Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1854cae3-e32f-32ba-ac8a-dfecdcd34458.roa
File: 1854cae3-e32f-32ba-ac8a-dfecdcd34458.roa (raw, json)
Hash identifier: eGLcU+6lxUKrOc5u6Lm3w3rxFM82bwLvLsNp8kwU7eo=
Subject key identifier: 0E:FA:77:7F:54:77:38:C1:FA:74:D7:92:06:1E:59:50:B2:C6:94:9E
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D45B15C1858380B2AA5E59208
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1854cae3-e32f-32ba-ac8a-dfecdcd34458.roa
Signing time: Fri 18 Mar 2022 04:00:00 +0000
ROA not before: Fri 18 Mar 2022 04:00:00 +0000
ROA not after: Sat 18 Mar 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:45:b1:5c:18:58:38:0b:2a:a5:e5:92:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 18 04:00:00 2022 GMT
Not After : Mar 18 04:00:00 2023 GMT
Subject: CN=2aab9938-dc03-4594-8f89-ea7e46c66e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:7b:fd:d8:f0:9a:ae:3e:ba:21:fe:4f:e4:
7f:05:69:aa:46:63:8b:7a:65:92:0b:e6:3b:b6:4c:
ac:9a:db:59:34:11:63:c9:19:82:68:cf:9a:51:53:
7b:42:45:11:9d:a3:65:89:42:07:78:26:79:0b:6a:
9a:3f:a8:59:2b:d0:d3:70:9d:9f:14:2f:16:45:84:
e8:89:9d:a4:e1:74:56:93:68:35:7a:c3:3a:66:27:
3d:3b:a8:e5:cf:dd:a9:a2:64:33:58:dd:32:91:f6:
23:10:d3:9e:04:48:49:04:78:e2:b2:a3:fc:19:57:
c4:6a:c5:4b:ae:2c:a2:91:26:bd:62:76:41:f6:00:
a9:9d:d7:41:b6:52:0f:99:69:6a:45:df:41:a7:49:
e9:25:df:85:54:f9:98:55:d0:bb:a5:30:33:2f:ab:
ff:9b:b4:86:90:ac:73:6a:0f:a6:06:33:3f:5e:b5:
31:62:ad:9e:5b:b2:b1:1c:00:43:67:b9:4f:1b:ee:
2a:d1:1c:78:ad:63:3e:ae:f3:47:1b:26:a7:28:cd:
7b:49:8d:d1:94:c8:82:7c:21:ed:b1:90:67:39:ef:
d3:cd:6f:e9:c7:cf:27:ab:c6:a3:71:36:26:3d:3a:
16:48:46:8f:82:11:c2:26:46:56:dd:51:e7:f5:5e:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:77:7F:54:77:38:C1:FA:74:D7:92:06:1E:59:50:B2:C6:94:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1854cae3-e32f-32ba-ac8a-dfecdcd34458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:24:c7:9f:95:d5:2c:60:37:6a:c4:a3:bc:a4:0f:81:ee:c2:
f8:f2:5a:66:93:7e:3f:79:08:41:3a:9f:da:ed:b0:a2:22:94:
ed:50:51:6e:ee:80:8d:34:a9:f9:d1:f4:8c:3b:cc:1f:86:b9:
41:7b:06:5b:ba:93:f5:1d:d5:7c:ce:3d:98:84:7f:d2:7e:8d:
d7:36:a6:65:a1:79:ae:23:ef:2c:2d:51:0e:2b:9d:6f:e1:6b:
d3:ad:cd:db:54:e2:e9:cf:a3:a5:3d:70:e9:b9:1a:bc:88:49:
fd:d9:69:8e:9f:0d:82:09:d0:17:fd:94:7c:08:b0:01:69:a3:
71:c7:2d:b1:a8:d1:4a:38:19:45:4e:72:bf:69:e9:45:83:34:
dc:0d:1e:99:38:91:25:ea:f7:3e:41:c0:f6:10:6a:a1:1c:8d:
50:36:da:f0:42:46:52:ff:3e:f9:c4:3f:2a:27:c4:22:24:ab:
9e:97:98:ce:fd:da:1a:ba:51:86:04:10:5b:b6:16:07:e1:59:
6f:71:45:9a:9b:8c:8d:31:ee:d7:c8:05:ad:73:2d:c2:4d:66:
2a:e8:b4:48:1d:e9:9a:94:53:44:9f:2e:f7:74:39:8a:d8:87:
1a:3e:71:58:4a:fc:00:16:72:f1:fd:40:7c:08:8f:86:e0:76:
25:5b:5a:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD1FsVwYWDgLKqXlkggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDMxODA0MDAwMFoXDTIzMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
MmFhYjk5MzgtZGMwMy00NTk0LThmODktZWE3ZTQ2YzY2ZTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJB7/djwmq4+uiH+T+R/BWmqRmOLemWSC+Y7
tkysmttZNBFjyRmCaM+aUVN7QkURnaNliUIHeCZ5C2qaP6hZK9DTcJ2fFC8WRYTo
iZ2k4XRWk2g1esM6Zic9O6jlz92pomQzWN0ykfYjENOeBEhJBHjisqP8GVfEasVL
riyikSa9YnZB9gCpnddBtlIPmWlqRd9Bp0npJd+FVPmYVdC7pTAzL6v/m7SGkKxz
ag+mBjM/XrUxYq2eW7KxHABDZ7lPG+4q0Rx4rWM+rvNHGyanKM17SY3RlMiCfCHt
sZBnOe/TzW/px88nq8ajcTYmPToWSEaPghHCJkZW3VHn9V5qYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA76d39UdzjB+nTXkgYeWVCyxpSeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvMTg1NGNhZTMtZTMyZi0z
MmJhLWFjOGEtZGZlY2RjZDM0NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADEkx5+V1SxgN2rEo7ykD4HuwvjyWmaTfj95CEE6n9rtsKIilO1Q
UW7ugI00qfnR9Iw7zB+GuUF7Blu6k/Ud1XzOPZiEf9J+jdc2pmWhea4j7ywtUQ4r
nW/ha9OtzdtU4unPo6U9cOm5GryISf3ZaY6fDYIJ0Bf9lHwIsAFpo3HHLbGo0Uo4
GUVOcr9p6UWDNNwNHpk4kSXq9z5BwPYQaqEcjVA22vBCRlL/PvnEPyonxCIkq56X
mM792hq6UYYEEFu2FgfhWW9xRZqbjI0x7tfIBa1zLcJNZirotEgd6ZqUU0SfLvd0
OYrYhxo+cVhK/AAWcvH9QHwIj4bgdiVbWqA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org