Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4df90530-a8b1-38ec-b19e-bef72f5dd1c3.roa
File: 4df90530-a8b1-38ec-b19e-bef72f5dd1c3.roa (raw, json)
Hash identifier: pGhLXt8cpRIe/rk37r4cnOEsGiCCwOxHLABmMS5ZGo0=
Subject key identifier: F8:F9:22:EB:91:AA:F1:FE:1C:16:A6:0B:A7:EE:BF:4F:C7:CB:95:17
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F432858403D67EFEE6663FB23C0EE3BA0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4df90530-a8b1-38ec-b19e-bef72f5dd1c3.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Fri 15 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:67:ef:ee:66:63:fb:23:c0:ee:3b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2023 GMT
Subject: CN=3e0936e2-1485-4c45-aaa6-847574421b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:c2:0e:d0:eb:2a:82:4d:e6:94:eb:d6:f6:
be:53:9a:97:ed:73:a5:4d:9d:b3:25:ac:a4:ed:3f:
36:7d:05:95:54:6e:51:97:5e:32:e7:8e:ea:03:76:
ec:ca:cc:75:cc:b8:18:e6:7f:95:f6:cb:4f:82:b4:
03:03:42:92:5d:59:74:83:f8:df:91:92:d6:23:09:
cf:fb:6c:2b:f2:8d:0b:a4:75:c7:93:1e:73:63:a8:
9c:3b:e8:e9:55:10:d6:04:60:ae:9b:d8:ba:1d:96:
5b:b1:c1:c5:c1:1a:ac:1c:c5:82:bf:00:52:90:e0:
20:14:2b:fa:ca:81:fb:b6:73:ed:70:ae:12:21:24:
4a:78:d3:b8:94:d2:fb:c8:81:70:f9:c3:ea:8d:89:
78:5c:2f:23:bf:12:2d:59:a6:52:4f:45:d7:32:1a:
78:f2:ff:69:0e:6e:a9:b2:52:56:2d:17:94:2a:3d:
56:fa:0b:de:77:70:70:30:44:8b:68:b0:af:50:e0:
76:a5:d8:ec:7a:dd:ca:74:ce:e5:ac:79:38:69:79:
a5:8b:df:de:16:c0:ce:f6:1a:88:e1:e8:46:3a:74:
1b:e1:de:46:26:dc:78:aa:f6:a4:c8:bb:40:bb:b6:
d7:d0:db:98:93:76:38:f0:5c:54:25:75:91:99:98:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F9:22:EB:91:AA:F1:FE:1C:16:A6:0B:A7:EE:BF:4F:C7:CB:95:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4df90530-a8b1-38ec-b19e-bef72f5dd1c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:01:57:ec:bd:41:fe:a9:dd:75:3e:cb:33:58:3a:de:43:c8:
f2:79:bb:aa:3d:db:53:45:68:0a:da:36:e5:da:6a:6d:e3:6b:
17:b5:ce:74:4b:47:a0:f2:0c:4a:57:be:c8:8b:95:bd:7b:58:
ec:3b:89:4a:77:70:d2:00:0b:95:91:51:0d:d5:a2:36:fc:8b:
a4:04:50:67:15:11:6a:16:2a:ce:a9:1d:03:85:32:2e:cc:0c:
d0:22:54:6b:b1:6a:5b:3d:3e:8d:3e:90:91:59:67:f8:f8:a9:
bf:cd:76:f2:7b:43:46:c9:00:a9:9a:b3:e5:5b:14:72:4a:2c:
0c:d9:99:c7:01:91:36:44:0d:eb:09:52:ca:d4:6b:9d:7d:69:
fb:bd:20:17:a1:58:83:2b:6a:04:96:b7:bd:03:0e:5f:8a:b2:
99:bb:fe:6a:b3:b8:b4:d1:57:cd:5a:ca:23:a7:c3:cf:dc:b2:
23:3c:e9:7b:cc:2a:c6:03:fb:c9:91:03:a9:ce:be:ee:d2:37:
3e:0b:0d:73:7b:55:b3:7f:e3:08:f0:25:00:73:45:a9:8a:83:
21:8f:14:a8:d9:82:94:8d:39:5d:bf:41:7b:e0:7f:68:89:dc:
cd:c1:79:36:32:91:50:de:20:6f:ee:e5:3a:e3:89:a3:8f:1e:
e7:7c:af:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:28 2025 by rpki-client