Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0b58cd3f-c9bb-3905-9825-9e294cd56b55.roa
File: 0b58cd3f-c9bb-3905-9825-9e294cd56b55.roa (raw, json)
Hash identifier: LcaaGly17OLdeBRQ2pCWIW9VAodepO000xZDjUMlhBo=
Subject key identifier: 1C:15:BF:63:E2:7C:BC:9F:A2:13:F3:79:EF:12:3A:17:E8:90:C4:E4
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D4B959DF360734E28EB410BE0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0b58cd3f-c9bb-3905-9825-9e294cd56b55.roa
Signing time: Sun 20 Mar 2022 04:00:00 +0000
ROA not before: Sun 20 Mar 2022 04:00:00 +0000
ROA not after: Mon 20 Mar 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4b:95:9d:f3:60:73:4e:28:eb:41:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 20 04:00:00 2022 GMT
Not After : Mar 20 04:00:00 2023 GMT
Subject: CN=b92c7b53-40dd-4886-9bf0-fa29b86e332e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1b:f9:96:bc:3c:ba:bb:e4:fa:2a:a1:49:88:
89:ab:3e:4c:40:28:51:1b:73:91:73:bc:41:14:7f:
ee:82:75:60:3d:6c:6e:b5:8c:b1:d3:65:5e:89:06:
b9:d1:81:b3:39:1a:dc:fb:0f:7a:72:fe:04:98:27:
12:3a:30:25:6e:a0:31:28:f3:d7:be:57:47:33:a6:
4f:6b:f2:97:d7:c7:7c:6d:18:63:25:82:9b:a2:67:
6e:ad:d3:c0:28:3b:7c:75:b7:52:6c:e8:f0:2c:2b:
8c:b5:c5:30:92:a3:8f:15:8c:0d:0f:06:02:51:9e:
96:3f:24:09:db:09:5d:c1:13:2b:94:b8:81:3e:be:
c5:15:b5:32:86:96:24:b1:db:a8:94:75:8a:51:26:
cd:af:74:38:48:5d:25:b9:bd:89:4c:a1:fc:83:d1:
0c:61:cc:b3:3a:92:48:d4:70:e4:a3:e8:84:5e:71:
d8:f0:15:0c:a1:44:d0:cc:cc:80:57:c8:15:87:16:
6d:d5:dc:1b:ac:0a:c5:4c:53:ca:11:d4:12:70:e2:
09:13:2d:56:d3:c6:39:6a:c6:91:1b:68:1d:d4:0c:
07:6e:a9:0e:55:7f:0f:d6:7e:5d:ea:8d:53:01:4f:
b9:22:34:b0:c8:2c:42:f5:25:dd:74:14:ab:49:29:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:15:BF:63:E2:7C:BC:9F:A2:13:F3:79:EF:12:3A:17:E8:90:C4:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0b58cd3f-c9bb-3905-9825-9e294cd56b55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:80:3a:08:e6:02:fa:64:28:ca:9b:e9:13:55:74:a0:ce:68:
16:a0:a3:06:27:c6:80:3f:b8:68:21:0b:e3:0c:d1:cd:a8:bd:
21:af:55:85:1f:0f:81:f9:c0:43:a4:19:01:69:af:46:78:c8:
7e:da:6e:97:f7:db:80:28:26:a9:6c:35:8d:47:ff:56:26:f9:
d1:6d:9d:38:2d:cd:f3:66:c4:73:86:c9:04:24:2e:dc:6f:ed:
37:68:a0:58:8b:5c:03:73:01:9c:d8:bb:84:d2:1c:c0:96:76:
21:92:7c:06:36:2e:6d:75:81:bd:cd:b3:2e:6e:3c:d4:d1:89:
ed:73:59:75:7e:38:c4:9f:7c:b5:c6:94:66:d6:70:9a:6f:c0:
12:33:c1:a0:d7:58:b6:40:55:48:09:47:28:4d:af:14:64:ce:
1c:72:9e:cb:fa:ec:cb:0f:e9:f5:c8:b9:0f:2c:3d:84:f5:00:
11:35:0f:c8:3f:11:77:04:23:a4:dd:21:c0:d7:a9:1d:94:56:
48:14:a4:4d:a2:0e:9a:d5:cb:40:56:39:58:e0:83:4f:9e:8c:
44:89:e2:81:35:cf:38:28:65:4d:f5:5f:31:6c:f7:6f:c8:69:
98:63:43:e7:95:d6:7b:b4:b7:3f:4f:f0:ce:86:c7:a3:98:dc:
8f:8b:60:cd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD1LlZ3zYHNOKOtBC+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDMyMDA0MDAwMFoXDTIzMDMyMDA0MDAwMFowLzEtMCsGA1UEAxMk
YjkyYzdiNTMtNDBkZC00ODg2LTliZjAtZmEyOWI4NmUzMzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xv5lrw8urvk+iqhSYiJqz5MQChRG3ORc7xB
FH/ugnVgPWxutYyx02VeiQa50YGzORrc+w96cv4EmCcSOjAlbqAxKPPXvldHM6ZP
a/KX18d8bRhjJYKbomdurdPAKDt8dbdSbOjwLCuMtcUwkqOPFYwNDwYCUZ6WPyQJ
2wldwRMrlLiBPr7FFbUyhpYksduolHWKUSbNr3Q4SF0lub2JTKH8g9EMYcyzOpJI
1HDko+iEXnHY8BUMoUTQzMyAV8gVhxZt1dwbrArFTFPKEdQScOIJEy1W08Y5asaR
G2gd1AwHbqkOVX8P1n5d6o1TAU+5IjSwyCxC9SXddBSrSSnCuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBwVv2PifLyfohPzee8SOhfokMTkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvMGI1OGNkM2YtYzliYi0z
OTA1LTk4MjUtOWUyOTRjZDU2YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEmAOgjmAvpkKMqb6RNVdKDOaBagowYnxoA/uGghC+MM0c2ovSGv
VYUfD4H5wEOkGQFpr0Z4yH7abpf324AoJqlsNY1H/1Ym+dFtnTgtzfNmxHOGyQQk
Ltxv7TdooFiLXANzAZzYu4TSHMCWdiGSfAY2Lm11gb3Nsy5uPNTRie1zWXV+OMSf
fLXGlGbWcJpvwBIzwaDXWLZAVUgJRyhNrxRkzhxynsv67MsP6fXIuQ8sPYT1ABE1
D8g/EXcEI6TdIcDXqR2UVkgUpE2iDprVy0BWOVjgg0+ejESJ4oE1zzgoZU31XzFs
92/IaZhjQ+eV1nu0tz9P8M6Gx6OY3I+LYM0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:27 2025 by rpki-client