Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1cd2931b-8576-398e-b3c3-aac9f6edf926.roa
File: 1cd2931b-8576-398e-b3c3-aac9f6edf926.roa (raw, json)
Hash identifier: YYbpiZpuOM/vOI29aWwVebu6r0RgNp6jLqCAxaE/+T8=
Subject key identifier: B4:67:59:90:FB:40:DD:5A:53:75:C1:18:DD:8D:AA:53:47:BB:6A:D4
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F432858402C66DAC92540E82E5DF5D2C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1cd2931b-8576-398e-b3c3-aac9f6edf926.roa
Signing time: Thu 08 Dec 2022 12:00:00 +0000
ROA not before: Thu 08 Dec 2022 12:00:00 +0000
ROA not after: Sat 09 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2c:66:da:c9:25:40:e8:2e:5d:f5:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 8 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2023 GMT
Subject: CN=8db7a173-3d08-4531-8c8a-04225f16f3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:c4:b1:b3:67:e3:cf:1f:8c:b6:bd:4c:66:
0c:32:f0:d0:98:b4:45:ea:a0:12:2f:25:86:eb:2c:
cc:2d:e7:de:aa:6f:c4:06:5f:99:79:42:f2:04:e8:
2d:1c:50:e9:29:09:8a:f6:ab:b3:aa:e1:84:9e:87:
b1:b5:68:3c:2b:82:f8:89:4e:3a:ae:06:16:6a:7e:
bb:da:02:c6:a2:13:1d:6b:13:be:c7:8b:72:44:74:
81:ff:80:28:ab:db:70:26:9b:1b:c0:c9:ad:f6:75:
a3:0d:5e:97:61:e3:87:7c:0f:50:21:f0:8f:ed:8a:
38:fb:ef:e0:16:79:ec:0d:4b:b9:57:ba:26:be:40:
00:aa:7d:7f:ae:3d:db:1a:69:b5:19:d2:56:64:e6:
fc:8f:3f:52:c9:85:f3:3a:10:9c:8a:1d:d0:f4:1d:
15:f6:b5:73:98:88:85:28:d6:b5:a1:d0:15:e1:7a:
4b:7c:c6:75:c7:44:05:b2:72:d2:3d:6e:70:21:77:
51:fa:29:a3:e0:47:d2:fe:6b:cd:ed:dc:23:e9:84:
57:83:0b:40:67:5e:5a:e1:9f:83:b0:be:c3:d1:02:
8f:ef:f9:77:50:4c:85:1f:54:9c:fd:1e:f3:23:f0:
a4:df:fc:e7:dc:b5:2c:c2:64:0f:29:8e:f0:5c:51:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:59:90:FB:40:DD:5A:53:75:C1:18:DD:8D:AA:53:47:BB:6A:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1cd2931b-8576-398e-b3c3-aac9f6edf926.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:bb:16:20:bf:0f:e2:b1:63:e7:d9:58:f2:41:70:1e:5a:68:
5f:b3:90:d1:8a:a6:2b:a8:16:ab:c8:2b:6f:09:89:29:6b:36:
12:96:b3:39:82:2d:ba:d3:1e:83:11:e4:49:07:a0:7b:ab:31:
fb:0e:d3:39:f3:02:fc:c9:2a:de:d3:99:74:db:78:7f:78:47:
cf:b0:47:ab:a0:a4:68:9e:8c:a7:48:33:ec:65:67:c0:36:f9:
66:95:2f:81:61:53:fc:6b:34:fb:f6:2a:31:70:c1:7b:4a:ec:
b2:4e:c9:ce:de:da:17:f9:fd:88:62:85:a4:e3:c6:59:6f:65:
04:b6:03:d9:3b:9a:4d:55:eb:00:62:2a:a3:a8:33:89:b7:60:
4b:5b:0b:9f:da:4c:2c:91:d6:73:e4:2b:5d:36:6f:17:76:89:
1a:b5:68:2a:0e:e8:cf:95:bc:23:af:42:2d:11:14:8b:e9:b3:
b3:64:fa:77:04:ca:13:28:0a:a9:6f:6e:86:03:67:bc:02:3a:
63:47:56:b2:89:f8:ef:84:99:09:dc:7c:14:24:9d:be:b2:0d:
9d:10:31:43:34:af:24:b4:1b:cb:ab:11:3d:99:f8:11:25:11:
63:7d:df:a5:c1:97:68:33:2f:77:af:af:b6:e8:8c:58:a5:ea:
47:86:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org