Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/113ac068-417f-31f4-86f9-c8b3b927220b.roa
File: 113ac068-417f-31f4-86f9-c8b3b927220b.roa (raw, json)
Hash identifier: Qr3AuVP6tt78js2LGfcWEH4o+EbIcfwiFKTXVK/WRWo=
Subject key identifier: 1C:4A:FB:A9:23:5D:A5:43:15:16:A2:73:7A:8C:98:22:2B:E5:DD:AE
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DE7D2DDEFA5AA709352E10588
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/113ac068-417f-31f4-86f9-c8b3b927220b.roa
Signing time: Sat 14 May 2022 12:00:00 +0000
ROA not before: Sat 14 May 2022 12:00:00 +0000
ROA not after: Mon 15 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:e7:d2:dd:ef:a5:aa:70:93:52:e1:05:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 14 12:00:00 2022 GMT
Not After : May 15 04:00:00 2023 GMT
Subject: CN=6fdfa872-449c-449a-a5ef-9ef3e4c0acf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9b:b3:81:aa:1a:98:70:a5:1a:7b:a4:e8:fb:
cf:de:9c:1d:ee:d4:93:93:ad:55:2b:9f:ad:b4:f2:
69:c0:43:79:97:7e:8b:dc:c1:7f:cb:8c:cc:a1:af:
c0:fb:fc:4e:f1:b9:af:14:56:28:fd:92:e1:2c:54:
13:83:11:31:03:93:c7:a5:2e:5d:49:85:04:09:10:
60:8c:44:d2:1d:dd:1f:3f:6b:8c:2a:69:12:a1:5f:
ae:b6:cf:3b:45:5a:ef:b8:f2:c1:96:70:91:80:3c:
1d:d2:f1:49:9e:7f:c9:21:e0:3b:de:cb:5a:2e:76:
eb:21:60:4b:7a:cc:13:1b:8f:ea:ea:43:e0:28:25:
2d:93:8c:0b:a3:61:cd:ac:43:52:3b:4f:f0:34:3c:
36:80:2c:ac:ab:cc:d9:c0:ff:32:08:92:ef:8b:0c:
e1:68:bd:ee:ee:74:a1:75:80:4b:4f:ab:0f:51:13:
b8:77:98:4f:31:83:6a:78:e7:45:12:87:4a:da:53:
3c:0e:4f:4d:2c:e3:84:8b:fe:a9:cf:7c:8f:53:a1:
91:6f:60:5e:60:af:4c:19:3f:d9:7d:0b:d1:89:75:
cb:9a:21:de:1d:76:43:3c:c4:03:63:63:ae:8e:82:
d5:a9:bf:d4:42:cb:e4:92:b7:57:2b:3e:bd:2b:1b:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4A:FB:A9:23:5D:A5:43:15:16:A2:73:7A:8C:98:22:2B:E5:DD:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/113ac068-417f-31f4-86f9-c8b3b927220b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:c8:9b:6b:79:2b:19:72:90:43:6a:e3:56:94:86:aa:ab:9a:
12:b9:0d:2d:0b:41:53:eb:04:3f:45:b5:3a:07:c1:05:af:e3:
9f:58:33:da:e5:94:b0:c2:88:bd:f1:2d:c0:13:35:dc:29:f8:
e3:45:4b:06:39:1b:8c:06:f2:f6:2d:4c:ba:39:47:dc:27:78:
7f:ce:14:47:76:7e:28:d2:f1:77:23:c9:40:00:1d:a9:af:be:
2a:e7:6a:2c:7e:10:a7:7e:7a:55:96:7f:4e:44:17:42:07:74:
bf:02:21:aa:68:78:fb:a4:ba:cd:d3:92:6f:ba:3d:52:48:00:
32:68:48:08:59:19:72:2d:07:94:75:60:df:e5:44:45:1c:4d:
e0:07:08:bb:2c:5c:d7:b6:3c:1e:e0:02:28:c6:16:6f:d5:54:
4d:b9:7e:50:a1:08:4b:bf:fa:13:73:c7:45:a9:d7:95:c9:0e:
63:ce:4b:15:45:8d:59:c4:eb:21:ee:f4:fb:97:6b:0a:bc:41:
22:b6:1c:a4:dc:31:8f:19:2b:77:eb:9f:07:10:85:34:ca:b5:
d8:fc:88:a1:cd:0b:1c:f3:83:7f:75:1e:42:7f:38:20:9a:cb:
ec:7b:fc:23:06:53:0a:f7:ad:49:8b:23:08:b9:81:2f:37:1a:
ef:2c:be:e0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3n0t3vpapwk1LhBYgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDUxNDEyMDAwMFoXDTIzMDUxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NmZkZmE4NzItNDQ5Yy00NDlhLWE1ZWYtOWVmM2U0YzBhY2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5uzgaoamHClGnuk6PvP3pwd7tSTk61VK5+t
tPJpwEN5l36L3MF/y4zMoa/A+/xO8bmvFFYo/ZLhLFQTgxExA5PHpS5dSYUECRBg
jETSHd0fP2uMKmkSoV+uts87RVrvuPLBlnCRgDwd0vFJnn/JIeA73staLnbrIWBL
eswTG4/q6kPgKCUtk4wLo2HNrENSO0/wNDw2gCysq8zZwP8yCJLviwzhaL3u7nSh
dYBLT6sPURO4d5hPMYNqeOdFEodK2lM8Dk9NLOOEi/6pz3yPU6GRb2BeYK9MGT/Z
fQvRiXXLmiHeHXZDPMQDY2OujoLVqb/UQsvkkrdXKz69Kxsq6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBxK+6kjXaVDFRaic3qMmCIr5d2uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvMTEzYWMwNjgtNDE3Zi0z
MWY0LTg2ZjktYzhiM2I5MjcyMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADvIm2t5KxlykENq41aUhqqrmhK5DS0LQVPrBD9FtToHwQWv459Y
M9rllLDCiL3xLcATNdwp+ONFSwY5G4wG8vYtTLo5R9wneH/OFEd2fijS8XcjyUAA
Hamvvirnaix+EKd+elWWf05EF0IHdL8CIapoePukus3Tkm+6PVJIADJoSAhZGXIt
B5R1YN/lREUcTeAHCLssXNe2PB7gAijGFm/VVE25flChCEu/+hNzx0Wp15XJDmPO
SxVFjVnE6yHu9PuXawq8QSK2HKTcMY8ZK3frnwcQhTTKtdj8iKHNCxzzg391HkJ/
OCCay+x7/CMGUwr3rUmLIwi5gS83Gu8svuA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org