Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/28cfdd87-2616-3f73-9985-b24a02b69b55.roa
File: 28cfdd87-2616-3f73-9985-b24a02b69b55.roa (raw, json)
Hash identifier: 8pjqx6hnMItLF+IvMZpm1zVqaDhXsHLslcFZCwzVjOs=
Subject key identifier: D9:97:07:DC:4E:E3:E5:AC:97:53:BC:71:16:54:C2:86:1F:CC:6E:4E
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F8D5956914835265810A90B40
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/28cfdd87-2616-3f73-9985-b24a02b69b55.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Fri 13 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8d:59:56:91:48:35:26:58:10:a9:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2023 GMT
Subject: CN=e2327726-aaf6-4d3d-9b6a-58fd287f7199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:09:c1:e7:fc:49:9a:44:69:65:2c:a0:01:
29:6d:a4:bf:52:96:e4:88:c6:8a:f0:41:71:f5:39:
a4:18:9e:c5:66:f9:d7:2a:4a:e2:46:62:70:52:af:
df:1a:74:df:cd:60:7a:23:52:01:79:9f:89:b5:0e:
8c:1b:b6:c4:ce:48:8c:9d:3c:7f:81:b3:08:86:36:
7e:3b:07:ba:ca:9e:61:14:84:3c:37:b9:44:16:05:
6c:6d:4e:54:ac:73:30:35:aa:d5:1f:cc:ad:1f:ee:
52:73:d3:4e:e6:80:57:6c:1d:de:f0:eb:67:94:cb:
fb:43:5a:85:20:45:32:6a:a3:d5:a5:64:3c:52:c3:
d5:fa:d5:59:70:1d:c9:63:57:d7:09:55:2d:62:2b:
77:93:72:d9:4a:a7:21:28:53:fb:9e:08:34:0e:63:
c2:44:dc:bb:da:1c:51:28:52:bc:d5:7a:55:90:7c:
30:14:e3:e5:db:04:ff:db:f0:c9:28:32:01:a8:ed:
1f:28:77:d3:32:53:bc:33:3d:2f:79:5d:99:32:5a:
0d:1d:c1:be:2b:d6:cd:b7:1f:08:69:95:64:97:80:
b5:b3:b2:0c:16:c0:27:21:c2:90:01:43:83:d0:7b:
32:46:7d:7e:29:4d:8d:0b:f3:4c:ff:5d:b3:64:4f:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:97:07:DC:4E:E3:E5:AC:97:53:BC:71:16:54:C2:86:1F:CC:6E:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/28cfdd87-2616-3f73-9985-b24a02b69b55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:c6:73:7e:c5:36:52:85:ff:47:8d:22:a4:76:08:68:5e:a6:
74:80:9f:8e:be:b0:9a:9b:96:49:be:fb:fa:b4:c3:24:2c:fb:
05:3f:7d:b3:7f:31:31:22:3e:1b:7e:61:6a:60:a4:59:71:8a:
b2:fa:c4:4f:8e:f8:31:54:45:94:6f:dd:99:13:59:db:77:0a:
d7:18:26:2e:fd:f0:d2:b6:c4:7a:13:5d:2f:d9:1d:30:ec:e0:
1c:65:28:8b:9e:f0:64:12:c3:b4:6a:7e:1f:d8:fc:0a:75:60:
9e:d1:10:39:b6:26:4d:ed:f9:14:e9:ab:1f:4e:ae:0f:27:62:
b3:c4:5a:19:73:ae:74:5e:bd:e2:be:05:76:47:ba:f3:fd:27:
ed:10:c2:f5:63:cf:92:4a:23:a9:14:2a:09:56:b3:0e:3b:62:
a8:59:23:09:5c:84:41:4f:24:af:df:10:67:96:09:8e:9a:30:
5d:2f:68:44:9c:99:e0:b7:00:e0:30:03:71:d6:6a:e9:80:7e:
33:bf:f4:38:4c:0f:8c:ca:a7:a7:ac:87:94:99:94:e9:14:f5:
32:03:c3:7a:fd:92:5a:a0:df:b6:5f:2f:13:e6:56:d5:53:ba:
09:ec:e5:8f:04:39:9e:87:f3:aa:01:fd:8c:55:6c:72:45:78:
69:a2:c5:96
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD+NWVaRSDUmWBCpC0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTAxMjEyMDAwMFoXDTIzMTAxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZTIzMjc3MjYtYWFmNi00ZDNkLTliNmEtNThmZDI4N2Y3MTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisQJwef8SZpEaWUsoAEpbaS/UpbkiMaK8EFx
9TmkGJ7FZvnXKkriRmJwUq/fGnTfzWB6I1IBeZ+JtQ6MG7bEzkiMnTx/gbMIhjZ+
Owe6yp5hFIQ8N7lEFgVsbU5UrHMwNarVH8ytH+5Sc9NO5oBXbB3e8OtnlMv7Q1qF
IEUyaqPVpWQ8UsPV+tVZcB3JY1fXCVUtYit3k3LZSqchKFP7ngg0DmPCRNy72hxR
KFK81XpVkHwwFOPl2wT/2/DJKDIBqO0fKHfTMlO8Mz0veV2ZMloNHcG+K9bNtx8I
aZVkl4C1s7IMFsAnIcKQAUOD0HsyRn1+KU2NC/NM/12zZE8IpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNmXB9xO4+Wsl1O8cRZUwoYfzG5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvMjhjZmRkODctMjYxNi0z
ZjczLTk5ODUtYjI0YTAyYjY5YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIrGc37FNlKF/0eNIqR2CGhepnSAn46+sJqblkm++/q0wyQs+wU/
fbN/MTEiPht+YWpgpFlxirL6xE+O+DFURZRv3ZkTWdt3CtcYJi798NK2xHoTXS/Z
HTDs4BxlKIue8GQSw7Rqfh/Y/Ap1YJ7REDm2Jk3t+RTpqx9Org8nYrPEWhlzrnRe
veK+BXZHuvP9J+0QwvVjz5JKI6kUKglWsw47YqhZIwlchEFPJK/fEGeWCY6aMF0v
aEScmeC3AOAwA3HWaumAfjO/9DhMD4zKp6esh5SZlOkU9TIDw3r9klqg37ZfLxPm
VtVTugns5Y8EOZ6H86oB/YxVbHJFeGmixZY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:48 2025 by rpki-client