Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1d504c46-9ca0-31f9-9570-7e83433ca495.roa
File: 1d504c46-9ca0-31f9-9570-7e83433ca495.roa (raw, json)
Hash identifier: J47WhlE5CocFoSeBNnV6MVNq87Nn/gThJKgnmnmHO6o=
Subject key identifier: 6C:58:7C:B7:62:EA:E6:B5:4F:36:56:06:EC:D9:80:20:32:34:20:C9
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CC5772F2BEF90585A42FF1100
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1d504c46-9ca0-31f9-9570-7e83433ca495.roa
Signing time: Mon 31 Jan 2022 05:00:00 +0000
ROA not before: Mon 31 Jan 2022 05:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c5:77:2f:2b:ef:90:58:5a:42:ff:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jan 31 05:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=545435df-462f-44c1-a520-5f7530065f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:d9:33:ff:8f:5f:79:5b:b7:48:c7:a9:98:
05:36:ec:19:34:18:c7:e2:e4:58:b8:e3:35:1c:f5:
de:47:39:06:d4:42:2b:a5:dd:7a:99:c5:25:b6:9d:
51:68:b4:cf:22:02:ce:ca:29:ca:7e:cc:3e:43:23:
6a:90:f3:ab:9e:64:6f:9e:12:d5:a0:0e:39:d0:35:
53:3b:0e:4b:05:3c:12:81:ce:30:9d:72:27:fa:0f:
70:2d:d6:4b:6a:8d:5e:4d:ff:20:72:7b:53:1e:6b:
32:f5:9e:0a:ec:04:61:5b:48:29:26:93:14:b0:d3:
76:3a:82:95:14:83:ef:07:84:d1:62:af:c3:6f:ff:
35:ef:6a:a4:10:cd:aa:45:8c:5f:d0:bd:83:7a:5d:
fd:12:2c:23:4d:e0:cc:7c:1a:94:d0:5f:b2:93:e1:
82:14:a8:ca:8e:40:4f:6a:95:ec:77:b2:0f:a1:b3:
77:e0:6b:83:cc:eb:81:0a:f6:21:eb:54:be:31:bc:
65:2e:f9:30:80:7b:74:32:ea:b6:b5:2c:aa:a7:67:
a0:9e:21:18:48:d1:da:ba:b8:84:1f:61:d4:c3:1b:
45:71:d2:ce:a6:53:fb:01:17:c6:16:70:e6:44:df:
c0:b5:41:f6:6d:32:5d:e2:98:59:97:fe:87:7e:75:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:58:7C:B7:62:EA:E6:B5:4F:36:56:06:EC:D9:80:20:32:34:20:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1d504c46-9ca0-31f9-9570-7e83433ca495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:05:55:24:51:2c:de:f4:32:d8:9b:d8:aa:f8:14:76:ed:cd:
19:f2:d8:2b:89:c4:24:69:de:f6:d3:a2:e5:b2:ca:a1:59:96:
ce:0d:da:db:c1:51:5c:f5:5c:0e:0a:a6:d5:79:89:49:c0:04:
ad:aa:aa:68:68:12:da:32:32:9a:c9:b0:fa:98:cb:ae:dd:aa:
7c:3d:9b:bc:d5:1c:36:14:a9:7e:4a:ea:a6:ae:68:fd:56:bb:
c8:bc:3b:e4:96:8f:cd:42:ae:0e:f1:9e:61:8f:18:aa:3c:2b:
8f:4e:80:69:14:39:85:88:e5:a8:03:36:09:e2:46:19:e6:8d:
41:c4:8a:fc:83:68:fc:52:d6:5a:38:bc:7f:78:ae:16:8d:1e:
93:30:7a:5f:17:22:a6:e6:c4:9e:42:12:6e:ba:2a:6b:80:52:
f3:21:23:1a:c8:f8:b9:eb:08:b2:dd:4c:7d:49:15:96:96:bd:
1b:ae:90:99:f1:eb:dd:99:52:ec:a8:22:5a:84:d6:c3:cf:92:
22:f4:9a:22:58:9a:51:6a:3d:ca:cd:4e:14:64:0f:11:ab:44:
19:bb:29:b6:15:7b:6d:3b:c9:b6:bd:2e:47:83:76:b4:b1:d3:
54:3e:c5:fe:e3:8f:c5:11:dc:0a:7c:d7:70:0b:e2:b4:10:4a:
30:13:d5:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDzFdy8r75BYWkL/EQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDEzMTA1MDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
NTQ1NDM1ZGYtNDYyZi00NGMxLWE1MjAtNWY3NTMwMDY1ZjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+HZM/+PX3lbt0jHqZgFNuwZNBjH4uRYuOM1
HPXeRzkG1EIrpd16mcUltp1RaLTPIgLOyinKfsw+QyNqkPOrnmRvnhLVoA450DVT
Ow5LBTwSgc4wnXIn+g9wLdZLao1eTf8gcntTHmsy9Z4K7ARhW0gpJpMUsNN2OoKV
FIPvB4TRYq/Db/8172qkEM2qRYxf0L2Del39EiwjTeDMfBqU0F+yk+GCFKjKjkBP
apXsd7IPobN34GuDzOuBCvYh61S+MbxlLvkwgHt0Muq2tSyqp2egniEYSNHauriE
H2HUwxtFcdLOplP7ARfGFnDmRN/AtUH2bTJd4phZl/6HfnViNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGxYfLdi6ua1TzZWBuzZgCAyNCDJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvMWQ1MDRjNDYtOWNhMC0z
MWY5LTk1NzAtN2U4MzQzM2NhNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACYFVSRRLN70Mtib2Kr4FHbtzRny2CuJxCRp3vbTouWyyqFZls4N
2tvBUVz1XA4KptV5iUnABK2qqmhoEtoyMprJsPqYy67dqnw9m7zVHDYUqX5K6qau
aP1Wu8i8O+SWj81Crg7xnmGPGKo8K49OgGkUOYWI5agDNgniRhnmjUHEivyDaPxS
1lo4vH94rhaNHpMwel8XIqbmxJ5CEm66KmuAUvMhIxrI+LnrCLLdTH1JFZaWvRuu
kJnx692ZUuyoIlqE1sPPkiL0miJYmlFqPcrNThRkDxGrRBm7KbYVe207yba9LkeD
drSx01Q+xf7jj8UR3Ap813AL4rQQSjAT1YA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org