Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/75645494-9ee3-3d88-be40-f556d0b9bf32.roa
File: 75645494-9ee3-3d88-be40-f556d0b9bf32.roa (raw, json)
Hash identifier: 7iRBoiOetg1J9r668sDo3GrRBOO2IQqDzSgNiYOArCo=
Subject key identifier: 5A:64:01:0C:1A:2B:4D:71:A9:C1:F2:8B:FE:B5:03:A2:A0:8E:08:44
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F84C801192629EE520B388A80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/75645494-9ee3-3d88-be40-f556d0b9bf32.roa
Signing time: Sun 09 Oct 2022 12:00:00 +0000
ROA not before: Sun 09 Oct 2022 12:00:00 +0000
ROA not after: Tue 10 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:84:c8:01:19:26:29:ee:52:0b:38:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 9 12:00:00 2022 GMT
Not After : Oct 10 04:00:00 2023 GMT
Subject: CN=ff5fa11f-bdeb-443f-ad05-4ace77ed5ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a7:03:be:ee:8b:b6:54:fd:70:d0:f1:66:ae:
ff:75:1a:1d:a7:e5:80:c4:05:c8:8d:21:16:8d:5d:
67:70:6f:71:33:3a:32:6f:47:a7:b8:25:d3:63:c2:
ad:15:6c:7c:82:b9:d1:92:9c:16:aa:96:86:e4:f0:
da:d6:dd:bc:55:23:dd:1c:f2:71:39:68:eb:e1:12:
64:3a:21:37:dd:17:99:24:3f:ae:d9:01:4b:1e:f3:
95:46:0c:e1:ff:61:59:c3:62:bc:cc:57:e0:4a:3d:
b1:cc:5e:a4:ec:73:a7:38:4b:a1:d3:fe:76:0a:67:
79:9f:d7:f5:9d:b3:19:09:ce:ce:3c:42:1f:65:05:
68:d4:e6:2d:e4:e9:83:38:00:fc:ca:b3:e2:bd:c0:
70:ed:1b:52:3e:a6:ee:e6:c4:19:46:e2:3b:fa:d3:
8d:28:d7:f4:73:0e:84:a6:02:55:b9:d6:e0:70:81:
21:19:0e:7f:6c:5f:3f:4d:53:98:d1:93:88:dc:be:
b1:1e:08:7e:76:ab:7f:41:c0:20:4a:cc:17:47:d0:
cb:2d:bb:f0:65:bf:b2:90:0b:81:06:9f:d2:d6:95:
ed:a5:bf:70:e0:58:1f:50:0a:1a:df:84:c8:4a:9e:
25:15:0e:ba:bd:99:58:6f:2e:15:a3:1e:ad:79:bc:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:64:01:0C:1A:2B:4D:71:A9:C1:F2:8B:FE:B5:03:A2:A0:8E:08:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/75645494-9ee3-3d88-be40-f556d0b9bf32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:c1:e4:d0:8e:45:fc:0c:27:ca:08:c9:64:a7:99:d5:4f:f7:
96:65:c7:e7:5f:44:2b:48:f3:69:80:e6:f5:3f:45:96:56:7c:
21:1b:bd:9e:ab:b4:3f:16:e3:19:37:2b:59:89:a4:a8:e7:bb:
a7:32:eb:06:e0:f0:5c:73:ed:0f:8c:1f:e1:73:52:87:c0:4b:
4b:9a:3c:b6:b6:b4:dd:f6:83:13:53:81:cf:fa:4b:d6:d8:5b:
e7:5c:dd:ae:2e:55:ad:0d:2f:5f:92:25:31:9b:85:95:b7:2f:
3a:68:d5:da:c5:e2:36:ea:7e:01:d2:a2:af:3f:83:b4:0b:e9:
29:f9:4b:a9:46:07:9b:1f:3d:44:02:95:71:bc:f2:c8:8c:bf:
40:0d:85:cd:0d:b1:6c:a9:2c:0b:36:7c:81:28:c2:cc:65:df:
49:33:be:fc:56:79:5e:97:4c:34:8f:f8:cb:6f:22:9a:a8:6e:
b8:3e:ed:4c:fc:6b:9a:45:d7:cf:2f:b1:76:e4:ff:fc:7c:bc:
a9:9b:04:64:9b:73:ec:22:d7:27:f5:3c:0c:56:df:1a:f9:7b:
25:44:a7:55:dd:e1:f9:1f:38:f2:35:6d:58:93:78:4a:90:1e:
72:3f:bf:bc:0a:77:c6:c8:c2:7e:aa:e8:0c:fa:b3:41:a4:e4:
9b:40:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:30 2025 by rpki-client