Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9a9996a4-6841-3fa8-bd34-ef1566b163d4.roa
File: 9a9996a4-6841-3fa8-bd34-ef1566b163d4.roa (raw, json)
Hash identifier: 8HPoo7yIcUCm4IubpZh4+aV71z9HzqXzrCxfF/WM6QA=
Subject key identifier: 79:5C:49:18:37:34:7D:D8:A0:59:DA:34:A2:85:FD:90:76:5A:5C:2F
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FC54811E79A638D3A3FC72040
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9a9996a4-6841-3fa8-bd34-ef1566b163d4.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Thu 02 Nov 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:48:11:e7:9a:63:8d:3a:3f:c7:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Nov 2 04:00:00 2023 GMT
Subject: CN=bc70ce6f-9c03-49a8-8ef3-35b32083f249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:a7:0d:c3:77:18:66:46:7c:a5:f9:36:a3:
f6:42:ac:23:17:c4:c7:56:02:57:69:f2:a4:c2:85:
72:0b:6f:c9:29:9f:f9:39:ee:82:44:63:89:16:a9:
c6:e6:2c:e1:94:0b:93:39:bc:d0:e7:20:05:55:11:
2f:5d:57:d5:03:1b:86:63:91:4f:97:32:2e:70:1c:
c1:36:c0:56:89:d1:36:19:5f:6f:13:c1:17:e5:72:
07:5b:5a:33:51:4a:68:cb:96:d1:9e:55:d1:d9:bc:
90:70:0b:b8:4c:fd:d5:35:ed:f3:80:34:96:03:1b:
30:8e:fd:17:75:1e:e7:04:88:9e:51:0e:28:c1:d2:
42:7f:1e:51:31:39:e4:2e:49:1e:ea:bd:a5:58:72:
17:06:ae:c6:ff:2e:23:2c:e0:96:0f:43:32:e7:4c:
ff:9d:d0:52:39:85:8b:86:15:f9:0c:e8:2f:e6:27:
95:b1:68:2d:51:14:99:8a:13:63:99:e8:cd:74:11:
46:a4:41:04:49:3e:73:48:f6:42:08:6a:0a:80:5a:
b9:64:94:c2:38:b7:14:cf:ba:72:e0:1e:da:e4:9e:
4b:2b:97:b3:67:67:66:89:14:21:07:7b:98:49:cf:
7f:cc:e4:26:a6:16:40:d7:4d:16:72:38:9d:aa:97:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:49:18:37:34:7D:D8:A0:59:DA:34:A2:85:FD:90:76:5A:5C:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9a9996a4-6841-3fa8-bd34-ef1566b163d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a1:c5:f7:f9:2a:d1:54:22:53:8c:3d:32:85:29:fa:d9:1a:
93:86:27:c1:41:39:f9:cc:56:74:1f:35:0c:4f:82:5e:64:2d:
a0:6c:9c:d8:b0:9b:da:e2:50:42:1f:26:bf:7e:d1:da:fd:a2:
2c:83:d0:eb:de:c4:73:2d:5a:f7:43:31:8f:00:92:aa:12:32:
82:6c:56:2e:83:03:a1:3e:65:c7:85:de:55:2f:82:e6:56:62:
2c:8a:82:59:5d:76:62:3e:91:02:57:c3:fd:4e:59:54:78:48:
bd:d0:2e:e5:d9:1a:64:dc:a7:b4:d2:03:ed:26:4d:5e:85:d5:
52:aa:58:2f:a7:5f:05:79:79:41:b9:02:0e:8b:49:26:2b:23:
7d:15:a0:b9:e8:3d:0e:43:89:50:c4:88:d6:35:fa:a6:d6:69:
23:16:79:aa:c5:f6:69:47:4b:50:c0:88:e7:01:47:2a:df:a3:
31:d4:d0:aa:2d:2e:4f:44:e4:b4:83:79:a0:a1:48:bb:59:e0:
16:8a:7d:c1:e0:0e:64:2e:12:92:76:6f:c7:02:a7:6a:a8:f0:
ae:ab:f2:72:0a:14:e7:e0:5f:94:0e:52:29:4e:0d:05:95:db:
d4:98:0f:2b:8e:94:da:61:58:38:05:48:bd:43:8e:d9:08:b6:
67:2c:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org