Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ec64f7d9-e2cb-3ba7-97cb-56c55a6de05e.roa
File: ec64f7d9-e2cb-3ba7-97cb-56c55a6de05e.roa (raw, json)
Hash identifier: 3G22q1aTOG8y08d+A1OYYlCJ3Y0WV+6mDfQUWwPkH5g=
Subject key identifier: 2F:43:60:02:F5:E9:4E:D6:53:17:A4:1C:8B:8A:D4:00:E4:39:E5:AD
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FDE7C8A983BFA7688D590F300
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ec64f7d9-e2cb-3ba7-97cb-56c55a6de05e.roa
Signing time: Thu 10 Nov 2022 12:00:00 +0000
ROA not before: Thu 10 Nov 2022 12:00:00 +0000
ROA not after: Sat 11 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 165.140.105.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:de:7c:8a:98:3b:fa:76:88:d5:90:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 10 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2023 GMT
Subject: CN=5ccf45e7-4c3f-4102-aebd-8bc5ad9045cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:70:3b:53:81:37:f2:e7:6e:ad:d3:8e:cc:
72:6e:38:98:c8:42:d9:94:37:88:16:c7:1b:73:86:
12:13:51:c8:5a:44:45:cb:c3:f8:18:e0:e0:1c:31:
3e:f8:92:18:d8:69:65:1c:81:5e:73:e2:23:51:40:
25:d2:3b:aa:ed:f6:3e:20:7e:67:41:20:ed:35:75:
ec:62:e1:f9:4e:72:ed:b5:c4:f0:98:5f:c0:ea:fc:
48:ac:08:17:87:00:ed:e3:5a:ee:6a:b6:0a:7f:9b:
55:be:21:19:df:fc:98:88:6a:be:31:a0:52:ee:c6:
72:2a:51:e1:9f:ac:39:37:21:54:f7:cf:ee:eb:62:
93:95:f7:c1:8c:e8:fa:d9:d1:d8:75:43:48:42:17:
a5:ae:68:30:f9:ab:25:95:f9:d7:11:4e:d0:73:9e:
15:81:1d:3d:8f:3b:1e:55:99:95:35:ca:fd:85:8a:
6f:b5:aa:08:59:57:f7:33:be:df:73:d8:60:e4:1d:
27:1e:2c:c4:63:1b:c8:2e:e2:4d:f2:3d:e7:82:16:
1a:be:f3:1e:be:99:3a:96:c1:ab:46:b9:0f:8b:21:
5c:e4:8d:0f:38:cc:27:21:0e:5e:7b:14:32:f9:a7:
ee:5e:93:50:79:66:d9:20:d8:62:9e:30:a5:df:52:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:43:60:02:F5:E9:4E:D6:53:17:A4:1C:8B:8A:D4:00:E4:39:E5:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ec64f7d9-e2cb-3ba7-97cb-56c55a6de05e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:68:09:9c:f8:ad:4e:4b:87:06:ba:90:45:8b:58:30:97:e1:
4c:49:1b:eb:fa:61:1f:90:4e:f8:f0:47:14:9e:58:91:26:6b:
4d:17:d9:74:14:b2:12:e1:1c:ea:ca:d0:f7:39:37:55:7d:72:
4c:82:30:b0:84:b6:e2:61:ec:cf:88:0d:61:03:11:9d:44:89:
d0:b5:7b:f4:b0:88:d7:e5:18:e3:50:fc:5e:ee:58:00:c2:02:
85:67:9f:e0:94:4a:93:f7:2e:ec:47:bf:c7:16:98:1a:05:dd:
c7:b7:fe:ad:4f:37:25:ce:98:33:62:19:c3:b0:d3:dc:77:60:
7f:6d:18:7c:ee:84:e1:d9:ff:01:25:cd:d0:0c:05:d7:22:61:
52:0d:44:9b:f7:88:07:22:43:df:1f:42:1d:10:ab:9d:88:e2:
4d:62:6f:ed:a4:d5:ef:a9:ad:f4:ba:b2:aa:a0:44:95:a3:56:
90:ad:c7:dd:16:4b:ba:8c:f1:34:d1:cd:04:8f:af:16:0a:d8:
0c:22:ed:49:ef:17:d8:cf:12:c7:6e:a5:7a:38:2c:94:5a:00:
97:b3:07:22:af:8d:e7:fa:f6:d3:64:ff:6c:88:95:0f:7d:86:
a0:e5:99:ed:72:ef:81:8c:bc:58:4d:90:de:31:5d:b0:70:4b:
b5:9a:3f:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/efIqYO/p2iNWQ8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTExMDEyMDAwMFoXDTIzMTExMTA1MDAwMFowLzEtMCsGA1UEAxMk
NWNjZjQ1ZTctNGMzZi00MTAyLWFlYmQtOGJjNWFkOTA0NWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXNwO1OBN/Lnbq3TjsxybjiYyELZlDeIFscb
c4YSE1HIWkRFy8P4GODgHDE++JIY2GllHIFec+IjUUAl0juq7fY+IH5nQSDtNXXs
YuH5TnLttcTwmF/A6vxIrAgXhwDt41ruarYKf5tVviEZ3/yYiGq+MaBS7sZyKlHh
n6w5NyFU98/u62KTlffBjOj62dHYdUNIQhelrmgw+asllfnXEU7Qc54VgR09jzse
VZmVNcr9hYpvtaoIWVf3M77fc9hg5B0nHizEYxvILuJN8j3nghYavvMevpk6lsGr
RrkPiyFc5I0POMwnIQ5eexQy+afuXpNQeWbZINhinjCl31LpyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9DYAL16U7WUxekHIuK1ADkOeWtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvZWM2NGY3ZDktZTJjYi0z
YmE3LTk3Y2ItNTZjNTVhNmRlMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5oCZz4rU5Lhwa6kEWLWDCX4UxJG+v6YR+QTvjwRxSeWJEma00X2XQU
shLhHOrK0Pc5N1V9ckyCMLCEtuJh7M+IDWEDEZ1EidC1e/SwiNflGONQ/F7uWADC
AoVnn+CUSpP3LuxHv8cWmBoF3ce3/q1PNyXOmDNiGcOw09x3YH9tGHzuhOHZ/wEl
zdAMBdciYVINRJv3iAciQ98fQh0Qq52I4k1ib+2k1e+prfS6sqqgRJWjVpCtx90W
S7qM8TTRzQSPrxYK2Awi7UnvF9jPEsdupXo4LJRaAJezByKvjef69tNk/2yIlQ99
hqDlme1y74GMvFhNkN4xXbBwS7WaPzA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:38 2025 by rpki-client