Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c5655ca0-385e-388c-97b4-356fc491b34b.roa
File: c5655ca0-385e-388c-97b4-356fc491b34b.roa (raw, json)
Hash identifier: QRnnRlR3YVb1ja1ie1fxFrAgiejROSEI9RY8i+Y3cwQ=
Subject key identifier: 60:96:D1:ED:D0:F8:36:C4:BF:40:13:90:E9:50:27:B9:65:50:93:01
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DCE564421A4F068F30F244C00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c5655ca0-385e-388c-97b4-356fc491b34b.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Sat 06 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ce:56:44:21:a4:f0:68:f3:0f:24:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : May 6 04:00:00 2023 GMT
Subject: CN=4720e237-aafe-42dc-a024-17508613f875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:98:ed:54:86:06:41:35:61:1f:d0:a0:69:
db:54:cf:e9:50:a2:be:bc:05:30:0c:e2:e9:4a:fa:
04:88:a3:a9:b8:27:82:fe:f3:97:42:7f:30:b8:d7:
b9:4c:c8:3b:9c:0b:5c:3a:16:44:1e:e9:02:4c:dc:
b8:8e:5f:66:90:64:38:3c:ee:b8:5a:2f:ad:4d:a4:
8f:14:cc:fb:be:dd:ad:67:94:3a:02:8f:26:f1:e0:
61:93:93:4a:43:c8:3e:5e:b3:a3:86:bb:1e:6d:53:
2a:b1:2d:aa:e6:29:aa:16:1e:74:53:28:b7:6d:10:
9f:a3:43:ef:e4:cc:b8:ff:82:bf:fd:ad:03:61:63:
cd:ab:06:a5:bd:4d:4a:53:f9:8a:51:be:6b:5e:9e:
7d:13:a1:ce:d9:62:9c:4f:b4:46:e2:07:b6:7a:21:
23:0d:b5:fb:df:b9:01:6f:7e:4c:0b:9e:05:36:2c:
de:57:e1:34:5b:2b:55:fe:2d:f0:1f:8d:6f:d1:79:
41:6f:e1:31:ba:cb:26:9b:f5:4c:24:24:a6:fe:aa:
d2:f9:36:7c:55:bf:61:c9:47:3b:cc:69:1d:e4:14:
f7:c0:7d:12:f6:56:d0:49:8e:af:a6:41:56:85:c7:
44:80:37:fb:6f:d7:6f:46:5b:b5:23:ed:75:ec:8f:
07:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:D1:ED:D0:F8:36:C4:BF:40:13:90:E9:50:27:B9:65:50:93:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c5655ca0-385e-388c-97b4-356fc491b34b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:f0:25:ba:cb:df:37:69:57:9d:34:43:a9:63:80:8d:0a:12:
32:ac:1a:d3:1f:72:d7:e4:25:eb:6b:15:58:3f:b0:e3:48:20:
c8:c7:3e:1d:5f:80:06:b4:dd:a6:65:ea:ff:d0:31:ea:da:81:
46:68:6d:77:85:3e:9d:0d:35:fa:f9:31:dc:14:3d:36:51:e9:
eb:fa:b9:ab:47:16:b5:cd:9c:b5:c7:55:a1:35:29:1d:b3:4b:
f0:e9:6a:53:53:2a:aa:9f:d1:53:c1:02:f5:58:92:bb:b4:2c:
da:5d:f5:a5:13:24:ee:4f:0b:64:b6:41:9f:23:20:15:96:6e:
81:48:d9:2e:95:ad:be:86:69:32:4a:9c:e6:08:f5:f7:c6:3d:
32:07:c7:16:f0:5e:c1:dd:a7:4c:3f:ac:6c:56:5c:c9:5e:5c:
c2:70:ad:41:64:dd:61:0b:73:01:b4:88:bd:a2:0a:eb:c1:19:
04:43:2a:8b:f4:76:da:ac:b3:bc:5e:7e:e7:57:3e:d8:aa:22:
a2:2b:2a:7b:a2:47:3b:3d:1f:17:a4:da:12:f0:9b:74:3e:da:
8c:f5:5b:77:2e:8c:61:c5:35:3a:53:4a:43:97:57:15:51:2a:
3b:d1:10:89:b3:93:f4:f7:f3:1f:59:ea:a0:ab:c7:ce:35:fe:
b9:e3:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:34 2025 by rpki-client