Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/48e86b9d-913d-3e66-9e99-b4653dfa38c3.roa
File: 48e86b9d-913d-3e66-9e99-b4653dfa38c3.roa (raw, json)
Hash identifier: IhQEHwyILrK4hDeQXQs53PYIgvliLMAt+Aly2328AOE=
Subject key identifier: 3E:8B:58:53:7B:50:38:22:F9:0D:FC:E2:C1:AF:69:56:A7:AF:CE:0E
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F432858401E3BF0A498EE52107F2BC640
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/48e86b9d-913d-3e66-9e99-b4653dfa38c3.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Mon 04 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:3b:f0:a4:98:ee:52:10:7f:2b:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Dec 4 05:00:00 2023 GMT
Subject: CN=51c1b46d-1b0a-4e3b-b081-3af84f81d437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:29:94:bc:a7:c1:86:02:e7:96:a6:46:c0:
0a:5b:5f:b9:46:24:f6:68:32:79:03:88:a1:22:a2:
5b:8f:0a:80:9f:83:1d:18:cc:80:38:d7:cc:58:1a:
96:83:39:e3:b5:85:41:94:13:55:ee:02:23:12:77:
63:d1:03:3f:8e:23:95:de:9a:2a:07:a5:5c:9b:94:
9c:d9:fc:33:9e:64:a1:a8:ed:09:ad:04:7f:1c:5c:
31:cf:ac:bf:5c:af:2b:93:44:08:c7:15:c1:27:02:
42:36:63:a5:3a:77:f5:5d:bd:62:07:8a:a2:4a:07:
99:f3:7a:eb:79:ad:f2:49:89:d6:c7:78:1e:73:b1:
1c:04:e2:a8:40:9f:47:d2:5b:71:32:e3:5c:23:21:
6e:30:9f:7b:4f:b5:b8:5c:56:14:bd:42:d2:f2:be:
ea:93:77:29:6c:a1:4d:63:a1:6e:b2:97:d9:d1:4c:
f2:cd:7e:ff:04:16:78:0d:02:cd:62:26:d6:f7:fa:
0b:a1:94:1b:08:59:03:95:34:23:87:2d:9e:e9:fb:
f0:bb:2e:16:01:88:06:33:e8:77:ee:23:6d:ba:e4:
8b:6e:5b:21:3e:32:4e:27:28:fa:1e:e2:b5:e7:c7:
cd:45:f3:c3:60:d0:d9:08:c7:5b:a2:04:5a:c0:22:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8B:58:53:7B:50:38:22:F9:0D:FC:E2:C1:AF:69:56:A7:AF:CE:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/48e86b9d-913d-3e66-9e99-b4653dfa38c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:b5:0a:9f:00:f3:6e:fc:92:f0:e8:30:e1:9b:84:ab:2c:35:
c1:c3:a3:ef:be:0f:c2:2c:23:30:1f:ef:99:14:d9:b1:83:9c:
37:af:d8:0d:b4:70:79:73:65:59:eb:82:2b:a1:6a:50:72:46:
97:47:20:1b:cd:ed:cc:0c:88:08:1b:53:1e:9c:dd:30:85:bb:
f7:ea:4d:cd:e4:b0:f3:4a:0f:77:b8:57:1e:b4:e0:30:d3:55:
e9:40:c0:ad:27:e9:b3:48:d4:fc:a4:35:f5:1a:dc:ef:02:6d:
2e:f8:41:1e:9e:b7:ef:93:55:7a:c2:47:1e:20:28:b6:1f:26:
1b:6d:2e:d5:43:c8:fb:c6:5a:8a:39:1b:43:58:c5:02:df:47:
04:94:74:47:85:de:aa:06:fa:31:41:b1:25:e9:0b:e9:e9:74:
71:2b:0e:ed:b2:f6:01:42:fb:37:eb:e5:e0:35:6c:3c:f2:d1:
5f:8a:2a:f6:34:9e:aa:a9:5e:c0:8b:74:c5:66:b0:fa:0f:ba:
6e:a6:52:78:58:09:f3:0c:ae:c6:5e:ce:d8:a6:d9:4b:e9:d6:
68:4e:07:14:14:4a:db:ed:4f:5f:57:e0:d7:f6:5b:b2:dc:83:
39:f4:ef:56:da:60:57:4f:4e:d8:a7:d6:83:10:95:9b:76:24:
b1:53:7f:77
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEAeO/CkmO5SEH8rxkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTIwMzEyMDAwMFoXDTIzMTIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NTFjMWI0NmQtMWIwYS00ZTNiLWIwODEtM2FmODRmODFkNDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZAplLynwYYC55amRsAKW1+5RiT2aDJ5A4ih
IqJbjwqAn4MdGMyAONfMWBqWgznjtYVBlBNV7gIjEndj0QM/jiOV3poqB6Vcm5Sc
2fwznmShqO0JrQR/HFwxz6y/XK8rk0QIxxXBJwJCNmOlOnf1Xb1iB4qiSgeZ83rr
ea3ySYnWx3gec7EcBOKoQJ9H0ltxMuNcIyFuMJ97T7W4XFYUvULS8r7qk3cpbKFN
Y6FuspfZ0UzyzX7/BBZ4DQLNYibW9/oLoZQbCFkDlTQjhy2e6fvwuy4WAYgGM+h3
7iNtuuSLblshPjJOJyj6HuK158fNRfPDYNDZCMdbogRawCJRQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD6LWFN7UDgi+Q384sGvaVanr84OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvNDhlODZiOWQtOTEzZC0z
ZTY2LTllOTktYjQ2NTNkZmEzOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGe1Cp8A8278kvDoMOGbhKssNcHDo+++D8IsIzAf75kU2bGDnDev
2A20cHlzZVnrgiuhalByRpdHIBvN7cwMiAgbUx6c3TCFu/fqTc3ksPNKD3e4Vx60
4DDTVelAwK0n6bNI1PykNfUa3O8CbS74QR6et++TVXrCRx4gKLYfJhttLtVDyPvG
Woo5G0NYxQLfRwSUdEeF3qoG+jFBsSXpC+npdHErDu2y9gFC+zfr5eA1bDzy0V+K
KvY0nqqpXsCLdMVmsPoPum6mUnhYCfMMrsZeztim2Uvp1mhOBxQUStvtT19X4Nf2
W7Lcgzn071baYFdPTtin1oMQlZt2JLFTf3c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org