Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/437e49cb-5c52-3892-a8de-89229dde2500.roa
File: 437e49cb-5c52-3892-a8de-89229dde2500.roa (raw, json)
Hash identifier: IOhcCJw/s1S995lEtpe9n4BoHJtsDYN3b2A+9+mHMSA=
Subject key identifier: 48:22:AF:86:CE:8D:51:A5:6C:32:6F:99:91:99:DA:47:77:E1:B1:A6
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F43285840101CAD0F4E4C7FDAF6DE0A80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/437e49cb-5c52-3892-a8de-89229dde2500.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Wed 29 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:10:1c:ad:0f:4e:4c:7f:da:f6:de:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2023 GMT
Subject: CN=1f86cab2-b28a-453f-8347-662b3f97f784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a4:1a:ee:3e:52:d6:02:25:f7:1e:dc:ae:e0:
a1:1f:03:45:bc:6b:4e:7c:77:e5:58:5a:bd:b6:f8:
12:13:e4:4c:62:d9:db:91:ac:ee:d3:10:09:a3:71:
f3:d5:dd:b1:26:d9:f1:41:97:d7:34:aa:30:c9:f0:
30:0c:b9:c7:9f:2a:1f:67:07:c0:fa:a0:79:d2:b6:
d9:e8:63:06:6a:ec:42:93:99:3c:41:27:73:0e:60:
72:90:52:94:b7:53:ec:09:e6:2d:ee:6f:3c:36:48:
ef:1f:18:52:f2:a3:a1:20:ef:f6:af:7e:f6:54:5a:
41:70:cd:95:6e:d8:e7:90:40:96:e9:66:e3:10:6c:
85:61:ae:e5:19:43:11:79:45:86:cf:5f:8e:60:ec:
d3:0c:76:7e:5d:69:91:ce:cd:18:7f:d2:4f:c9:0c:
e2:e5:25:96:05:ee:de:e6:b0:6c:58:58:e0:33:34:
29:30:52:b7:fd:bb:a5:f4:4c:be:20:66:b1:42:83:
b2:c8:2f:15:d4:ab:6e:a9:db:39:39:9f:f6:34:9f:
8e:34:d0:23:0a:de:57:0e:eb:f6:b6:9b:2c:ec:f4:
61:69:c2:54:82:31:10:ad:1d:b3:4f:a3:90:c2:57:
04:c4:53:ca:4e:31:1a:1e:3f:85:a6:0f:a5:5e:14:
4e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:22:AF:86:CE:8D:51:A5:6C:32:6F:99:91:99:DA:47:77:E1:B1:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/437e49cb-5c52-3892-a8de-89229dde2500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:d1:70:b5:f9:a9:4b:ff:44:f6:42:9a:78:fe:85:12:94:12:
54:68:82:2f:65:0d:57:fd:35:44:e9:75:b7:62:21:6b:e7:70:
27:4d:ea:9f:08:82:19:b8:40:35:77:2c:05:ea:7c:f4:11:81:
f1:46:d5:aa:de:49:b4:fd:76:88:ac:38:62:4a:90:35:29:55:
85:a0:00:da:21:5f:9e:30:e2:b2:75:61:7c:64:e6:44:a7:5e:
52:02:13:2f:0e:a5:34:60:fd:4a:49:61:92:85:3b:06:e2:26:
39:85:93:94:90:6e:43:83:10:ad:90:b8:af:0b:e6:bf:ce:bd:
46:97:77:da:a4:03:11:c4:f3:a8:7b:67:b9:0c:7d:cc:79:28:
18:86:1b:6d:69:c1:ac:1b:95:b6:b3:29:87:d5:48:0f:5d:47:
5c:87:13:91:3b:a2:d5:50:a6:38:ad:21:9e:d1:f3:a7:02:f4:
2e:ef:21:2f:b9:e0:9d:ec:e1:45:6d:4e:04:58:0a:6e:e9:c1:
bc:52:b9:f1:95:a5:ad:f8:21:68:cb:c6:a5:05:b7:21:b9:8a:
02:5c:17:ff:6e:89:1f:31:fe:f8:2e:b9:57:19:48:64:d1:c5:
cb:a1:99:19:c6:89:0f:d5:6f:e0:3a:a8:9b:6a:e0:75:f8:99:
ba:ca:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org