38:24:54:75:82:9b:93:ba:17:f8:a0:99:92:b2:
38:fa:78:44:8d:6b:e1:1f:13:75:7b:46:27:6d:7d:a7:5e:30:
81:82:1c:f1:6b:7d:8d:a8:31:ee:69:be:72:4e:b5:62:90:58:
e2:5a:d8:02:0d:d4:08:0c:6e:0b:16:cb:a2:32:5d:d9:0f:5f:
0d:df:24:c0:3e:e5:10:d1:c7:65:f7:60:41:4f:1f:92:2b:2a:
a0:62:72:59:a0:5c:5c:52:9a:71:1b:82:61:c0:2f:40:6c:b2:
35:3c:45:2e:5b:99:62:1d:75:95:78:ad:a3:9a:29:e7:bc:0a:
f8:e0:76:da:45:8e:b0:cf:8e:ec:28:4a:cf:5b:eb:86:17:c3:
e8:41:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:23 2025 by rpki-client