Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/86a9e08a-408b-3cd4-94e4-c9babe011534.roa
File: 86a9e08a-408b-3cd4-94e4-c9babe011534.roa (raw, json)
Hash identifier: hyRl464SU66xcKlLB9C7GscCJEA0GT+hgBNqSRqb+ZY=
Subject key identifier: BE:5D:2B:0E:58:4D:5A:63:91:A3:92:5E:8A:81:B8:E4:AF:13:1D:BA
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EA29069F30EB39AE2F4E5A480
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/86a9e08a-408b-3cd4-94e4-c9babe011534.roa
Signing time: Wed 20 Jul 2022 12:00:00 +0000
ROA not before: Wed 20 Jul 2022 12:00:00 +0000
ROA not after: Fri 21 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a2:90:69:f3:0e:b3:9a:e2:f4:e5:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 20 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2023 GMT
Subject: CN=384263e9-90fb-4be9-84a6-6930ecb3f0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:52:71:36:4d:4e:1a:fa:eb:d9:1d:04:56:
ce:bd:90:98:61:b0:64:c2:a2:eb:3a:c3:dd:19:da:
62:34:6a:c3:39:52:a5:f9:a3:c4:2d:26:ec:ac:0f:
53:bc:69:09:fa:8f:c0:2a:d3:b9:a9:4b:19:bd:05:
8b:06:80:1e:ca:ef:41:b1:a7:2a:fd:fd:a2:de:0c:
b0:14:da:94:94:6f:29:8c:3d:60:6c:7b:12:e7:46:
ee:cc:73:fa:6c:3b:07:30:67:5f:8d:b0:2c:84:2b:
a2:a8:1a:f8:3e:3d:46:c9:6e:8c:c4:e9:77:8c:f9:
a9:0f:28:bb:0a:4c:f0:bb:c0:67:84:fa:4b:8b:09:
e8:4f:7c:f0:37:41:c8:0f:49:94:b3:a3:f1:de:b5:
30:70:2b:1d:19:4e:c8:e7:d7:4a:f1:32:63:4e:83:
36:9f:8e:7a:bb:f3:1d:a3:09:bf:85:42:11:6d:c8:
d3:18:03:ea:ee:6d:09:76:fa:0d:c4:e3:f7:d4:50:
b3:a1:39:c8:06:cf:08:a7:d9:b6:5b:b4:10:74:d0:
f9:17:8b:73:4c:97:f1:d0:ed:94:55:65:82:d3:37:
66:85:c4:46:5f:f3:7b:b3:cf:e0:64:36:2a:35:70:
cc:e6:b6:ba:2d:74:55:af:ec:56:a3:53:9e:ab:cc:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5D:2B:0E:58:4D:5A:63:91:A3:92:5E:8A:81:B8:E4:AF:13:1D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/86a9e08a-408b-3cd4-94e4-c9babe011534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:98:d8:8b:72:3e:ed:dd:f2:f2:06:76:d4:c3:77:42:47:3b:
cd:6e:53:8e:7c:95:be:8a:92:b0:5e:1c:28:85:87:02:50:d2:
30:f6:c1:1b:8d:f0:2a:e0:84:3d:c9:2e:25:59:34:e3:5b:a3:
b4:d4:aa:ae:92:6e:fd:54:8b:8b:4a:c8:9d:47:1b:0a:02:2e:
f0:a4:18:f0:2c:29:ef:b5:70:10:a6:21:87:e9:1d:27:bd:a1:
bf:be:52:de:18:ec:00:97:4b:a6:25:05:79:e9:98:02:8c:f9:
b8:f6:0d:e9:c1:2f:ca:c7:2f:d3:89:e2:32:76:6e:3f:f2:46:
d0:76:49:91:39:e6:92:f5:f0:21:da:d1:df:d0:63:2d:36:2f:
6d:c6:99:dc:8a:af:a0:a3:fe:ce:da:0f:e1:d2:94:c8:9f:8d:
47:7b:be:4a:90:82:48:5c:70:73:58:a8:b5:28:ec:75:5a:2c:
f9:a7:f5:00:52:7e:1d:b5:d0:13:46:b3:ff:9a:a2:15:cc:b8:
f9:21:85:4f:92:41:33:a0:2f:95:70:34:19:5a:e8:da:dc:20:
a4:c0:15:ee:c7:1a:98:59:8c:5d:98:b7:ba:5c:af:33:63:22:
65:31:d1:2b:df:4d:67:37:45:91:86:78:a2:e9:6b:04:65:a4:
98:04:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:27 2025 by rpki-client