Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/00f173d7-c422-3746-9435-894de9ec7431.roa
File: 00f173d7-c422-3746-9435-894de9ec7431.roa (raw, json)
Hash identifier: t9Aa6D/5k+eeuHS+zrCbR0TFCFtCT9f5JbTxpF2k67U=
Subject key identifier: 6A:2B:40:E1:B6:07:6F:B3:29:8F:C2:FE:E2:63:65:9F:5C:A6:25:F1
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E5A070C34FF4F3ECFBD1DB440
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/00f173d7-c422-3746-9435-894de9ec7431.roa
Signing time: Fri 24 Jun 2022 12:00:00 +0000
ROA not before: Fri 24 Jun 2022 12:00:00 +0000
ROA not after: Sun 25 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:5a:07:0c:34:ff:4f:3e:cf:bd:1d:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 24 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2023 GMT
Subject: CN=92db9372-d0c8-4cfc-9a9f-0e1bc1d7e180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c6:bd:f5:0a:a6:7a:10:57:6a:07:1e:6c:75:
e0:36:fc:f5:aa:a0:08:7d:4a:02:a2:9b:12:93:0f:
fc:87:81:33:45:10:0e:0d:04:dd:31:7b:6b:7b:f7:
c9:91:29:48:53:7b:73:7c:17:4e:d0:8f:be:08:51:
99:a0:d2:55:aa:79:9c:2a:c2:32:4c:f7:6d:59:f1:
b6:5f:7c:a8:07:6d:ec:a3:09:0f:2c:e8:67:fb:ba:
27:69:34:ed:78:a8:97:37:1d:3a:02:44:ab:65:69:
9d:71:51:0a:05:e4:cc:43:c0:c4:29:9e:4e:fa:ff:
24:01:bd:db:98:20:d3:c1:c9:77:7b:cb:2f:6b:f5:
03:71:3a:03:b4:20:c3:79:30:a4:86:9f:14:89:cb:
8f:bb:8c:b3:92:da:13:40:71:04:d6:33:c8:50:9e:
3c:d4:36:dd:4e:2e:ff:5f:c3:88:5b:e5:ea:22:f5:
8e:7e:d6:a4:c2:f0:01:52:0f:15:1f:99:1d:3b:3f:
bf:9c:d9:a2:91:49:03:b4:5a:25:63:f5:d0:fd:80:
f7:1d:73:cd:f4:d9:6d:94:ab:52:2b:f1:11:e3:15:
6f:72:55:6b:56:eb:f8:ca:ab:60:ed:9b:66:fd:6f:
42:1f:6c:11:e4:e0:7e:1d:38:9b:6d:a3:5b:38:af:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2B:40:E1:B6:07:6F:B3:29:8F:C2:FE:E2:63:65:9F:5C:A6:25:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/00f173d7-c422-3746-9435-894de9ec7431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:b5:e9:a7:fd:ce:0e:dc:c2:86:bd:2e:5e:43:79:55:d9:e6:
2d:1b:38:85:b1:73:9b:89:c8:b6:70:97:cc:02:6a:e6:62:80:
2d:82:f5:d8:93:e8:cf:a7:a3:4d:26:2c:c4:bf:2d:a6:e8:e6:
cd:e2:5d:19:13:bc:ad:39:a1:9f:be:9f:98:76:9f:a7:3b:59:
d1:61:41:ea:a6:19:43:5e:89:95:05:9a:03:e5:7b:f4:6a:0e:
6e:dd:29:44:ff:ea:24:f8:e9:79:8a:97:d7:7b:fb:4d:2f:58:
78:c0:62:96:e9:ec:9a:e5:27:bf:87:b8:7b:e3:51:4c:d7:f7:
de:c6:99:7a:ad:9f:66:85:37:d3:e3:d1:c0:99:34:6a:10:9d:
8f:30:be:cb:8d:0e:50:fd:d2:ce:30:b0:fa:94:6b:8a:5e:9f:
5f:c2:d0:36:e9:4f:41:c0:88:b2:a9:b9:f9:fa:07:80:cc:2c:
4b:66:6b:25:cf:dd:c9:1f:71:a2:90:0e:27:df:f9:54:0c:1b:
1f:60:95:da:79:41:11:1c:e1:bf:c3:a6:a0:43:4f:7b:47:c7:
26:a5:eb:50:3d:9b:84:d3:86:d7:69:ac:cb:ae:81:f1:48:7b:
27:10:0e:53:d7:7f:eb:b0:e0:c5:56:0c:44:7c:f7:d6:57:57:
8c:90:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:06 2024 by rpki-client on console-fra.rpki-client.org