Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/04575b65-8b1c-3f0d-8cde-06efaa1e60e8.roa
File: 04575b65-8b1c-3f0d-8cde-06efaa1e60e8.roa (raw, json)
Hash identifier: fAKnfhqE46Cepo+FYGnbNQVItSH5f5Snpxp9zn52RAE=
Subject key identifier: 7A:56:E6:7F:DA:C4:E1:34:44:0F:11:42:03:2F:44:E0:93:F0:21:75
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E78C1FCEEAA1177ED60990C00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/04575b65-8b1c-3f0d-8cde-06efaa1e60e8.roa
Signing time: Tue 05 Jul 2022 12:00:00 +0000
ROA not before: Tue 05 Jul 2022 12:00:00 +0000
ROA not after: Thu 06 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:78:c1:fc:ee:aa:11:77:ed:60:99:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 5 12:00:00 2022 GMT
Not After : Jul 6 04:00:00 2023 GMT
Subject: CN=6698d4cf-676b-4e01-a61c-19235f6fc14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:5a:9a:8d:80:8b:f5:0f:2c:4e:2b:34:59:
a3:50:a0:f7:69:51:34:d9:b6:5a:6f:84:19:63:91:
b5:06:bb:ac:b5:e3:89:86:c4:89:0d:df:35:e0:f6:
48:17:44:97:67:47:3f:42:0e:95:42:dd:e8:01:25:
a8:4d:06:3b:35:64:fd:3b:ab:d7:2a:61:e6:88:3a:
11:db:49:fe:1c:23:c7:66:48:12:7b:5c:84:7a:0e:
83:47:0b:e1:22:c3:1e:a0:9c:31:fa:2c:09:9e:7c:
72:0e:5d:44:f7:e8:fc:ac:49:0b:39:d6:f7:b5:d2:
6a:7d:2c:06:9e:73:23:25:7f:63:b5:20:32:df:38:
8a:99:ef:75:b4:d9:7c:85:57:06:c0:cb:db:cd:70:
ac:19:76:f1:79:a1:c0:59:06:45:25:fa:c9:0e:f2:
cb:1d:e7:68:ff:b9:e7:42:80:ab:1d:5f:c9:ca:4e:
99:0b:00:91:86:45:90:0a:c1:a0:54:e4:34:71:91:
f5:41:62:60:b5:72:4b:5e:ac:09:fb:3b:3a:09:9c:
0e:5d:08:c9:34:dc:e4:88:e9:0e:95:7c:55:90:26:
8b:78:17:98:ee:2a:bb:b9:87:b5:ee:ad:eb:bd:e4:
40:10:66:01:d9:24:8a:53:38:65:cc:01:8a:3d:d1:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:E6:7F:DA:C4:E1:34:44:0F:11:42:03:2F:44:E0:93:F0:21:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/04575b65-8b1c-3f0d-8cde-06efaa1e60e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:ec:6f:d3:9d:a3:4c:a3:17:2c:66:8a:8d:53:45:47:06:68:
44:56:f4:07:90:ce:b9:73:f6:48:12:52:8d:5c:79:86:ab:30:
79:18:ae:60:5a:8a:8e:4e:bc:86:e4:1d:19:21:bd:25:15:a2:
02:e2:e0:c3:91:7f:8a:fb:15:8c:ef:7c:2f:83:9c:1c:1b:1a:
42:04:98:30:ea:2c:03:9f:47:d4:d8:f7:61:7c:9a:5e:53:2b:
47:46:18:be:0c:a8:f6:4c:fc:5f:af:40:e1:da:b2:33:f1:6c:
83:8f:ea:81:ad:b7:b4:c0:f7:ca:f0:2e:dc:4c:f0:74:b1:52:
19:e3:49:bf:3f:30:36:14:95:34:c6:dc:eb:b6:da:08:65:c5:
85:c0:71:af:a7:f3:c2:a6:56:c0:d9:2d:51:56:a2:7b:0e:c1:
f1:11:89:ba:10:c5:08:94:ef:b5:c6:b7:fd:e8:9a:0d:1a:d5:
68:f2:09:08:ef:40:66:e7:11:d9:49:83:cb:5f:aa:65:75:20:
e4:4f:4c:01:6d:d9:08:e5:57:d2:6c:6b:e2:43:a9:1c:71:91:
03:69:e8:49:ac:ce:76:13:af:29:3c:f7:34:1d:6d:64:09:95:
6a:12:ca:a5:cc:5a:a6:05:4b:6a:c2:33:ef:2f:9a:df:9e:1a:
ce:f8:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:43 2025 by rpki-client