Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8c5d5702-ef50-3860-8e69-c8d17489bb2a.roa
File: 8c5d5702-ef50-3860-8e69-c8d17489bb2a.roa (raw, json)
Hash identifier: +eRQtZFeLd5dU1ha05BGPI5PgXMcBJf0Yq0ExoppSTg=
Subject key identifier: 6E:3E:69:8D:AF:B3:54:A8:D3:B2:C4:97:12:B0:4C:7A:2A:7A:D9:BB
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E03A619F4D52722AEC086AD80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8c5d5702-ef50-3860-8e69-c8d17489bb2a.roa
Signing time: Tue 24 May 2022 12:00:00 +0000
ROA not before: Tue 24 May 2022 12:00:00 +0000
ROA not after: Thu 25 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:03:a6:19:f4:d5:27:22:ae:c0:86:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 24 12:00:00 2022 GMT
Not After : May 25 04:00:00 2023 GMT
Subject: CN=c7756638-f88f-484d-bf5a-006195057c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:d3:21:67:17:48:3e:1e:6a:96:a4:b4:61:
d6:56:da:69:4b:43:f2:4f:1d:65:77:32:28:b7:5c:
44:54:9b:ae:1b:e4:99:4f:47:4c:dc:83:e9:a7:43:
30:07:d3:b8:b6:bd:85:24:75:3f:b2:89:bf:f2:3e:
2b:77:dd:c9:3f:96:35:b9:9e:37:50:22:5d:bc:04:
7f:3f:23:88:2a:e0:44:12:ae:80:ac:b8:bc:63:ec:
9a:98:fd:fd:4f:c4:6f:92:11:3e:e4:81:cd:d0:09:
17:06:1b:ee:b7:71:25:bd:ae:ce:44:a7:8c:a2:a2:
5e:3c:d6:eb:ca:7b:85:68:11:ba:98:95:12:9b:62:
d7:fb:cb:2f:20:dc:62:0c:1a:02:f8:6f:83:af:f8:
db:5b:c5:28:bf:3c:06:dd:82:be:42:72:67:a3:20:
09:4d:f3:41:98:3f:c8:28:22:dd:8d:d9:17:13:ab:
4d:c4:ce:dd:14:47:e5:89:34:2e:28:03:29:0b:02:
af:de:8d:b7:ce:66:6e:41:a6:ac:ea:4a:1b:92:42:
2c:3d:93:61:6b:92:4f:30:e5:c0:7d:4f:d0:99:80:
d4:32:54:4e:69:d5:c7:b8:83:0b:78:e2:e0:32:0d:
89:93:2e:48:53:0c:1d:23:2c:84:6d:ac:ad:58:31:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3E:69:8D:AF:B3:54:A8:D3:B2:C4:97:12:B0:4C:7A:2A:7A:D9:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/8c5d5702-ef50-3860-8e69-c8d17489bb2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:40:de:51:fe:58:f8:3b:2e:d5:24:2f:0b:b9:c8:cd:c1:97:
83:f5:ce:98:69:be:b4:80:84:59:93:79:05:e5:c5:7e:09:15:
9d:3e:93:45:b1:30:c2:a8:ed:06:f8:36:18:ce:27:5f:a5:50:
c2:9e:2d:9a:83:7a:32:3e:6a:11:7b:ab:31:92:4e:ea:ff:42:
82:d8:c9:74:3b:a3:eb:9e:f2:28:96:28:7b:67:63:bd:f2:0b:
52:49:31:d2:13:1a:74:ff:79:22:0c:d0:7d:95:72:91:e7:a0:
61:6a:a2:c1:c7:bb:3a:4d:d7:3d:bb:0f:41:90:ee:7b:72:b3:
fa:c9:4c:09:f9:cd:35:95:6d:53:61:94:cf:68:71:4c:29:70:
96:7c:e5:77:d5:25:de:b6:61:82:b2:ad:fc:a0:6d:fd:40:fd:
96:12:de:b4:a9:54:f8:c4:15:c4:dd:f8:dd:29:b6:d8:28:60:
d6:b1:38:ef:dc:0e:1d:89:58:7b:4b:bb:59:c2:96:d2:e8:ea:
70:ea:9d:2f:b7:b9:f4:27:58:25:29:fa:dc:41:d6:d3:c0:18:
e0:8a:db:33:a5:10:4d:7c:82:04:0e:98:87:28:30:32:e3:43:
00:72:e2:89:2c:20:7b:c1:c4:2c:4e:3f:ac:c8:52:02:9e:75:
d3:32:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:23 2025 by rpki-client