Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/91244bb4-b4fe-3a19-a3fc-72116f8de484.roa
File: 91244bb4-b4fe-3a19-a3fc-72116f8de484.roa (raw, json)
Hash identifier: WeSRCCxZ9jgRokJEBSlJTw+VdWGA1ZCIzQMj0VV8NVw=
Subject key identifier: D2:DB:BC:81:36:DF:90:39:A7:46:A9:F6:FE:D9:D2:97:E5:A0:52:3D
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D139AFF4803D37B18EB28D760
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/91244bb4-b4fe-3a19-a3fc-72116f8de484.roa
Signing time: Mon 28 Feb 2022 05:00:00 +0000
ROA not before: Mon 28 Feb 2022 05:00:00 +0000
ROA not after: Tue 28 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:13:9a:ff:48:03:d3:7b:18:eb:28:d7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 28 05:00:00 2022 GMT
Not After : Feb 28 05:00:00 2023 GMT
Subject: CN=a6ba5345-dfac-4324-be34-f137e29ddedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:67:9f:ab:ac:8c:41:ce:95:1d:ab:1f:cf:
91:e3:4d:53:cf:02:f6:33:70:fd:2f:82:29:d8:a2:
e9:23:43:88:73:e6:f0:15:db:1a:d4:08:a2:61:8f:
e6:8b:c4:a8:4e:05:e2:c8:d8:5a:8f:f5:38:f4:db:
d1:5d:0d:e8:23:f7:5e:cd:8a:70:52:7f:ca:45:b4:
9a:db:8d:a5:ca:f9:e5:ca:2b:b4:c0:4b:00:b0:99:
ed:f9:96:19:3e:f2:dc:e4:33:3b:b7:8e:85:8e:6b:
4b:d9:a2:c4:ac:02:37:1a:a5:c5:c7:5a:5d:41:08:
29:1d:88:ac:ac:6c:cd:c8:75:d0:a7:22:f6:7e:36:
ec:25:b5:cb:53:80:c4:69:9a:1d:54:55:27:b0:f3:
e9:5c:8d:f2:5f:4e:ba:f2:4e:b6:99:7a:ee:96:03:
41:ea:7a:cc:56:3f:47:ca:4c:48:c7:55:d3:44:85:
f1:dc:d0:a4:18:46:fd:26:1f:97:95:4f:d3:4a:8a:
b0:9e:f9:ca:ec:7c:44:af:37:19:59:4d:27:fa:3f:
f6:9e:99:88:b8:7a:1d:58:a9:f5:8d:a7:8d:bf:97:
8f:9c:ec:ed:b1:00:31:af:b9:e2:0d:d7:1e:02:82:
5c:ac:29:43:81:da:ea:ba:29:40:da:e7:c1:dd:d1:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DB:BC:81:36:DF:90:39:A7:46:A9:F6:FE:D9:D2:97:E5:A0:52:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/91244bb4-b4fe-3a19-a3fc-72116f8de484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:0a:fa:98:26:fd:7f:a3:52:1a:87:ad:fc:2f:3a:7b:d4:11:
26:c2:93:10:d1:17:5f:5e:75:d0:73:1a:ad:28:c1:cb:ac:d2:
9a:e1:c3:46:93:f0:4b:0e:0f:8a:16:b3:9d:eb:2f:ca:48:35:
68:06:fc:06:66:6e:cd:e5:a1:06:3b:6f:46:29:1d:67:5b:5c:
52:a1:f1:48:fc:69:b9:7a:7b:53:ab:91:b0:d3:d2:8a:63:70:
4d:96:ea:eb:cd:c0:66:60:a1:03:49:a2:9c:15:c1:97:e4:46:
52:6c:69:0d:3e:2b:58:15:f7:6d:43:80:7d:ee:c4:ee:ad:98:
43:92:36:e6:f9:e7:6d:bd:b0:f7:83:e8:32:71:ed:e7:10:49:
ed:a4:d2:47:bf:95:b8:a4:9f:9b:48:cd:65:7c:0d:6e:b0:3c:
98:19:24:9e:ac:11:db:91:af:75:17:ef:78:fa:01:05:b9:95:
80:6b:14:52:fb:26:94:ec:a6:bd:07:36:22:8d:20:79:b2:7b:
af:4b:bd:29:af:55:48:df:b3:01:42:ce:1d:79:86:8d:98:53:
41:6a:d9:02:dd:e2:67:ff:79:f6:52:98:f0:32:c0:29:c8:56:
37:e3:73:49:0e:7d:32:45:98:a0:d2:1a:f5:72:7e:c4:dd:6a:
81:cc:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:57 2025 by rpki-client