Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9557b902-bd6a-32ab-9c69-d2f629b49146.roa
File: 9557b902-bd6a-32ab-9c69-d2f629b49146.roa (raw, json)
Hash identifier: LGyEou5f1DgoVYF5UnLV6OlWH2mXlfUg5shbHkm7jto=
Subject key identifier: FC:63:DE:12:65:36:E8:D7:77:0B:DE:EC:B5:6B:21:3B:6A:2D:CA:D3
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DB24515FCED6E7BC890A36F00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9557b902-bd6a-32ab-9c69-d2f629b49146.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Wed 26 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b2:45:15:fc:ed:6e:7b:c8:90:a3:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 26 04:00:00 2023 GMT
Subject: CN=803f2f06-3e8b-4905-9e3c-2e33b0cc0554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:d4:be:b4:a9:b9:6f:c2:43:47:c3:29:c4:
43:bc:59:82:af:4f:b7:bc:7f:f5:9a:07:02:52:7e:
56:e9:f4:9c:a4:7e:1d:4e:e1:09:98:ce:e4:e5:f2:
18:f1:df:69:d9:d0:34:08:65:8a:16:07:d4:48:34:
21:93:70:e5:e7:69:48:30:3b:77:25:26:30:23:05:
0a:25:b9:94:1b:c2:ca:54:82:38:eb:01:1e:67:b7:
f1:b1:e2:06:43:45:5b:63:66:ef:52:1a:ee:97:44:
ce:e1:26:bd:95:7a:cb:26:30:72:cd:78:8c:60:58:
6f:47:b4:30:55:c4:5b:cd:51:1e:d7:db:09:6e:cf:
36:44:c3:1f:26:05:b5:49:19:b9:83:ff:d9:2d:70:
d1:00:ae:0a:91:45:64:b7:d2:22:b8:24:1b:84:df:
43:f0:12:db:8a:1d:5d:26:95:26:bd:d1:47:b1:fb:
62:52:31:f6:de:c5:c9:ea:80:f7:d2:be:07:d6:fd:
7d:c3:28:5f:81:4b:75:95:b5:3e:d1:61:fa:13:bb:
b2:25:e1:6b:79:a9:e4:f0:e9:ca:ae:76:af:eb:45:
12:0b:88:99:cf:88:e4:53:ff:11:d1:ea:ae:55:47:
d8:bb:ea:dd:95:32:62:62:22:ee:e9:01:ce:b1:d9:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:63:DE:12:65:36:E8:D7:77:0B:DE:EC:B5:6B:21:3B:6A:2D:CA:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9557b902-bd6a-32ab-9c69-d2f629b49146.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:6f:9b:2a:32:0f:96:6d:9e:f9:4f:ab:9f:c5:ba:40:5e:cd:
ef:61:b8:c6:9b:8c:1a:e3:42:a0:4f:cf:24:de:6f:b5:7e:03:
a0:34:47:6e:49:38:39:b4:e1:de:fe:91:41:df:20:5c:ec:91:
f2:5f:7d:9b:9a:40:5e:6c:3b:94:46:3b:0b:e4:5c:de:76:f4:
5d:f2:4d:e6:a6:20:cb:b6:07:0d:76:ef:26:ee:a8:ec:b4:4c:
c6:d3:43:74:31:95:f4:7a:4d:39:5a:4b:01:ad:0a:df:e2:c6:
76:cc:db:dd:13:dd:95:72:4c:6f:22:8d:77:c0:c4:20:6a:12:
79:ac:5d:c8:c0:be:5e:21:60:89:f1:6f:25:d7:44:80:25:0a:
1d:39:b5:2a:61:73:68:0b:54:4b:d3:03:6c:bc:3e:a9:97:3f:
26:e8:61:49:d1:53:58:71:b7:f9:cc:c6:c4:b8:ea:ec:e8:78:
5b:86:75:98:4f:07:66:29:b7:fc:74:f9:36:ec:af:2a:3d:86:
6d:14:c9:d8:55:ae:dd:30:09:67:9b:91:f1:33:b7:8b:12:ff:
a9:85:81:91:fc:cd:14:90:b5:5c:2b:a6:a1:9a:72:a0:58:a4:
15:c0:1b:ae:9f:32:32:2c:c9:11:bf:1b:4c:0d:ae:0b:a6:e5:
44:a9:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:59 2025 by rpki-client