Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/58f5b763-9279-3155-abde-74ac6f8ca07c.roa
File: 58f5b763-9279-3155-abde-74ac6f8ca07c.roa (raw, json)
Hash identifier: in9h+ZprJkFGkuD3x12X/iI1IBjqA92qqBCN/NYvwAc=
Subject key identifier: B3:6B:D3:26:E6:64:BF:45:5D:FB:0B:96:97:5D:B6:D0:18:73:E9:36
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F95BCDA8EBA9C0E2D7FB1D0C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/58f5b763-9279-3155-abde-74ac6f8ca07c.roa
Signing time: Sat 15 Oct 2022 12:00:00 +0000
ROA not before: Sat 15 Oct 2022 12:00:00 +0000
ROA not after: Mon 16 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:95:bc:da:8e:ba:9c:0e:2d:7f:b1:d0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 15 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2023 GMT
Subject: CN=07602f47-5375-4790-ab1b-65a4cea9f83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:66:d5:53:bd:90:aa:dd:58:2b:c7:af:46:
cb:14:1a:e2:55:bf:79:7c:9c:94:d1:17:e2:60:c2:
4a:a1:e4:0b:66:4e:2c:ca:08:06:e7:ed:03:4c:3f:
f1:68:8a:59:62:7f:0d:a7:03:f8:2c:f8:0d:99:f0:
a5:0c:83:49:ab:67:ed:00:96:46:4a:fa:65:bf:39:
cf:de:03:98:90:73:e2:02:a4:ba:29:93:b4:cc:fb:
c9:cd:a1:9c:63:d2:3a:61:a8:d7:e7:61:22:3d:0c:
d0:d6:81:86:56:a7:79:ce:94:7b:48:31:25:b1:4b:
6a:fe:f4:87:d0:da:d5:be:cd:ec:8a:9a:f8:67:c7:
72:97:a9:d7:38:17:11:70:15:4f:43:3d:f4:53:02:
7f:23:e0:c1:ea:21:4d:44:86:6d:31:3a:56:9a:fd:
94:57:80:a2:6a:ca:86:ff:e4:36:a4:f2:60:7c:40:
f0:0d:98:42:40:0e:13:e2:24:b6:82:b3:3e:06:41:
cc:51:cc:fa:cc:dc:3d:37:35:2a:de:e8:fa:17:48:
eb:7e:30:32:8c:cb:d8:b0:c9:fe:35:c8:c1:f7:20:
31:18:4f:cc:98:37:a6:2d:28:61:c2:27:d4:62:b2:
a4:31:cc:96:23:9a:ca:a4:df:40:fd:38:e3:96:c5:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:D3:26:E6:64:BF:45:5D:FB:0B:96:97:5D:B6:D0:18:73:E9:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/58f5b763-9279-3155-abde-74ac6f8ca07c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:f4:b2:db:e9:3c:c0:dc:4a:02:bf:07:52:01:c9:f9:5f:97:
2f:70:3b:49:ae:da:90:af:83:3e:c1:e1:3b:79:fa:a7:36:69:
c8:6e:54:dc:f6:02:cb:a7:69:0c:e5:c5:e3:db:b4:37:a7:4c:
d2:0a:c0:24:85:92:e4:5a:9a:40:3f:c3:e9:7d:f1:92:74:1e:
24:ea:e7:7d:8b:ab:1b:f8:32:a8:b7:77:22:69:65:3a:f3:c7:
0e:5e:02:a7:21:7c:15:48:89:2f:ef:17:de:b6:6a:6e:79:aa:
2c:55:c3:21:0a:51:3c:e4:f2:13:dc:82:77:db:e8:e9:47:1a:
e5:fb:09:2a:8e:16:c3:64:f5:cb:9b:c8:13:47:5f:f1:2a:2b:
00:bb:52:a2:3d:62:d0:45:6f:9f:f5:ee:3d:a2:29:1d:f4:26:
c1:01:29:a8:33:37:82:5f:73:15:0d:31:a1:36:d4:07:7d:c3:
17:d5:14:72:67:af:1b:2a:be:c3:23:2c:54:76:b2:f0:c4:2a:
3d:8e:90:a4:7f:de:00:a9:4d:36:b8:0c:92:62:0b:fb:0b:85:
ac:c7:74:d0:a2:34:42:ca:b6:41:85:e4:ba:b8:b9:b3:e8:26:
03:30:2c:01:15:8f:ca:82:30:7e:02:0f:17:2a:89:43:10:c8:
b4:34:cb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org