Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4eefd5cb-068b-323a-899a-ffc768a29c9f.roa
File: 4eefd5cb-068b-323a-899a-ffc768a29c9f.roa (raw, json)
Hash identifier: +31j8euVaQA8f0xCjKITyK/cUr2AxJJXdAovninNWC0=
Subject key identifier: 08:8A:04:43:D9:9D:F0:10:18:83:DF:E6:BF:DE:3D:72:46:DA:F5:F3
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F43285840426E9FB45DB9994152C8CA00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4eefd5cb-068b-323a-899a-ffc768a29c9f.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sun 17 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:42:6e:9f:b4:5d:b9:99:41:52:c8:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Dec 17 05:00:00 2023 GMT
Subject: CN=123be2d0-b0d5-46cd-b9f5-c5868961fe22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:04:21:28:aa:c4:be:de:f1:26:b2:64:af:
1d:99:88:1f:6c:ee:8f:8a:33:54:47:f3:02:c8:ec:
04:f1:9a:f7:9d:6d:3d:5c:db:df:08:f3:94:9b:b3:
f6:30:01:91:7b:80:12:08:e0:2b:cc:15:14:a8:31:
94:18:35:d0:35:60:76:97:c4:b2:08:8b:67:88:84:
77:ef:af:30:88:38:25:11:6f:7d:e8:34:2f:20:8a:
a1:2f:f6:93:25:10:d8:38:99:bc:3b:26:c7:4d:f9:
10:e2:4b:7e:0b:6f:90:ff:45:00:6c:2a:3e:f3:17:
1f:a5:f0:a3:5c:81:34:ef:6a:97:2c:fc:91:68:8b:
f3:cf:0a:8c:ee:bb:65:c9:d1:f9:bd:82:1e:2e:cd:
6e:51:57:9e:68:fd:e6:c6:5a:88:e8:e0:c8:f8:c8:
9d:a1:73:fa:38:72:fa:d6:5d:aa:c6:a5:4a:49:6c:
98:ec:64:d6:1b:38:15:95:4e:6e:e3:8e:c1:22:aa:
c2:12:22:5e:89:74:b3:00:96:0f:ea:39:65:d8:a3:
71:7c:52:35:b3:03:00:43:55:a0:86:e6:13:e8:37:
00:54:e5:52:ec:a5:27:1b:ec:7f:cc:8d:2e:0b:fc:
af:77:14:8d:d7:8d:77:ba:94:44:62:00:8e:09:9c:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:04:43:D9:9D:F0:10:18:83:DF:E6:BF:DE:3D:72:46:DA:F5:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4eefd5cb-068b-323a-899a-ffc768a29c9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:b6:db:47:18:3b:d5:87:1e:83:83:e4:5a:9f:e8:74:2e:58:
ac:23:75:c4:2c:c5:04:4b:82:63:01:e2:ea:82:75:05:b3:52:
23:38:67:a3:75:93:50:2b:10:4a:9b:9c:65:97:d5:e2:e4:35:
c9:c7:38:76:1c:d2:61:33:81:66:58:7d:b1:dc:15:0e:2f:cf:
4e:23:a8:8f:ee:ba:4f:01:e4:36:58:c4:e0:66:d5:b9:ed:75:
dc:21:4b:d7:b1:39:b9:79:fc:57:75:b6:6c:c2:51:f7:ce:d0:
86:cf:78:ef:22:10:e2:71:50:19:25:5d:40:bd:46:18:23:31:
c7:d8:3e:84:a5:5e:87:78:54:c5:5d:7a:bc:8f:62:cc:d9:f1:
db:71:b9:ed:e1:b7:c0:5c:4b:18:18:fc:58:09:59:7c:79:e4:
a0:83:ed:de:b1:f6:dc:b6:23:74:af:c0:65:f2:11:d0:e7:b9:
4f:bc:ef:80:74:c4:57:24:b7:b0:a1:e8:d7:c6:bc:1b:32:38:
37:08:0c:cc:c4:e2:17:d5:05:06:38:9c:bf:ed:52:8f:d0:47:
11:0b:74:d8:3f:0b:b7:7c:24:d4:be:62:ca:37:d5:2b:2a:4e:
37:6c:df:c4:1e:1b:f0:47:18:91:50:cb:8d:37:80:29:7b:79:
b0:d6:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org