Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/80f510e1-15e5-3caa-a441-5bed5105ffb6.roa
File: 80f510e1-15e5-3caa-a441-5bed5105ffb6.roa (raw, json)
Hash identifier: l8TTy2v0O/vQq95yLlj3Ffsw6p71uajLFcbHA0g9tEw=
Subject key identifier: 54:9F:2B:60:74:BC:5E:EE:1B:5C:CA:76:2A:08:FF:8F:6F:7D:07:D8
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E3083B49A9392C63AE3DCF100
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/80f510e1-15e5-3caa-a441-5bed5105ffb6.roa
Signing time: Thu 09 Jun 2022 12:00:00 +0000
ROA not before: Thu 09 Jun 2022 12:00:00 +0000
ROA not after: Sat 10 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:30:83:b4:9a:93:92:c6:3a:e3:dc:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 9 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2023 GMT
Subject: CN=6bd5058e-c84a-427d-be8d-d3b013cce154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:57:2d:5a:15:de:b8:ad:f7:d6:7d:df:ca:
95:7b:73:c8:16:db:1e:63:67:4a:83:af:25:f5:ec:
be:68:47:b9:70:b3:f7:af:e1:0b:0a:8b:b7:9f:fd:
2a:c2:fa:42:eb:16:f3:75:b7:9e:50:ef:02:82:d3:
d2:f7:c4:66:56:ef:c5:7a:b9:95:06:d1:8d:78:00:
3a:04:00:42:ee:61:a0:c7:69:c5:d6:08:14:08:df:
37:c1:c2:c5:4b:d3:fd:d3:94:dd:56:6b:04:d4:bd:
79:dd:67:5c:b4:de:00:8e:8c:96:89:d3:1a:2b:30:
46:8b:ce:1e:f3:2b:2e:e4:af:57:28:e3:dd:fe:45:
4e:31:b3:67:47:dc:1f:52:dc:55:32:ce:69:d7:c4:
d8:32:5f:d9:73:6e:a1:10:77:35:9d:2b:75:36:02:
c2:17:8a:c2:45:1d:9f:c2:16:38:6d:1b:87:ff:78:
a9:e7:ce:76:fe:44:f8:ea:66:77:9a:28:23:84:6c:
b1:c0:c1:47:6b:9a:a1:09:18:6e:f2:7d:96:a3:3f:
38:cc:9c:3e:e7:0e:03:3f:1d:8d:53:a8:e4:ab:76:
06:1c:4d:6c:2b:50:da:6f:ca:26:cf:31:be:a0:49:
20:27:e0:16:bb:93:ad:f0:21:d5:fb:7e:c4:1d:97:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9F:2B:60:74:BC:5E:EE:1B:5C:CA:76:2A:08:FF:8F:6F:7D:07:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/80f510e1-15e5-3caa-a441-5bed5105ffb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:22:74:7e:ee:c1:2e:1e:8a:99:1a:e1:08:89:83:5d:10:2e:
47:d9:31:09:38:88:46:02:8b:d5:3d:03:5c:19:8d:e2:3f:5f:
02:4a:a8:75:b9:c2:e6:d2:8d:ad:80:10:c1:99:69:53:15:25:
8a:87:ac:24:43:dc:04:95:74:7b:17:c3:e3:b8:7e:2a:fd:6b:
b3:db:65:34:51:cb:57:05:b6:68:3d:e4:14:6b:c3:27:ac:7b:
32:a9:a0:f0:d9:f4:d8:e9:04:8c:97:38:69:00:57:9b:d2:a1:
68:b2:9f:00:22:0f:7d:83:10:49:f4:4c:c7:73:24:7b:f3:3f:
50:3a:e4:78:e2:b2:98:05:1a:83:85:81:2f:80:58:cc:bd:67:
8e:5a:94:14:29:d1:d0:e3:ca:2c:20:c5:11:7b:eb:ac:6a:87:
9d:93:71:d3:2b:1f:1b:76:23:78:00:60:8d:d3:b7:8e:67:f8:
31:b6:94:e8:a4:e6:37:fc:65:15:07:75:43:fd:c6:48:90:d9:
0c:b1:7a:9b:49:85:1f:49:f8:ee:21:0d:61:67:1a:8c:ca:d7:
48:99:78:6b:9d:25:a6:fe:07:1c:3c:92:a7:79:77:ca:2b:ba:
a3:fe:cd:f9:16:12:61:be:db:7e:e3:4a:4d:0e:d0:58:41:cc:
cb:9a:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:12 2025 by rpki-client