Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/50c5c501-228c-3106-8267-e85a7a096503.roa
File: 50c5c501-228c-3106-8267-e85a7a096503.roa (raw, json)
Hash identifier: YDlF3q+qpPo5N7HG0hf1gGP7cmDBVw8k2tM1yBO8CfA=
Subject key identifier: D7:AA:98:91:06:82:E9:21:89:B9:B2:83:45:30:CD:69:FB:19:5D:40
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E86C6C6FC4F3EFEB36D7D7680
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/50c5c501-228c-3106-8267-e85a7a096503.roa
Signing time: Sun 10 Jul 2022 12:00:00 +0000
ROA not before: Sun 10 Jul 2022 12:00:00 +0000
ROA not after: Tue 11 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:86:c6:c6:fc:4f:3e:fe:b3:6d:7d:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 10 12:00:00 2022 GMT
Not After : Jul 11 04:00:00 2023 GMT
Subject: CN=a0c823f9-7e24-43eb-a8d7-6326e0878a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:59:8c:6e:ab:45:70:ff:8c:85:63:db:f9:
c4:3d:61:d1:02:99:9f:65:59:69:b5:d4:06:5b:f6:
8b:e3:fd:fd:19:57:1d:0d:7f:7d:07:32:d5:86:57:
fd:db:0b:fa:ff:6e:e4:b3:f8:e8:42:78:5f:42:3b:
e9:1b:53:19:e0:10:20:4a:e2:8d:ff:53:f0:30:45:
f3:7a:9a:c3:c6:1e:97:ff:d0:2d:1e:2f:64:9f:27:
ce:69:5d:1c:87:11:2f:e8:82:49:de:ea:d6:be:6c:
79:84:02:ce:83:18:c7:31:1a:9a:6e:5d:9a:2b:b7:
7c:b1:75:20:7b:f8:08:32:90:e0:9d:d7:a5:92:2d:
22:36:af:82:ed:7f:1d:28:82:18:0a:88:e6:25:9e:
51:a5:80:b7:3c:17:67:8a:6d:3e:c6:49:ca:b6:00:
f1:c8:18:0a:e4:6b:45:7d:9b:c8:37:34:e5:26:f4:
a7:11:bd:b1:f3:4c:65:f8:84:28:b7:a8:c9:e4:a4:
de:54:31:ce:c7:65:8b:67:ce:3c:36:ec:e8:b5:b6:
36:b1:9a:e1:2a:a8:06:7f:89:40:fc:f6:f0:b4:5b:
e3:8a:ce:a2:2a:53:ce:ff:05:95:25:9d:ec:a8:ee:
72:74:21:fe:4e:0b:32:96:fd:8c:4c:0b:55:a0:42:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AA:98:91:06:82:E9:21:89:B9:B2:83:45:30:CD:69:FB:19:5D:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/50c5c501-228c-3106-8267-e85a7a096503.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ad:11:52:26:c5:e1:10:35:70:c8:bd:2b:f7:31:02:57:2b:
a9:d5:06:57:1c:4b:7d:62:90:ec:07:09:a8:b9:58:6f:cd:3d:
84:71:53:fd:16:93:bd:8f:a3:a7:ae:91:c1:52:b9:23:fc:ee:
73:e5:6a:77:8b:12:cc:19:5d:2c:0a:a4:1e:16:c9:a3:c7:08:
fa:1c:e7:33:57:7e:d0:50:e7:b9:02:b5:85:b0:16:fb:f1:33:
b9:a8:ab:d9:a4:2d:64:b0:39:e4:64:d3:5d:8b:d1:ee:a7:0b:
29:6f:38:d6:9f:c3:b7:7b:5c:45:d7:ec:7b:57:66:bd:2c:37:
7b:07:6f:7b:06:e0:48:03:82:13:d3:5e:8a:2b:f4:1d:fe:b5:
bf:cf:38:69:80:9f:c1:c8:65:e8:ea:c1:33:cc:8b:ed:01:e2:
d2:7e:51:65:6d:92:f9:9e:0f:96:5c:e4:4e:06:55:e4:ee:65:
45:35:6b:bd:53:bc:4e:13:62:54:49:93:8b:55:c1:a9:b5:6d:
f3:03:ed:35:43:6e:63:fe:99:80:78:2a:b6:6f:e2:3a:4c:47:
a4:61:43:5f:3f:61:49:34:e5:c8:09:25:dc:59:c8:15:d4:d9:
14:a1:cf:30:c4:1f:cd:1b:ba:de:04:56:63:96:81:0a:a5:74:
e4:54:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org