Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9c2f435a-15dc-3a4f-8193-f684cdc3c4d1.roa
File: 9c2f435a-15dc-3a4f-8193-f684cdc3c4d1.roa (raw, json)
Hash identifier: srOm5yn7VLkvckmvemxx5aYERGjGdr5+BKTsxIVvdKs=
Subject key identifier: 99:13:08:EC:01:01:B7:15:AB:11:0D:96:F3:6B:92:3D:82:69:81:BA
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F7F75915E0AEE3725238570A0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9c2f435a-15dc-3a4f-8193-f684cdc3c4d1.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sun 08 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7f:75:91:5e:0a:ee:37:25:23:85:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Oct 8 04:00:00 2023 GMT
Subject: CN=200ea770-ace3-4740-8659-5073a4cba0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:b3:85:67:dd:44:ab:bf:b8:8e:a5:0d:ab:
bf:cc:09:6f:ff:ae:9b:93:fe:cb:ad:1e:d9:8c:0d:
80:f2:eb:ac:bf:7e:70:29:a9:0a:c3:21:2e:92:9c:
49:e3:44:f3:99:9c:d5:4e:f4:4b:1f:fc:6d:37:03:
fd:a7:2c:1a:af:99:89:5f:4c:31:2e:63:4b:e2:f3:
c6:f0:33:00:f1:12:5c:9f:3e:da:76:1f:72:f3:0e:
b7:02:7b:40:45:7b:8c:19:ef:c0:d3:e6:41:b5:88:
a6:a2:db:86:79:52:e6:e9:86:d9:47:5b:4f:1f:d4:
17:1e:75:4c:93:f2:0d:39:87:00:32:99:ac:f0:4c:
46:2c:43:8f:10:10:02:2c:c6:75:99:cf:b0:9e:7c:
6b:c3:c0:1b:9c:f2:bd:53:e1:89:73:63:c5:e7:9a:
b1:82:18:87:c2:37:4c:27:4e:5f:0b:42:73:f4:67:
55:b0:7c:71:6a:7f:48:ab:74:af:33:2c:e3:fc:13:
22:49:df:03:8e:3d:61:7a:30:cc:1e:5b:12:d0:46:
ac:65:5c:c3:d8:18:7d:23:d6:dd:b4:b6:a1:e9:b2:
03:c7:3f:23:44:ef:fa:fe:a9:98:93:3f:7b:41:50:
ab:84:43:43:9d:2d:71:83:c1:c1:c7:e9:99:4a:18:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:08:EC:01:01:B7:15:AB:11:0D:96:F3:6B:92:3D:82:69:81:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9c2f435a-15dc-3a4f-8193-f684cdc3c4d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:89:7d:66:51:de:c3:7e:15:d0:6d:d1:cf:01:74:7e:7b:f8:
b2:08:cc:1c:b1:9d:4a:04:75:40:29:d4:42:1d:69:8a:04:5f:
b6:a6:8a:2f:22:a1:b0:b0:e2:4c:b3:9f:2d:56:15:9b:02:5a:
95:32:15:8f:86:f3:e9:f1:f6:a9:15:f7:67:45:ae:57:be:61:
cb:c6:99:2d:76:44:95:b6:ac:ce:c1:a8:fe:1f:73:83:2a:ab:
5a:76:76:8e:bc:66:5c:b3:e3:d8:b5:aa:63:1e:d6:5e:59:14:
5f:4a:75:c4:8e:d6:55:7f:b7:82:29:c4:68:2b:af:62:7a:ca:
d9:b8:ea:ff:92:3d:89:0b:9e:57:92:23:50:6e:38:83:ec:a6:
e6:d2:45:b5:2c:6c:20:ae:de:12:f6:f2:99:76:f8:67:9d:f3:
f9:aa:e0:3b:5a:0a:26:f9:bb:fd:33:84:ca:ee:6c:9a:b5:02:
dd:5d:5b:4d:d6:a7:6a:94:ae:1c:16:c8:fe:16:fd:4e:36:0b:
ee:eb:bd:20:98:af:7c:96:4a:47:46:f3:56:82:9a:db:6e:c4:
f5:f8:f7:b7:3b:7a:89:2a:fd:19:d8:03:79:c1:52:f6:e7:46:
38:29:3e:08:90:2e:66:9d:68:ab:49:d2:d7:71:4d:d8:3d:60:
42:e6:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:47 2025 by rpki-client