Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4ef5ca75-d177-3743-a998-5157553c2472.roa
File: 4ef5ca75-d177-3743-a998-5157553c2472.roa (raw, json)
Hash identifier: a6OGtXU8prPfwa6U3p2plcyVzYxna/rSPY1wh4Coc5Y=
Subject key identifier: BF:83:A5:E1:FE:6C:1D:DF:A9:4B:38:31:0D:8F:5A:69:5E:05:D4:46
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D83FD2E571CB6CCDBB223C380
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4ef5ca75-d177-3743-a998-5157553c2472.roa
Signing time: Sat 09 Apr 2022 04:00:00 +0000
ROA not before: Sat 09 Apr 2022 04:00:00 +0000
ROA not after: Sun 09 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:83:fd:2e:57:1c:b6:cc:db:b2:23:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 9 04:00:00 2022 GMT
Not After : Apr 9 04:00:00 2023 GMT
Subject: CN=3222cd85-af27-49d3-845a-d2ee0cb395fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:ed:38:ce:e3:48:36:9f:c7:c0:b6:7f:9f:
f7:97:f3:ae:e8:67:5d:a0:63:7d:ae:e9:d1:86:c4:
8f:75:46:2a:ec:8b:a7:3e:62:1d:05:8e:97:0e:7a:
bf:e9:0b:47:26:f6:61:86:01:b0:1b:c2:ac:dc:89:
2f:b2:b8:6f:f9:f0:a8:8e:03:7c:25:01:ed:b5:32:
b6:4c:4a:83:00:c6:7b:28:fe:3d:c0:e1:cb:84:66:
b0:de:4b:4e:2a:98:60:51:e5:b5:be:27:59:99:c3:
ba:9c:3b:dd:68:e8:26:2c:67:25:26:36:62:73:b7:
47:31:2f:a0:5a:f5:8f:14:5b:d8:be:ab:0c:c0:57:
22:c2:38:fa:0e:98:6b:01:3f:c0:ea:06:19:04:2a:
88:c5:05:b2:00:6e:aa:01:c3:73:7f:f7:9a:2b:d8:
71:81:e0:fb:63:89:d9:24:cb:29:9f:45:73:9d:b4:
a1:7c:57:46:92:1f:86:cf:da:25:f0:10:aa:27:b2:
2d:ee:9e:29:4d:bd:9c:a4:0b:a1:31:5c:f7:21:dc:
bc:7f:07:43:89:7a:61:7a:ab:71:8a:28:ca:a3:6d:
ed:98:fb:83:c0:28:86:88:c4:a6:ea:a4:d6:de:71:
40:19:48:be:03:87:e0:41:58:14:18:3d:a9:c3:b2:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:A5:E1:FE:6C:1D:DF:A9:4B:38:31:0D:8F:5A:69:5E:05:D4:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4ef5ca75-d177-3743-a998-5157553c2472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:fc:fa:51:e8:1d:aa:0a:eb:fd:91:4f:01:fc:d0:71:f0:51:
3a:ed:5e:8e:5d:50:41:f8:12:ee:0e:d6:cb:3a:2c:62:36:53:
fb:f9:0a:56:56:50:8f:08:f4:5a:3a:28:ad:3b:f9:5b:a0:6b:
fb:78:90:a9:b6:66:6b:a7:4c:d6:ad:3e:b7:74:52:86:58:cb:
79:69:0e:38:c0:a5:c1:c5:77:6f:ea:bd:48:d2:ba:b4:61:d8:
9c:79:91:bb:71:f2:eb:13:a0:8c:8a:bd:33:62:e3:43:fc:2c:
26:65:72:72:bc:b3:24:08:3f:e2:c1:21:38:3f:59:86:0e:ac:
5a:f3:09:9f:84:44:49:0e:3e:80:c4:c0:94:cf:b5:4b:95:ca:
5f:b1:4b:6c:82:a4:1c:91:2f:83:eb:ba:aa:d9:ed:61:34:b1:
66:c7:85:9a:1d:00:4f:dd:15:b1:d4:5b:ea:ea:57:0a:13:a7:
e9:be:ee:e7:10:c4:ac:7e:8b:d8:c5:f9:f4:89:18:5b:73:ee:
fd:d0:5c:b8:6f:bc:5a:46:77:a9:0f:d2:5a:68:7b:af:e8:46:
f1:70:2b:31:a7:5c:c9:de:2a:0f:70:8f:e3:60:8a:61:c2:8e:
bf:73:b8:f7:d7:65:cf:56:98:c6:ee:19:82:4f:d8:5e:5c:44:
4b:9e:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:07 2024 by rpki-client on console-fra.rpki-client.org