Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3af2f676-a6b0-37d9-8335-b9b577c1485d.roa
File: 3af2f676-a6b0-37d9-8335-b9b577c1485d.roa (raw, json)
Hash identifier: xlvsJyA6bTF368P7TP8mA0yrEV4LuwW6W02gAxgu1E0=
Subject key identifier: 07:3F:02:B3:F0:06:1E:E5:59:25:E3:FE:46:C3:7B:E5:FD:CC:A1:F6
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583ED78FFCC78503899148FCF080
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3af2f676-a6b0-37d9-8335-b9b577c1485d.roa
Signing time: Mon 08 Aug 2022 12:00:00 +0000
ROA not before: Mon 08 Aug 2022 12:00:00 +0000
ROA not after: Wed 09 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:d7:8f:fc:c7:85:03:89:91:48:fc:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 8 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2023 GMT
Subject: CN=346bb8c7-d8b4-417d-b615-d2f0a3b724f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:39:af:c9:49:c7:bb:5c:ea:cf:df:e6:fe:5f:
2f:10:e0:8a:b5:03:cb:27:18:36:53:1d:0f:7e:62:
3b:33:17:58:dc:b9:39:6e:a2:27:f3:ca:bb:fd:99:
58:1b:36:fe:ad:94:0f:95:01:30:84:84:71:e1:01:
2e:b5:5c:a7:cd:68:29:8e:d3:69:19:b2:44:d9:4b:
3d:df:6e:d7:b6:3c:8f:97:c9:03:9f:99:ca:c1:d6:
27:36:5d:32:f7:2b:c9:39:7b:41:e5:67:7d:d6:fc:
3a:66:f6:5f:5c:c8:f0:65:e5:29:f3:fb:45:c0:e8:
1c:3e:14:62:aa:62:89:e6:db:d3:c4:6d:6e:03:5e:
67:46:26:95:55:34:16:7e:06:8a:3b:f4:c2:5e:93:
a4:20:18:93:47:53:22:7c:c7:bd:b9:74:4a:b4:06:
6a:ed:81:1d:ce:41:6a:94:99:e8:79:e3:f0:6e:ee:
44:c7:de:b8:89:03:e9:d2:b1:b7:cb:b7:02:2d:9a:
fe:d4:1e:ea:d1:c2:4e:17:f2:35:d8:1e:60:77:66:
23:5e:b4:0e:1b:88:60:51:bf:20:35:ce:db:86:b4:
bb:61:e7:fb:41:10:93:44:01:49:3b:66:b5:58:20:
97:ea:d1:8e:ed:18:33:97:2f:96:de:69:a0:10:b8:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:02:B3:F0:06:1E:E5:59:25:E3:FE:46:C3:7B:E5:FD:CC:A1:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3af2f676-a6b0-37d9-8335-b9b577c1485d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:e3:92:86:b9:d7:60:b2:d1:d0:fc:11:fd:2e:7d:95:e5:a9:
bd:eb:79:78:76:0c:9e:0a:cd:d6:06:5c:93:b8:71:60:96:63:
7a:04:ae:2c:62:0f:4d:c9:55:ce:02:9a:f8:9d:ac:1a:7c:fe:
c3:58:48:b0:ac:af:d5:91:c5:9c:46:b3:bf:f8:6e:c5:de:06:
bc:96:b2:a8:d1:92:dd:2b:ed:1a:01:02:a4:bc:d1:5c:a5:22:
50:c3:3d:aa:35:e1:99:f3:ac:f9:38:eb:8e:17:79:e0:66:33:
5a:f3:b8:c2:9b:0d:fd:f4:ed:cf:24:84:3b:e9:17:57:98:c0:
0a:75:6e:f8:e4:db:fa:0a:aa:41:1c:b5:01:d4:45:0a:fc:2d:
b8:88:36:e2:6e:8b:a6:40:12:42:5f:42:c5:b3:a3:29:0b:c1:
4b:66:d1:67:81:43:6a:a6:75:22:1a:da:56:6a:1d:d5:dd:2c:
90:c5:70:e7:a4:1f:78:d4:cb:ba:28:07:9f:5b:68:9d:83:e0:
82:a0:b0:ba:88:88:0c:e8:b4:13:41:8e:3b:45:dd:03:e3:c3:
6e:64:1b:41:eb:85:eb:2f:08:76:ef:1c:9e:40:79:8c:e7:87:
82:25:c1:ce:d7:b0:70:c4:17:2c:79:80:0f:25:26:ab:2f:92:
b4:59:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org