Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/6529f382-f609-3b3f-bf79-f23a61bf04ec.roa
File: 6529f382-f609-3b3f-bf79-f23a61bf04ec.roa (raw, json)
Hash identifier: DuPvhkulT3lbvy3nO7DQbtmQ1iYqPEMg1LNaLYlHL0M=
Subject key identifier: 14:83:F1:CA:B2:16:56:E1:DB:1D:FC:AD:06:72:5B:59:AA:F4:B8:8C
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D34CC62215F15C91B97B16080
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/6529f382-f609-3b3f-bf79-f23a61bf04ec.roa
Signing time: Sat 12 Mar 2022 05:00:00 +0000
ROA not before: Sat 12 Mar 2022 05:00:00 +0000
ROA not after: Sun 12 Mar 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:34:cc:62:21:5f:15:c9:1b:97:b1:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 12 05:00:00 2022 GMT
Not After : Mar 12 05:00:00 2023 GMT
Subject: CN=1c22d82d-febc-456d-9701-7816b726d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:94:92:99:de:47:22:59:30:d1:74:cb:78:
fb:95:da:e9:24:74:27:6f:40:00:b5:2f:ed:47:f1:
bf:aa:d5:2d:1b:73:32:82:53:76:d6:c1:d4:cc:c8:
ff:75:f0:f4:50:3f:3e:d1:68:66:31:46:0f:50:7a:
72:2f:b2:51:6c:6c:94:88:69:99:47:4f:81:bb:cb:
36:1b:6a:9f:25:21:8b:3c:f1:08:e2:b6:9e:dd:5b:
18:51:3f:6c:1c:db:09:20:09:b9:58:00:a6:ad:56:
b2:ef:2c:40:50:b1:bf:84:63:2a:8b:73:57:07:13:
97:eb:5b:1f:be:45:1b:46:fe:9c:c9:b3:1f:1e:65:
da:47:cb:67:b4:58:ce:5a:32:1b:97:74:ec:00:b8:
5b:80:27:fb:dd:f7:6c:7a:4b:c7:f7:95:f9:5c:9f:
f3:7a:bc:d4:86:d7:76:80:24:87:25:7a:98:fa:f4:
bf:97:a8:81:02:33:6e:26:b3:90:60:04:f5:3e:ba:
44:ea:03:c2:3b:dc:b6:fc:6d:1a:c2:c2:13:6a:56:
a2:36:59:95:90:c1:d1:fc:b8:a3:79:3e:e7:8b:1f:
43:ab:79:2b:f6:51:83:09:f7:79:80:54:08:48:98:
34:70:8f:13:44:13:94:b1:f0:0d:21:1d:24:6c:a6:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:83:F1:CA:B2:16:56:E1:DB:1D:FC:AD:06:72:5B:59:AA:F4:B8:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/6529f382-f609-3b3f-bf79-f23a61bf04ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:f9:e7:59:0b:93:aa:ca:e2:0b:48:f9:b9:13:8a:1d:b3:12:
f2:00:df:e5:44:ab:d6:aa:49:b4:33:89:34:cc:0f:e9:5a:08:
98:cf:d8:69:04:55:da:ef:54:7a:45:88:30:44:c1:98:95:f8:
38:e1:26:a7:e0:d8:fb:1d:f0:c5:34:aa:88:ae:39:5f:31:6f:
0a:fd:71:a0:05:a5:32:02:a3:ce:f6:5e:bf:97:c8:bd:ce:0c:
f6:97:7b:b1:f5:78:cc:4e:a1:02:84:14:54:e6:a3:c7:e9:e3:
c4:8a:36:b3:23:98:b2:cc:69:64:cf:41:37:f2:05:76:19:72:
53:94:a7:bd:28:d2:cd:f0:12:f4:99:80:8d:15:1d:22:85:01:
35:6c:f6:ff:00:a8:6a:f2:51:06:9b:41:c9:7b:1c:da:0f:d7:
06:93:4a:50:d9:26:a8:2a:ed:55:a2:a9:e9:af:ad:c9:2e:ef:
0e:26:a7:d2:25:37:c3:d0:44:60:ca:90:dd:f1:c6:1c:ca:2a:
89:1a:89:29:fc:47:f4:94:2d:df:d5:61:86:55:8a:c6:33:a9:
97:7a:00:ab:5c:63:3d:13:46:b8:43:93:c9:eb:39:32:fa:9e:
f9:b4:38:d0:7a:e2:f5:1e:91:42:2e:df:51:ab:68:82:57:94:
c1:54:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org