Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/82feef30-33a6-3e69-9227-00dd56d5299d.roa
File: 82feef30-33a6-3e69-9227-00dd56d5299d.roa (raw, json)
Hash identifier: v5hXigDBdKvt8yvTKhQM3Cl0HvzECGZXwNfBWNg2uKI=
Subject key identifier: 6C:5D:FE:67:51:F5:49:76:87:74:B7:F6:56:69:23:58:E0:2E:B5:9D
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E1CF2B1677316C874794EA180
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/82feef30-33a6-3e69-9227-00dd56d5299d.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Sat 03 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1c:f2:b1:67:73:16:c8:74:79:4e:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jun 3 04:00:00 2023 GMT
Subject: CN=32ea0c2f-35e8-4267-a833-570d0811617a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:0e:34:13:45:a2:24:70:69:8c:59:56:2b:
58:64:02:55:6b:15:e8:e0:74:7f:4a:5f:f5:38:90:
5e:2f:65:b3:e1:0c:03:c4:73:c3:ce:3c:d6:37:4c:
c6:54:55:a4:b4:62:d5:2d:8f:04:63:43:ac:49:bc:
32:bc:f2:5b:f0:af:bd:4a:d2:c4:6f:b9:6c:a6:1a:
e2:79:b9:b3:13:cf:9f:4c:cc:e8:02:5c:3f:66:d8:
96:92:80:3d:14:35:eb:16:df:fc:de:b5:98:ac:ca:
83:8d:86:1d:a0:7d:34:c4:f7:7d:50:01:7b:d7:3e:
2f:2a:c8:93:bc:d7:ec:1b:14:67:8c:36:a5:6b:6c:
d3:b4:a5:ef:0c:47:58:5a:c5:63:9f:6b:a8:f6:15:
67:2b:52:02:d7:7b:62:0b:75:d1:ee:55:97:43:c2:
91:54:e8:42:02:c4:dc:3a:c1:c0:49:13:8d:7c:fa:
18:61:d9:00:94:3b:cb:9f:6a:d7:28:90:96:62:61:
18:7e:86:ad:99:2f:2b:de:4d:25:87:88:04:2a:8b:
70:ba:b6:99:46:3c:7c:db:d1:c5:90:f2:58:99:f0:
15:b3:b2:da:ee:92:65:3a:4e:ad:bf:65:1a:d7:e5:
79:e9:1e:20:04:b0:f2:12:a5:8a:2f:22:72:35:cf:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5D:FE:67:51:F5:49:76:87:74:B7:F6:56:69:23:58:E0:2E:B5:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/82feef30-33a6-3e69-9227-00dd56d5299d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:d8:78:55:3c:dd:7f:56:ef:f5:11:be:74:dd:a5:11:3f:bb:
f9:6f:e6:0c:f1:47:62:75:63:cc:7a:b0:c7:cb:d2:7d:ad:19:
1f:93:a9:9f:60:50:71:96:ff:09:7f:5a:1b:cb:fa:49:a3:b5:
38:7d:b7:2d:32:b2:59:64:2c:13:d1:c6:a6:41:13:4c:3c:53:
3a:f5:87:eb:b1:c8:d4:ad:51:1e:f2:28:5a:5c:84:48:ce:16:
c1:55:52:43:eb:32:8e:81:a4:df:c0:4f:cb:5b:ce:23:40:1d:
91:bf:c3:78:d8:e5:8d:c9:48:37:2d:d4:f5:38:64:4e:ab:73:
1c:91:b2:ec:0d:76:2a:ee:25:45:67:48:14:c6:0d:09:3c:2c:
61:2a:9b:e9:c5:96:c4:07:20:90:e5:7d:05:f8:ad:b6:79:a5:
a6:e8:4e:c8:01:be:6a:a5:3b:a1:99:05:ba:6c:6e:07:15:a8:
f6:f6:d5:70:b7:64:88:75:0a:e4:bb:be:89:f3:af:93:f6:15:
c4:3f:1c:bc:f0:dd:77:7f:6a:15:b2:3f:cb:7f:9b:8f:7a:d0:
f0:de:89:e8:c0:d8:cd:2d:74:60:4d:d0:2d:e6:5a:f8:32:8f:
c2:5e:db:87:66:d2:58:c2:1b:e6:63:0a:ab:d6:56:b4:e8:a8:
3c:43:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:10 2025 by rpki-client