Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/98de2f51-be64-3eac-8b40-cb8635f6710f.roa
File: 98de2f51-be64-3eac-8b40-cb8635f6710f.roa (raw, json)
Hash identifier: VgXhERKEVpZqD++L2XH5sVr+dEaVIqt+rtroeq1mmhA=
Subject key identifier: C4:1E:C8:BA:C0:C2:CD:C4:04:BD:CD:14:B0:42:A5:03:E6:95:C1:86
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583CD0A481C8EAE0B5690BEBD160
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/98de2f51-be64-3eac-8b40-cb8635f6710f.roa
Signing time: Fri 04 Feb 2022 05:00:00 +0000
ROA not before: Fri 04 Feb 2022 05:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:d0:a4:81:c8:ea:e0:b5:69:0b:eb:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 4 05:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=daf659f9-f690-41d4-a514-9b345ec753f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:e8:a7:0c:f7:67:97:0a:b2:16:5d:08:7f:
89:0b:e7:aa:00:11:8f:35:cf:a5:0c:64:e2:3a:52:
cc:9e:cd:06:08:14:80:42:76:5e:23:5a:b4:ec:3b:
6e:21:33:a0:1c:2e:fb:ff:e6:02:ff:93:b8:0e:36:
ef:ff:9b:23:b9:e0:88:fb:b6:4b:d4:b9:cd:d2:52:
67:3b:1c:48:fd:2d:3f:d0:4e:0f:2f:f8:ad:19:09:
6c:cb:3b:55:29:20:3c:20:b2:57:38:6a:3a:eb:fb:
d5:66:da:a6:94:ad:8f:ce:53:41:bf:a1:c2:e6:42:
a4:51:05:9e:7f:91:ae:d8:08:44:d5:aa:ea:d8:40:
c6:17:76:fd:86:69:a6:07:d5:5f:b7:1b:7e:0d:cf:
c5:bc:d0:f1:96:41:59:b6:28:8f:da:de:ae:d9:fd:
31:a6:12:c2:f1:a8:80:30:15:e7:a7:b6:9a:1a:bf:
13:4f:2e:5f:e6:48:f0:3a:67:81:31:23:90:5e:56:
65:fa:34:44:5b:e7:58:39:16:7f:9c:23:49:4c:14:
ff:06:26:7a:b5:20:75:33:e5:e0:86:e2:e2:fb:00:
58:4b:e6:c3:96:c5:2f:25:84:86:08:8b:d4:64:15:
e8:a6:f7:16:26:d5:e6:73:50:0c:01:55:6f:a2:7e:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1E:C8:BA:C0:C2:CD:C4:04:BD:CD:14:B0:42:A5:03:E6:95:C1:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/98de2f51-be64-3eac-8b40-cb8635f6710f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:b1:73:6c:d6:d1:52:94:01:4b:ee:c3:a3:c9:c1:68:87:f8:
56:37:a7:58:77:8d:65:b6:34:0a:26:76:c2:5d:b4:1a:06:ab:
fc:88:f4:68:84:64:95:d6:e5:0b:d1:86:64:50:09:73:e7:07:
e4:22:bc:c8:cb:62:69:fd:50:d7:10:13:a7:b0:89:b9:0e:59:
ef:40:1c:b4:1d:fd:c6:db:e4:ac:f4:46:6f:57:f2:12:71:95:
a5:6a:49:9a:82:c7:3a:5b:c3:80:4b:47:5c:7c:6a:fb:9a:fc:
0c:58:63:4b:82:08:76:75:d7:a1:e9:a4:d9:e0:c7:30:98:0f:
d6:90:64:fb:61:01:84:e5:ed:97:4d:c6:d0:84:8e:68:36:b7:
c4:3f:56:bb:ec:9c:dd:71:0b:59:35:26:83:af:53:02:80:61:
f6:d0:52:d9:dd:3c:3d:6f:9c:14:ba:fc:86:e5:ef:14:be:1e:
37:91:41:f5:57:60:12:88:3a:ac:16:19:c7:09:b6:97:b4:59:
f9:a7:16:e6:13:e8:3b:5c:e0:4f:43:bb:93:86:2a:9c:c5:bf:
f6:8e:1d:fc:82:5c:38:56:f5:06:7a:7f:03:a2:51:84:10:81:
ea:5b:6c:1d:16:d0:76:28:a2:30:f2:05:2e:0e:34:f9:fd:41:
99:f1:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org