Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8ec716e9-71fa-307a-b244-4f54d2ae18ec.roa
File: 8ec716e9-71fa-307a-b244-4f54d2ae18ec.roa (raw, json)
Hash identifier: mchBGzxr6NSfGFSp1oCWhXE37O5K4Uk0KNFbASyKjpM=
Subject key identifier: 48:7F:A7:55:9D:CB:BD:DD:F1:0E:36:F5:FA:52:12:F8:AB:0D:A0:99
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E9CF8AE8FD54235FC5A945BA0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8ec716e9-71fa-307a-b244-4f54d2ae18ec.roa
Signing time: Mon 18 Jul 2022 12:00:00 +0000
ROA not before: Mon 18 Jul 2022 12:00:00 +0000
ROA not after: Wed 19 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9c:f8:ae:8f:d5:42:35:fc:5a:94:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 18 12:00:00 2022 GMT
Not After : Jul 19 04:00:00 2023 GMT
Subject: CN=140c43d1-0746-4c33-8e59-52a06fb33055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:a1:9b:52:bf:0b:64:40:8f:be:12:77:c3:
b1:e2:7a:d3:c6:31:14:01:8c:42:39:72:ec:0d:f2:
62:21:9f:e2:3a:66:6a:be:86:bd:02:0f:f5:7c:26:
74:84:30:74:0c:9b:cc:82:27:f4:0b:f7:6a:d6:df:
20:fd:32:8b:66:6d:4e:e3:4c:44:a7:0c:bc:3c:1c:
fd:3c:d4:51:63:9f:b7:bb:53:6a:ae:a6:31:b6:67:
1a:d5:8e:d1:8a:7b:b1:9a:75:b6:3c:5e:f9:1b:df:
9b:f1:de:4a:b1:aa:3d:26:62:80:e6:88:a3:b8:5f:
32:1c:8a:f0:2e:98:31:3a:e4:80:36:09:bb:f5:7c:
29:6b:ca:92:dc:4b:f9:18:3a:0c:46:c3:0f:d1:62:
9c:ed:3a:1f:ff:a7:96:e1:fc:0b:a5:77:d1:1a:cb:
d3:91:26:72:76:53:2d:e1:dd:14:d4:6c:ed:31:3c:
7d:70:83:de:b0:66:99:6e:b0:29:24:e6:04:1d:c7:
6d:14:17:3c:22:ec:88:04:e1:77:30:ed:3e:db:38:
8b:7b:f3:29:ec:59:45:3c:f0:26:99:83:ae:29:d7:
89:64:ad:c5:59:6f:f7:1c:f2:c3:68:89:f4:db:35:
c0:d3:00:a4:84:dc:6f:6d:33:9b:0b:0a:60:de:f7:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7F:A7:55:9D:CB:BD:DD:F1:0E:36:F5:FA:52:12:F8:AB:0D:A0:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8ec716e9-71fa-307a-b244-4f54d2ae18ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:1e:ab:7f:55:a8:50:d1:68:9a:68:ad:78:90:9d:14:a4:5d:
93:81:f0:dc:98:9f:01:26:db:7c:e2:92:65:86:0e:2a:23:a9:
44:cd:62:8c:08:29:94:15:85:68:5b:1a:43:3d:c7:62:be:9f:
ea:ff:f4:59:96:ce:80:c0:8d:df:18:bf:24:24:19:fe:aa:c7:
3c:3b:88:de:0e:60:0d:81:ca:07:a2:bd:df:7c:06:2e:7b:93:
9d:c6:fc:8e:d7:dd:f9:4e:ed:10:ba:b6:52:fd:51:c8:56:75:
33:4d:fa:74:97:15:81:b5:f5:8e:18:05:23:0f:9d:94:0b:93:
f3:43:c0:99:be:25:06:72:48:10:94:ac:cd:d9:24:85:5f:8b:
a1:c0:a1:3f:97:97:6c:bf:58:13:92:1f:5f:0a:76:0c:6d:be:
29:1f:a6:32:81:c0:41:86:c4:39:03:75:32:04:92:6f:91:78:
3d:dc:24:37:b0:99:c4:d8:53:39:de:fe:68:c6:63:e9:c2:36:
ba:e9:ab:8c:63:1b:6c:fd:37:5a:f1:de:11:3a:fd:0f:80:23:
b8:c3:2e:bb:07:0f:a5:c5:59:d0:60:ba:c4:e9:8a:1e:f8:34:
33:ed:72:52:a5:ac:7e:20:b3:0b:3c:5a:e7:a4:f4:c5:91:6a:
25:45:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:54 2025 by rpki-client