Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2d833655-e582-31db-8cc9-77b5d9bb3c00.roa
File: 2d833655-e582-31db-8cc9-77b5d9bb3c00.roa (raw, json)
Hash identifier: nQV6EVvMtHTPYJzKY9YEAMOYKdAohUj+BERtoiLAhlI=
Subject key identifier: B3:84:70:16:A3:17:53:DE:47:B6:7D:77:BA:94:65:1F:04:17:94:46
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D7B00CADC964D5C4460923880
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2d833655-e582-31db-8cc9-77b5d9bb3c00.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Thu 06 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7b:00:ca:dc:96:4d:5c:44:60:92:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : Apr 6 04:00:00 2023 GMT
Subject: CN=37aa23ad-0abf-4084-972e-c60e5611005d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:77:b0:0c:e2:66:f3:2b:f1:54:c7:be:b5:
72:b2:46:32:50:e1:7d:e2:2f:79:04:1c:61:7b:55:
7b:bb:2f:38:e2:53:ff:2e:6a:51:cb:54:c1:a7:fb:
40:a3:6c:28:4c:8d:17:ca:0e:f6:36:e6:1f:3b:9d:
96:cd:e0:eb:0f:64:39:8a:0b:7c:e8:b7:bc:0c:94:
28:77:77:7f:f0:eb:9c:29:28:65:a2:6d:8d:60:fd:
ca:39:ca:13:d7:4f:ec:8f:bf:3a:57:ae:c2:68:fe:
57:ed:75:9f:9d:1f:63:39:99:9c:6a:a4:86:30:00:
fd:5b:98:09:41:df:02:9b:d2:62:ff:d0:92:e4:07:
17:37:fb:fa:b5:0b:3a:1d:81:16:1b:97:56:2f:e0:
b7:e1:a3:da:64:6d:32:f3:4b:5c:86:2d:a7:b3:4b:
c5:fc:9e:2c:27:b5:05:a2:ec:50:7d:10:a3:dc:d0:
4e:cd:a1:e4:d6:2a:b3:1e:37:5c:66:ea:20:ef:1b:
38:7c:ee:e3:6b:5d:b7:12:49:56:72:ee:44:4a:c6:
e1:f3:e2:42:c6:aa:2e:05:77:47:49:f7:24:af:1b:
0c:95:38:b7:13:9a:af:6b:58:05:1f:07:48:96:c7:
8b:99:89:1c:66:eb:f9:3a:94:f8:7b:c5:bb:65:28:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:84:70:16:A3:17:53:DE:47:B6:7D:77:BA:94:65:1F:04:17:94:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2d833655-e582-31db-8cc9-77b5d9bb3c00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:6d:0e:50:09:44:42:30:c4:60:f8:90:64:b6:27:e2:25:1c:
db:a3:7e:60:df:0d:2a:b7:a0:32:08:a0:11:55:5a:8d:93:f5:
bf:aa:50:63:ca:20:2a:0c:0f:31:99:c5:35:6b:40:93:f2:d7:
f8:9a:e1:04:6d:8f:c3:6c:05:45:50:a4:99:ab:6d:80:9c:3d:
79:8a:1e:7f:31:dd:aa:70:37:fc:5e:96:36:61:ad:bd:43:89:
67:a4:de:bb:eb:4f:76:8a:3a:b1:3c:55:ca:73:44:af:1d:f0:
1f:78:5b:6f:37:f2:bc:bd:c2:92:ae:5c:2f:44:76:da:9f:50:
2c:a6:8f:c7:88:dc:f9:41:66:74:66:4a:78:83:72:37:52:c6:
d2:85:d5:15:f3:16:4d:00:65:33:3e:18:46:ea:6c:4c:3c:ff:
89:1f:e6:8a:b7:c5:b1:52:56:d5:56:17:62:2c:2d:da:ea:25:
b4:4f:e4:96:6c:8a:61:ad:9b:63:fd:2d:a6:82:64:97:b9:de:
a5:e9:4a:e6:8f:2a:34:34:67:4f:55:91:ba:18:b7:9e:b5:a0:
ad:87:3f:0b:cc:14:33:19:80:cc:78:b6:57:6a:dc:e5:5b:59:
9b:4c:10:0c:74:27:48:a6:66:8d:6d:bd:f7:32:9c:9f:89:98:
94:96:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:45 2025 by rpki-client