Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3e8dec58-8333-3470-9add-3e3178c490d2.roa
File: 3e8dec58-8333-3470-9add-3e3178c490d2.roa (raw, json)
Hash identifier: U3dQZTll8JntotVDq6W4MH92nNrQ9SCSFpDYYwuKOec=
Subject key identifier: 98:8D:04:92:76:75:F5:C2:8C:E2:E9:A8:2D:4B:49:A0:C8:9E:61:28
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EB3A38B52AF1DB404119A1980
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3e8dec58-8333-3470-9add-3e3178c490d2.roa
Signing time: Tue 26 Jul 2022 12:00:00 +0000
ROA not before: Tue 26 Jul 2022 12:00:00 +0000
ROA not after: Thu 27 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b3:a3:8b:52:af:1d:b4:04:11:9a:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 26 12:00:00 2022 GMT
Not After : Jul 27 04:00:00 2023 GMT
Subject: CN=161751b0-0cf8-4609-99fc-b741042bc863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:c4:47:d4:35:20:ce:e2:ae:c9:bd:09:39:
07:ce:f4:b0:69:83:23:a4:61:fa:8b:51:4d:eb:65:
b8:0a:f7:cc:fc:b2:71:dc:ef:56:c1:b6:fe:cf:03:
de:dc:4b:2e:94:b5:e0:bc:7c:38:f4:37:8c:d9:22:
3f:b9:c0:4d:29:19:4c:d2:12:fb:17:12:85:07:f9:
8c:a4:b3:50:9c:00:2f:cc:e1:1c:bc:ca:55:74:f3:
e7:f7:f9:7e:0c:8e:66:56:60:01:b5:35:4e:be:08:
0f:30:e3:78:da:05:00:46:6a:6d:db:0b:99:09:df:
83:6e:87:10:9a:2d:6b:8c:a2:8a:43:ac:0d:29:6f:
88:8c:de:d6:d2:61:a3:af:45:09:fa:2e:9e:7c:30:
54:eb:b8:3d:08:f3:8a:b3:7c:67:11:ee:d8:a2:8a:
4f:c0:61:c2:b3:49:c6:48:18:e1:0a:69:5b:0a:da:
84:ef:46:3f:b8:5a:a6:83:e7:0f:b4:7b:e9:25:b1:
50:6a:e1:ab:22:4c:59:87:0e:61:51:dd:13:45:6a:
48:f7:84:2e:96:91:0a:73:5c:12:58:da:02:40:6a:
bb:18:77:03:49:78:c4:5c:9a:52:4e:77:e6:bb:0b:
b6:ac:80:d6:78:f2:ea:a5:80:0f:27:e8:19:67:9a:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8D:04:92:76:75:F5:C2:8C:E2:E9:A8:2D:4B:49:A0:C8:9E:61:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3e8dec58-8333-3470-9add-3e3178c490d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:a5:e2:bf:5b:38:b2:1a:f4:23:b4:4f:dd:99:07:97:4b:20:
39:35:cc:e0:a9:99:ea:3c:42:f4:1a:f8:94:93:2f:16:36:88:
e7:bd:25:24:92:e9:9b:c2:ca:b2:16:24:c7:50:d7:43:ca:c4:
0e:7b:39:d6:eb:65:85:52:44:1f:42:e2:cf:d4:dd:10:6e:ee:
e3:3d:c6:d6:de:8b:18:84:14:aa:2e:0a:76:d6:e2:fa:57:e8:
19:c6:02:60:77:49:10:8b:c0:dc:c2:77:a0:6b:98:45:44:a4:
75:0a:7c:d8:bd:08:b7:87:ac:ce:31:e2:aa:87:d7:4c:67:2d:
bc:92:31:b0:13:96:88:68:f6:4d:63:18:e3:24:12:60:59:89:
ad:d1:5a:72:c2:e7:4a:73:0c:24:48:8b:51:51:3f:d4:c5:f8:
a4:12:d2:11:5e:8f:82:3e:61:4e:a1:e1:83:05:28:0a:0f:ec:
d0:a9:92:e9:e7:e7:6e:1b:cd:c9:03:cd:da:db:37:c0:21:b4:
53:6c:6c:1e:de:92:b9:02:c0:60:bc:23:0f:53:9d:da:14:16:
eb:cb:3a:41:02:1f:26:2d:82:39:3b:76:0f:b0:8b:d9:05:d1:
5d:2c:af:5a:73:ab:aa:09:f7:92:8a:15:0a:ea:76:ed:0c:63:
90:68:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:14 2025 by rpki-client