Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5468a759-c7ea-334b-b9c3-d70c4bb0f4a5.roa
File: 5468a759-c7ea-334b-b9c3-d70c4bb0f4a5.roa (raw, json)
Hash identifier: reh7OIVhDLOeN8BiKywds3SSDIazvysCWC+JInlEFO8=
Subject key identifier: 54:70:3D:9C:2A:DB:07:59:8D:81:76:57:17:AA:DC:29:B3:C4:12:51
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DF5E4C6A615EE7CF238BD2F80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5468a759-c7ea-334b-b9c3-d70c4bb0f4a5.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Sat 20 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f5:e4:c6:a6:15:ee:7c:f2:38:bd:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : May 20 04:00:00 2023 GMT
Subject: CN=22b16bbb-382d-4752-bfa8-5c70681f24bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:cd:f7:e6:5f:ff:a9:92:cf:e6:6e:19:9e:
a1:1a:17:c5:ab:62:01:10:a7:9f:c9:eb:48:55:f7:
53:84:b8:91:4e:10:6e:dc:f8:ed:1f:09:7b:9b:18:
56:7a:28:f1:bb:bb:61:e7:46:be:c5:08:e6:c8:5a:
6c:60:44:dd:c7:4c:7b:04:f4:57:8a:f4:e0:e4:36:
f3:ca:c1:d0:45:ce:61:8a:5a:6e:0d:bc:65:c3:f9:
47:43:55:b5:27:c3:4f:ba:59:db:63:8b:a7:8a:d8:
aa:6b:c3:15:4b:97:fd:63:0e:34:fd:86:3b:b3:a5:
36:6c:63:03:43:a9:88:af:b0:02:d9:c2:d3:50:08:
0b:4f:0c:df:2d:a0:59:24:e2:70:83:37:84:69:e2:
73:2e:3c:c9:62:4d:f3:d2:ea:55:1a:b6:09:33:57:
2b:49:44:c9:3e:23:98:c2:41:99:09:c6:33:5c:55:
e1:61:da:e5:f8:50:53:7d:ce:06:46:23:18:8e:ea:
9d:b7:37:c9:0a:0f:07:3b:5f:62:9b:c2:9a:3a:a4:
00:a9:63:d4:e1:2b:3a:98:b9:4a:81:04:e5:93:c6:
c8:67:f4:30:d9:8e:99:d3:15:b7:dc:b2:00:86:d2:
61:e4:f8:c4:89:01:ac:be:5c:35:1a:87:9d:24:e5:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:3D:9C:2A:DB:07:59:8D:81:76:57:17:AA:DC:29:B3:C4:12:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5468a759-c7ea-334b-b9c3-d70c4bb0f4a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:e4:9a:66:f7:3d:f1:fe:96:1e:50:42:28:a2:07:81:e3:c8:
f6:af:8e:4d:34:e8:52:9d:d8:a0:84:1f:71:27:57:82:8c:1c:
d6:37:b5:59:fc:ac:57:9a:4a:82:f7:f1:fa:24:1e:96:36:bf:
69:fe:0a:2b:78:91:f2:8e:42:dd:df:37:73:c9:db:83:1c:f6:
7d:f2:58:ee:92:07:4f:ce:83:64:a4:95:38:a4:d0:b4:73:98:
82:08:e9:06:b7:60:e5:a6:c5:68:19:40:59:bd:4a:57:72:d6:
21:7f:0e:b3:60:33:df:ed:73:22:a7:f9:b1:9a:6b:fa:86:83:
81:14:99:e1:1e:f0:82:71:73:80:b8:49:db:c0:1a:09:aa:09:
af:d9:8c:84:84:a0:b8:37:5d:14:55:a6:9a:c4:4e:0c:82:5d:
94:47:5a:28:d7:e7:68:ee:b0:43:d7:c5:1c:cf:15:90:c3:67:
3d:e3:7f:91:15:55:e1:12:85:0e:88:8f:31:d1:5d:4d:06:ee:
41:7c:ec:f7:9d:f0:a0:54:e0:53:35:6a:31:f9:0e:50:32:db:
f9:d5:f6:2c:d4:ac:6a:de:9f:e4:2a:ba:00:92:dd:f7:c4:21:
e3:38:e0:3b:6a:69:de:49:eb:10:40:88:6f:86:86:5b:c1:98:
18:1d:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:04 2025 by rpki-client