Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e0b5c1dd-a67d-3c03-8c97-a480c282e3fc.roa
File: e0b5c1dd-a67d-3c03-8c97-a480c282e3fc.roa (raw, json)
Hash identifier: W4MFef5DNNh3bW9Ox0xXofy1xhPb8jef4SCitz9slIQ=
Subject key identifier: 22:5D:23:55:07:E8:3E:6F:69:19:D6:A7:31:A7:8E:7F:D1:CD:0B:F5
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F12B509FD7365CEF10EC3D880
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e0b5c1dd-a67d-3c03-8c97-a480c282e3fc.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Wed 30 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:12:b5:09:fd:73:65:ce:f1:0e:c3:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Aug 30 04:00:00 2023 GMT
Subject: CN=d179dd49-9628-4ca2-b146-26158e83f3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:e8:80:38:56:23:7b:1a:09:50:c3:f3:d4:
92:74:cb:4a:47:6b:29:3e:dd:06:68:05:bd:b4:64:
1f:03:ff:ec:44:60:54:d7:76:7b:23:6f:21:0a:df:
d9:18:3d:d2:4a:f1:d8:a0:35:8b:fe:22:bd:9d:cf:
c5:15:f8:9d:2f:42:23:5a:15:b6:66:6c:12:96:d5:
4e:4c:b4:7f:95:65:9e:b3:f8:29:0d:7f:b6:4b:b5:
b3:21:b1:ed:fc:0c:b1:5a:18:09:58:55:64:b9:29:
86:0e:a1:28:a7:01:e4:aa:2e:0e:44:e2:a5:40:88:
36:fe:a0:52:2e:02:e4:28:73:47:44:51:10:7a:ce:
76:33:d4:c3:75:42:a0:33:9d:d1:ac:87:14:19:f6:
1e:bb:61:20:be:e1:e1:0e:f3:56:0c:f5:2e:0b:1b:
f5:40:19:07:62:27:ab:ad:50:eb:19:9b:fd:a2:a5:
36:30:66:24:20:73:f2:4b:ff:83:17:60:af:22:6a:
b7:c8:be:93:f0:30:42:27:60:08:89:a4:32:a4:28:
b5:91:2c:49:1e:27:ce:fa:8a:46:a9:8e:04:65:41:
05:b6:26:0a:67:b0:7d:c9:e7:5b:ff:d4:d5:39:69:
19:49:c0:60:11:07:09:7b:38:43:18:db:62:da:34:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5D:23:55:07:E8:3E:6F:69:19:D6:A7:31:A7:8E:7F:D1:CD:0B:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e0b5c1dd-a67d-3c03-8c97-a480c282e3fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:dd:7f:55:17:39:4e:46:b4:7f:0e:04:5b:3d:c8:43:6e:3c:
a3:20:97:f4:88:26:cf:0d:6b:bf:ce:a0:0a:b8:07:a6:cc:b9:
8b:57:5f:4c:69:ba:8b:fe:2a:55:ee:9a:e6:9c:8d:12:d2:18:
61:88:f8:a1:3f:58:68:4e:ad:19:c3:55:0a:79:a5:8e:31:5d:
29:f7:c3:bd:d0:72:93:61:eb:0e:fc:49:2d:51:cf:74:9e:d7:
b2:b6:39:cb:83:4b:16:a8:a1:e9:bc:4b:37:2d:c9:76:52:84:
54:26:a4:b1:f9:6e:be:56:83:fd:20:fe:73:b6:8f:0f:43:2b:
80:8f:41:97:b9:60:3f:2e:f3:e4:e1:8e:8d:e6:71:f4:a8:c2:
fe:7f:f3:e9:4b:1f:95:19:a2:01:d3:a9:04:60:6e:17:12:e7:
bb:1e:0d:22:a8:9e:0a:2a:65:a6:a5:39:05:16:98:50:2b:30:
3b:20:93:2a:c9:03:a3:b7:f4:4d:5f:75:6e:48:bb:f3:68:4f:
0f:48:8c:b5:9d:36:aa:a2:ad:7e:3f:c9:3a:21:58:97:71:e6:
db:d3:26:3d:0c:af:2c:7b:93:89:81:57:ec:f1:13:dc:97:c8:
65:c9:53:0a:db:b5:7e:3a:24:1e:63:0c:30:50:eb:08:bb:fc:
29:16:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:02 2025 by rpki-client