Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d3f69133-4a16-3a0f-b9d8-299bffec6f4d.roa
File: d3f69133-4a16-3a0f-b9d8-299bffec6f4d.roa (raw, json)
Hash identifier: Eb4HFehx6Tvi2oxc3RnUbynryzIATFbDPbdnyUlCP3o=
Subject key identifier: 4B:44:02:8B:3C:C4:84:4C:2D:09:AD:D8:A5:AE:B1:BD:5E:BE:D2:4E
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DFB66A7586CF94C7162FDC480
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d3f69133-4a16-3a0f-b9d8-299bffec6f4d.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Mon 22 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fb:66:a7:58:6c:f9:4c:71:62:fd:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : May 22 04:00:00 2023 GMT
Subject: CN=b0d75afa-75e0-4717-a089-f3ababc29f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:ba:6e:6f:a1:45:9b:34:f2:fd:f5:d1:49:
04:ce:ec:9f:0e:37:78:4f:da:c8:52:70:ac:2f:79:
ad:25:dd:43:2b:a7:f8:8a:ce:0d:03:45:a1:6f:36:
88:05:a9:e2:fa:1c:70:a3:ce:af:4f:7b:81:3e:53:
e3:cb:db:a3:bf:c8:c3:5e:6d:28:aa:8e:d6:92:c4:
e7:ce:cc:a7:1f:50:2e:1a:91:37:b1:24:30:ff:17:
76:6c:85:21:5f:88:17:9d:67:49:f1:c9:c7:35:73:
9b:3e:b3:20:f0:34:f9:27:64:f9:17:0f:4d:25:10:
89:30:19:f0:f1:32:52:a8:fd:30:79:34:c0:d9:59:
5b:dd:d5:48:42:20:ea:bd:e8:9f:80:f6:e2:f1:47:
23:fb:1e:7c:56:96:c9:81:e9:59:71:49:9f:d3:5c:
59:e6:3c:35:e9:a8:0f:d9:98:83:6c:42:a4:1e:80:
ee:5e:f7:b0:43:2b:9d:98:12:fa:93:a2:6a:4b:fe:
99:bc:b6:7f:de:a4:34:23:79:7e:48:a8:a8:35:0a:
5f:56:f0:97:41:c9:bb:04:72:c2:a2:31:51:c4:c2:
3a:75:5e:6f:a1:46:47:75:82:02:c9:51:a6:80:b5:
1d:a7:1c:68:d6:9c:fd:8f:7a:fc:93:6d:e6:1f:f4:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:44:02:8B:3C:C4:84:4C:2D:09:AD:D8:A5:AE:B1:BD:5E:BE:D2:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d3f69133-4a16-3a0f-b9d8-299bffec6f4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:07:8b:4f:90:e0:db:31:eb:72:9d:9e:e9:8f:cb:8d:62:ba:
48:02:df:35:17:e9:69:3d:2c:8d:39:5f:91:f4:9a:b6:17:44:
2c:bf:c2:bf:db:fc:4d:75:4f:2a:6a:73:95:0b:f1:b1:2d:06:
71:62:55:90:30:23:bf:5f:2e:25:5d:59:b4:f2:bb:fb:c7:fd:
bf:70:e6:ff:b4:6a:f6:37:1d:c6:59:d7:79:15:46:de:1c:78:
ed:a2:48:0e:be:a9:39:2f:96:06:dd:0d:73:dd:ba:8f:21:09:
07:d9:0f:88:c2:ec:8d:8d:58:5a:6d:a6:9e:c5:44:20:3a:e3:
15:b5:3a:bc:e5:c2:b5:08:60:c1:ea:30:76:a9:2a:f1:ff:e0:
53:91:1c:b2:d8:67:ff:23:78:c4:e0:59:d3:96:60:60:2c:93:
6e:f5:c2:bf:b8:1e:b9:bd:ce:47:22:e2:2f:45:79:be:fb:7a:
31:20:f6:d3:91:41:6b:d1:74:51:88:ea:f7:8b:88:90:c1:30:
b0:cd:e0:9f:4d:49:08:52:61:98:83:38:cf:c7:8c:72:ef:b7:
e6:26:f2:d8:a0:60:03:42:13:14:e2:cb:45:02:54:49:7b:07:
1c:50:b5:41:35:21:ac:cb:ef:9a:b4:46:b1:b6:73:0a:48:ed:
cb:c4:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:24 2025 by rpki-client