Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2246487b-ba5b-3ec7-a964-e29eb1f1c8c6.roa
File: 2246487b-ba5b-3ec7-a964-e29eb1f1c8c6.roa (raw, json)
Hash identifier: NHE/i1dnwffge8BX7Ll4W3JyMu8s3o8ne3RP3i35TRs=
Subject key identifier: 97:72:9F:66:C6:17:B6:03:DF:53:75:BA:2A:1D:A9:1F:1C:9B:A9:CF
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CE9DFFE893C333B8E29E13F78
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2246487b-ba5b-3ec7-a964-e29eb1f1c8c6.roa
Signing time: Sun 13 Feb 2022 05:00:00 +0000
ROA not before: Sun 13 Feb 2022 05:00:00 +0000
ROA not after: Mon 13 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e9:df:fe:89:3c:33:3b:8e:29:e1:3f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 13 05:00:00 2022 GMT
Not After : Feb 13 05:00:00 2023 GMT
Subject: CN=cb8c9567-8802-45a6-9232-d0dac7219a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:f4:4d:f3:b9:f9:88:da:92:29:6d:bf:7f:
2d:83:aa:80:4d:ab:e4:82:f9:8c:2c:22:97:87:8c:
07:9f:c7:c5:c7:86:a2:98:f4:9f:63:8c:09:72:61:
44:8a:5f:ea:77:2c:30:97:48:f5:43:55:a5:ea:0f:
34:37:02:ec:e6:c8:48:87:36:12:bb:3f:24:fd:46:
d8:95:a8:42:9e:07:7d:9f:d0:73:69:61:67:ae:a8:
ff:38:2a:e7:e6:58:8a:64:94:86:c8:65:13:74:1e:
88:7b:ec:a9:dc:1d:8c:ae:5c:0e:95:a5:40:bb:7f:
fb:ce:eb:1b:3e:8a:e8:2e:c9:81:3d:e9:b1:5a:f0:
f1:ef:0d:e8:74:98:0e:11:6f:ad:ff:d2:b0:3b:23:
91:de:83:b8:0c:ae:35:d1:7b:94:15:cd:3d:51:79:
40:55:f3:07:20:5a:44:4f:d7:5e:c9:c6:d6:f2:99:
18:8b:05:40:f5:b9:77:3f:1a:36:7a:74:dc:51:85:
17:f4:ba:eb:e4:4b:b5:39:4d:2a:3a:26:2e:29:57:
c3:8e:73:de:96:29:2b:aa:74:dc:8b:16:d4:6f:e8:
ab:2d:d4:d4:87:2e:0d:6d:0b:46:c2:17:05:13:9e:
9a:41:f9:1d:be:79:ee:2a:b6:28:cd:78:c7:b4:06:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:72:9F:66:C6:17:B6:03:DF:53:75:BA:2A:1D:A9:1F:1C:9B:A9:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2246487b-ba5b-3ec7-a964-e29eb1f1c8c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:19:cb:56:3f:17:a3:e3:b5:17:f6:a7:d4:c7:42:c9:78:8e:
fd:ca:10:13:85:df:8d:25:20:29:1d:2f:b6:5c:2b:39:26:ea:
f5:a1:7d:c8:33:9d:89:ae:34:0d:ed:4c:8d:36:dd:bf:5a:13:
36:08:6b:b0:19:c4:88:d4:b5:01:27:f2:c9:e8:38:f4:78:47:
9a:b2:f6:a7:19:95:e8:79:27:9d:4a:95:ed:af:a0:dc:e3:35:
3a:c2:50:38:de:5d:3d:88:46:96:9c:41:d3:9c:a2:4d:41:36:
c2:6c:a1:a6:c6:67:d6:13:07:24:33:93:75:d9:02:ac:51:e4:
bf:09:54:d5:cd:e0:96:96:5e:7a:c8:06:fe:aa:1e:62:d1:14:
8e:10:f2:b7:bf:1b:e8:88:b8:c4:7f:5e:2d:25:f4:84:2b:86:
97:40:87:bf:3f:a9:c0:3b:af:51:85:ee:82:95:d0:9c:63:06:
5e:2b:6f:eb:93:4d:56:a8:01:23:ea:7b:e3:b1:95:8d:fd:56:
4d:e9:f5:9a:44:da:05:b3:76:f5:5a:f4:18:b8:bd:e7:83:ee:
e6:75:f8:3e:37:f7:13:de:c3:ad:71:fe:41:d1:07:9c:f1:3a:
a7:99:14:81:78:f4:96:08:ac:50:93:41:d4:13:55:0f:bd:97:
12:f6:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:07 2025 by rpki-client