Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/905bfb26-b7a7-335e-9dc4-a23df0851c47.roa
File: 905bfb26-b7a7-335e-9dc4-a23df0851c47.roa (raw, json)
Hash identifier: 1q/0fdTZxHRuxiUUbkqKbQZVHyVGD6RNc2oO9optCN0=
Subject key identifier: 8D:F0:4E:51:AC:51:AE:2D:01:BA:CA:9C:EA:9D:11:05:45:0A:8C:86
Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a
Certificate serial: 010D0C9F4328584891DB321F7F10EE75B6900C00
Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/905bfb26-b7a7-335e-9dc4-a23df0851c47.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 400745
IP address blocks: 2620:59:2000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:32:1f:7f:10:ee:75:b6:90:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=436af8ee-c425-4a6a-b36c-6f3629befa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:32:88:e4:32:19:81:78:eb:77:2e:66:27:
5b:6d:49:5c:df:56:b2:8e:fb:dc:05:b3:fc:92:95:
92:3b:1c:f8:1b:63:64:eb:c2:4e:d7:31:d1:cc:95:
e0:97:6f:af:0a:75:c2:68:0d:95:0b:7f:ee:37:b1:
fb:83:ac:2b:2e:a9:b2:99:66:60:b0:ab:1c:69:39:
2e:19:b9:a3:9a:53:5d:63:e2:b9:0c:19:a9:02:4e:
ca:ff:dc:6f:89:d4:39:69:c7:f8:e5:da:56:b7:62:
9a:1b:5e:1c:3a:99:bb:9e:30:15:d4:c9:fb:e0:6c:
18:96:94:bc:d9:49:c8:b6:08:ab:23:46:84:52:0f:
5e:28:d3:bb:ce:89:7d:dc:1e:61:96:56:66:09:77:
d3:aa:c4:ee:a4:3f:81:b6:b3:58:5d:87:d5:3c:61:
07:4a:7d:52:6d:99:4d:64:15:98:14:16:38:a7:4f:
da:06:cc:18:d8:ac:a3:05:6c:d7:a4:b4:e7:c7:94:
49:b5:98:dc:71:bb:14:e0:50:e8:2d:6f:01:57:ac:
0f:5c:fd:58:ba:0b:0f:7c:a4:59:1b:9f:0f:36:63:
d2:82:63:e4:07:e8:1d:aa:8c:ab:b1:5a:46:2b:85:
55:a2:da:05:cb:f5:f9:ff:e4:ef:c1:6c:c6:0b:40:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F0:4E:51:AC:51:AE:2D:01:BA:CA:9C:EA:9D:11:05:45:0A:8C:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/905bfb26-b7a7-335e-9dc4-a23df0851c47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl
X509v3 Authority Key Identifier:
keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:59:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:c9:70:3e:60:cc:d0:75:99:63:79:25:9c:5e:cd:a4:0b:14:
0c:41:ac:56:e0:13:92:d7:ec:5f:b4:48:ab:90:df:9d:a9:dc:
54:e6:07:5a:83:00:81:2e:6e:7f:e0:34:10:f4:dd:af:be:fd:
15:24:9a:1f:17:83:52:d5:60:93:6e:0e:40:13:42:61:05:97:
00:67:67:ae:18:34:55:e9:e1:7e:e0:8d:78:7e:e2:4b:c7:62:
9f:48:22:03:23:3b:8b:8a:96:19:24:b0:0f:0d:24:6f:cb:60:
b4:bc:87:83:59:5a:fc:e8:4a:98:ba:de:c1:65:87:69:14:4c:
73:76:33:25:d4:fd:80:4a:12:58:23:6a:9e:0f:7d:fb:42:31:
f6:62:79:17:11:11:f2:c0:6e:53:c5:1c:24:a7:10:2f:56:52:
63:0a:06:fb:5f:13:cd:0e:9a:6a:d1:ec:d8:f7:fd:7e:da:22:
80:96:35:2c:80:07:71:09:4f:da:30:ce:d1:02:72:63:70:c4:
dd:ec:eb:c4:a5:83:d3:92:10:a1:52:b8:a9:4c:b6:89:22:f9:
02:72:f3:51:63:25:05:b8:b1:29:11:c9:b1:52:a3:3e:ac:28:
ee:ab:c4:0b:48:1a:a7:d0:40:8e:ae:3b:b7:7c:b9:93:6c:b0:
37:6e:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:19 2025 by rpki-client