Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/095aaee9-6f77-383d-8add-311389ecb317.roa
File: 095aaee9-6f77-383d-8add-311389ecb317.roa (raw, json)
Hash identifier: D1jpJgxjc2dDHULIxSpyNBfsiMLyVV6G7X8FUNzKkJI=
Subject key identifier: 8F:2F:21:1A:8C:3E:1A:68:3A:78:BC:7C:E0:A8:68:9E:91:95:0D:18
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EF98EA857DFFDDB1CC6E1E740
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/095aaee9-6f77-383d-8add-311389ecb317.roa
Signing time: Sat 20 Aug 2022 12:00:00 +0000
ROA not before: Sat 20 Aug 2022 12:00:00 +0000
ROA not after: Mon 21 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:f9:8e:a8:57:df:fd:db:1c:c6:e1:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 20 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2023 GMT
Subject: CN=c27af895-7283-4de4-983d-3b7f8751cf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:6e:8a:a0:94:0f:0a:74:4f:89:3b:34:83:
b3:bc:11:1e:21:95:aa:17:3d:26:2c:54:6e:7a:6c:
d6:06:cc:67:4c:60:8c:6d:40:83:7f:3e:f7:4d:8e:
29:c8:34:d3:d5:50:e5:65:51:1e:42:c5:28:16:74:
81:b1:8b:bb:4d:3e:3e:61:8d:31:df:30:31:fe:79:
fb:84:7b:2b:88:37:cc:60:f0:12:3a:4d:7f:9e:3a:
04:3c:cf:c9:01:eb:12:77:82:fb:cc:16:96:af:06:
62:45:81:44:71:d7:b1:20:a7:0b:f3:df:85:1f:1e:
0f:2a:33:a4:0c:f3:64:be:3a:7a:ff:d2:a0:5a:13:
54:f8:af:a7:57:b1:3e:21:c1:2a:e6:18:f8:ad:9e:
36:db:14:9b:a2:5b:96:5d:1b:2a:8f:e6:04:49:8a:
fb:77:40:f9:7f:e1:2d:26:6a:88:ed:4f:5b:59:85:
07:00:fd:26:4d:48:fe:e9:31:27:77:44:7f:19:44:
f5:66:44:f5:f5:c7:e2:e9:d9:74:f8:15:2d:df:91:
c9:12:b5:6d:f6:5e:e7:10:52:00:a8:ad:5c:b0:f2:
b5:60:ae:55:7a:d9:4a:1d:56:76:92:89:07:d7:cc:
64:9d:6c:e3:8e:4e:31:f1:29:be:8e:1c:0e:26:f6:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:21:1A:8C:3E:1A:68:3A:78:BC:7C:E0:A8:68:9E:91:95:0D:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/095aaee9-6f77-383d-8add-311389ecb317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e1:27:8e:12:ea:97:b9:23:d1:99:43:3c:20:b3:d7:e4:da:
6e:bf:b9:f4:3b:48:16:23:0c:ce:1f:18:37:6e:38:83:ef:7a:
76:f3:61:a4:cf:c3:bd:d4:32:bd:7f:54:ac:4c:50:32:65:03:
17:74:99:63:ed:e5:14:4a:8a:d8:06:20:0b:57:81:78:02:32:
54:aa:62:0d:92:1d:d4:86:65:06:95:bb:8a:ee:d6:9c:92:63:
b2:2a:f0:25:58:97:e7:04:c4:76:a1:68:e3:0e:6b:63:0b:16:
4f:29:7e:79:24:b7:21:1b:f0:4b:ef:38:f9:eb:07:9a:d0:fc:
86:d5:82:44:8d:e0:b0:78:a7:5a:ed:81:d2:09:98:50:e4:60:
5d:5c:c1:82:62:4f:d6:89:a2:71:09:16:29:a5:2b:b0:df:3b:
c5:2a:67:d0:b5:01:a4:80:42:e0:57:29:cd:50:38:6c:67:00:
03:e9:0e:1f:1a:db:e4:e4:5b:44:76:63:67:6f:0b:76:ce:ba:
69:bd:21:df:55:1b:c4:f8:e8:76:cb:61:aa:32:75:9a:33:28:
2d:c0:12:ce:00:db:8a:3e:70:81:38:6c:b1:ae:66:ca:21:b4:
60:59:fe:d4:af:8d:23:0d:d5:ac:9a:14:23:58:e1:3a:17:ac:
fa:35:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:40 2025 by rpki-client