Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2a0c5362-6fe3-39e8-8045-e1dc680665ce.roa
File: 2a0c5362-6fe3-39e8-8045-e1dc680665ce.roa (raw, json)
Hash identifier: iDsVgLmPbP5k1AyFYGW8AgPeUMwwpLrdsBi8eeYMo7M=
Subject key identifier: 77:BB:F2:FA:80:9B:CC:6A:8A:60:FB:61:9C:C1:88:B4:F2:FF:8A:71
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EFBCF4C31687AA3DF11F73000
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2a0c5362-6fe3-39e8-8045-e1dc680665ce.roa
Signing time: Sun 21 Aug 2022 12:00:00 +0000
ROA not before: Sun 21 Aug 2022 12:00:00 +0000
ROA not after: Tue 22 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:fb:cf:4c:31:68:7a:a3:df:11:f7:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 21 12:00:00 2022 GMT
Not After : Aug 22 04:00:00 2023 GMT
Subject: CN=34decb28-ebcd-4bf9-8860-b5a3926098bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:f2:15:31:c6:72:21:52:d5:6b:94:58:a8:
35:e0:96:25:e0:ec:8b:52:20:41:85:fb:c5:a4:60:
c4:04:21:8a:79:a0:e7:51:16:2c:a4:10:e0:05:e5:
e6:7e:68:f5:9a:2b:f8:61:eb:d8:58:c3:2d:60:56:
0e:24:5d:0f:2c:eb:5d:ed:22:6a:60:3a:7e:4d:c3:
34:f1:71:25:89:0d:06:c8:1a:f4:9c:81:a0:8a:39:
a1:b6:22:2d:9c:1d:3e:24:c5:4d:d3:cf:8c:16:a4:
dc:73:8f:2d:9c:eb:63:84:06:69:a3:ae:a6:72:c3:
74:03:66:1f:34:b8:07:a7:40:ae:02:41:fd:1c:4b:
60:e1:82:34:6c:a9:df:ee:53:6b:b0:a7:08:60:e6:
56:79:fb:4c:ad:1e:1f:58:1a:2d:b8:4a:95:cd:3d:
51:e8:d7:6e:2b:50:99:92:d7:d0:1a:47:3a:0e:7b:
d4:a0:76:63:8d:4b:f9:a2:40:d5:15:ba:5c:c7:c9:
02:43:b9:ec:af:96:3e:f9:b1:ce:8d:68:d4:c2:50:
3c:a2:9e:b7:c0:92:8e:f9:80:f0:3e:09:df:80:38:
13:fb:2a:7d:42:16:46:a9:5a:e6:d3:3f:63:43:bf:
2e:ef:a6:09:90:18:82:d3:0b:78:92:5d:7c:d8:ab:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BB:F2:FA:80:9B:CC:6A:8A:60:FB:61:9C:C1:88:B4:F2:FF:8A:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2a0c5362-6fe3-39e8-8045-e1dc680665ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:db:a4:e9:5a:cb:17:6e:f7:d2:96:4a:a2:ac:91:1b:06:f2:
98:68:34:2a:05:ef:cb:ff:50:6b:a6:2f:e8:42:7a:3e:f4:56:
13:ea:58:8e:75:12:fb:bf:b4:27:4b:af:ee:a8:1a:a7:1d:ca:
5f:9a:5a:9f:aa:ac:0c:6d:7b:85:b8:86:3f:66:20:4f:cb:1e:
ff:0d:5a:df:3a:c7:63:7b:a5:94:31:8a:11:05:34:bd:ec:7f:
d0:08:08:ac:3e:40:c1:c3:b5:4d:02:3a:62:f1:32:b9:87:ef:
9f:c6:9d:f9:4d:0b:61:69:0e:05:7e:ce:d2:46:ad:b9:0e:8b:
36:5c:42:2e:2c:d6:bc:b2:62:65:89:9a:12:6b:9f:8e:34:a0:
9a:58:7d:77:94:bf:74:3b:b9:3c:46:7d:13:90:0e:4e:c6:a1:
ec:cf:78:cb:d0:17:22:76:8c:40:a8:fd:e4:b4:91:99:0b:0b:
db:c9:de:f7:88:6f:b8:5c:b3:6a:9f:3a:e4:b9:c5:95:94:3f:
7b:71:70:55:bc:95:cc:78:fb:1a:22:a4:8e:a4:f2:c0:d2:0f:
96:82:4c:ef:01:04:c8:51:b0:7d:ca:a0:ea:59:3f:bd:2e:62:
1a:ac:4a:d9:22:e7:64:d5:c0:3a:c2:7e:2b:92:29:3a:0c:50:
76:d5:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org