Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/54dac445-49de-3c77-a3de-85160b420ffd.roa
File: 54dac445-49de-3c77-a3de-85160b420ffd.roa (raw, json)
Hash identifier: sOq6HJdj6OJpEYtLn5p62Z+bE+WR2wtMv2qtZu2om/g=
Subject key identifier: 1A:25:22:7B:14:5E:A8:37:12:8B:AF:97:14:CA:91:DC:14:BE:0E:E2
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F1D5ED2C52D1B608A632012D0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/54dac445-49de-3c77-a3de-85160b420ffd.roa
Signing time: Fri 02 Sep 2022 12:00:00 +0000
ROA not before: Fri 02 Sep 2022 12:00:00 +0000
ROA not after: Sun 03 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:1d:5e:d2:c5:2d:1b:60:8a:63:20:12:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 2 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2023 GMT
Subject: CN=51ce6b14-fa9a-47a5-b21c-c8e0a56b1644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:52:a8:f7:43:49:b8:bb:31:fe:71:3a:0b:
35:00:74:e6:83:3d:e0:d2:a3:8e:47:4e:a5:63:92:
56:c5:02:79:84:37:20:05:51:fe:0c:2d:39:13:f4:
39:c3:02:99:38:26:9a:9a:ad:ee:4d:40:08:c4:73:
48:88:85:ae:49:3e:50:75:22:d1:0c:42:bd:75:08:
5c:1b:4f:4f:45:ca:2e:fb:3c:8a:fc:67:2b:d3:bc:
5b:4a:44:7b:b3:b0:0b:d2:34:91:8f:39:80:6b:a3:
1b:79:0e:99:3c:a5:73:47:52:1e:2f:70:dd:a7:e8:
0e:36:b9:92:57:d3:22:2a:0f:08:7e:41:f4:c0:a3:
f6:79:c0:ee:1a:25:cf:eb:7b:88:06:78:b6:27:c9:
b5:99:1a:7c:8f:b4:93:67:75:63:71:db:6c:ba:32:
2a:6d:30:a5:6a:7b:bc:50:c3:c8:a0:72:06:d3:fc:
14:02:11:e2:83:92:27:93:b6:56:9c:0b:b0:ab:41:
d4:7b:64:8e:44:4f:91:56:b0:ce:67:db:d2:cf:62:
8b:70:4a:7b:64:a9:4d:96:e9:03:55:a8:f6:a9:9c:
c7:dc:c3:b4:fc:a2:c2:62:71:ab:d5:2f:6f:1a:db:
b8:23:8c:9f:d2:42:ff:e0:e8:f6:14:16:a2:fb:48:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:25:22:7B:14:5E:A8:37:12:8B:AF:97:14:CA:91:DC:14:BE:0E:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/54dac445-49de-3c77-a3de-85160b420ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:7e:bd:4c:05:96:42:e1:5a:ef:dd:96:b6:70:08:6b:86:fa:
f8:9c:20:3d:14:b8:4b:e6:a5:74:cd:2c:26:9b:91:5f:78:dd:
2a:d2:f2:07:4e:1c:ad:54:10:5f:af:e4:99:77:68:e1:ce:90:
92:69:16:15:90:0e:aa:5b:2a:a3:e3:32:5d:12:d2:5a:dd:00:
8c:34:cb:90:6b:22:58:fd:f2:de:43:7d:a2:f4:16:be:6d:4c:
70:5b:e1:0c:9e:fb:13:f8:06:9a:b9:d2:17:85:89:86:ff:ce:
0a:9d:47:2f:0b:16:d2:e8:c3:4f:0e:52:db:89:b6:ce:30:b7:
dd:49:f7:a1:cb:fb:21:3b:59:40:2c:e5:1e:0b:f9:60:78:2c:
f2:92:23:78:3d:f2:7d:b9:8a:a7:11:7b:68:ba:fd:55:db:45:
69:b9:6d:d1:45:52:eb:98:5b:7b:d5:7d:ec:1f:d9:c6:a6:f7:
54:80:2c:a5:76:d8:70:50:6f:48:70:d4:d0:8d:37:cb:f8:0d:
7c:5d:b4:24:62:07:9f:d1:a6:6c:ce:6e:56:09:be:fa:eb:9e:
b8:9d:8f:2b:90:85:fc:fb:f7:ab:63:ef:a1:fe:c9:50:30:65:
f9:e5:b6:59:6b:f5:90:74:f1:fb:1f:20:a7:d3:aa:30:28:09:
49:49:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org