Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a42c74b1-e64e-3fd8-ab67-1c0e786494ac.roa
File: a42c74b1-e64e-3fd8-ab67-1c0e786494ac.roa (raw, json)
Hash identifier: TFPxpD0O6s6Y8gzs5fa9b5odi0bZaqM9E7F3z/VupMQ=
Subject key identifier: 00:77:97:A2:68:1A:12:B1:B9:D0:6B:19:D3:1E:DF:49:B0:9C:38:B9
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583EF6B1681260074E09CCD69980
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a42c74b1-e64e-3fd8-ab67-1c0e786494ac.roa
Signing time: Fri 19 Aug 2022 12:00:00 +0000
ROA not before: Fri 19 Aug 2022 12:00:00 +0000
ROA not after: Sun 20 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:f6:b1:68:12:60:07:4e:09:cc:d6:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 19 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2023 GMT
Subject: CN=4dc371bb-5540-4f79-a825-dd16ffa2c2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:01:59:81:2d:f4:0a:da:d4:6a:d0:63:1a:8a:
02:94:68:31:6f:ff:21:ad:10:f2:ac:30:7a:b3:54:
55:59:ff:05:5b:0e:fa:30:66:e0:f1:12:4b:0b:d3:
83:7a:56:7c:c3:40:65:3d:06:c7:76:c3:26:8a:54:
af:fd:35:ae:77:35:62:61:63:54:62:de:87:86:82:
fd:15:9c:77:54:4d:a3:a5:e4:be:49:1a:d6:0b:8d:
e5:d6:cf:82:1b:22:7c:0a:5e:41:4c:ab:ac:c7:bf:
0f:a4:55:59:85:b7:a2:50:e4:7f:d2:77:24:a9:8f:
95:a7:49:00:07:ad:6c:05:00:16:65:f5:2f:cd:ce:
3a:fc:78:06:f0:b1:27:a7:8d:46:27:bb:7d:a0:5c:
88:92:da:15:4d:df:92:50:d3:0f:41:2d:59:a0:79:
bc:25:52:c4:9e:2b:4b:84:6d:b9:06:f8:26:77:bb:
04:e6:b4:82:eb:91:df:c2:ad:00:f9:78:78:06:ca:
f0:4a:be:e9:89:ba:94:6b:a1:c9:d4:90:20:b9:55:
6b:78:23:8c:9f:09:0d:29:d5:c6:5a:44:41:a2:3c:
7f:2a:20:74:70:80:e4:c9:b7:bf:ef:a5:84:67:64:
34:e5:7a:5e:7f:54:96:66:5b:5c:ef:a5:1c:a5:d9:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:97:A2:68:1A:12:B1:B9:D0:6B:19:D3:1E:DF:49:B0:9C:38:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a42c74b1-e64e-3fd8-ab67-1c0e786494ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:93:71:9d:7e:ff:6a:2c:63:45:4e:50:34:54:34:ac:e6:0d:
60:08:e7:99:36:51:3d:c9:d9:f6:11:9f:4c:85:9e:98:85:c5:
e7:be:12:ae:cb:53:b7:fe:9b:f5:b2:f2:61:ec:82:c8:fe:38:
55:d8:22:db:fb:0c:a5:4c:19:60:39:45:b9:f6:60:bc:16:bc:
63:ad:fb:32:10:30:40:1e:99:8f:44:58:08:56:9e:5b:82:f3:
c0:0f:8c:e3:13:ee:b3:da:52:cf:fc:5c:ba:3c:a2:61:94:49:
9d:c9:65:95:ae:00:23:62:b6:70:09:e5:2e:46:83:57:e7:4a:
66:2b:31:0c:16:cf:09:30:6e:82:d6:26:5b:7a:ee:90:ce:ea:
a3:15:37:ae:cf:1d:af:f9:19:ae:0e:81:93:90:ff:f6:7a:24:
64:a0:86:f3:0a:5c:3b:ec:00:8a:ae:06:71:3e:da:60:06:db:
f9:fa:62:1a:83:4c:33:c9:0d:93:df:f0:7d:28:7b:e8:6e:a2:
9e:a8:32:03:3f:95:c8:cb:e4:e6:44:61:a9:6b:28:4b:54:20:
ab:0b:eb:03:18:b1:fb:c2:97:a6:c5:49:11:5a:45:67:6d:30:
ca:cc:da:34:a5:ff:6a:3b:cf:88:ed:52:60:d8:d7:70:80:e7:
84:37:05:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD72sWgSYAdOCczWmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDgxOTEyMDAwMFoXDTIzMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
NGRjMzcxYmItNTU0MC00Zjc5LWE4MjUtZGQxNmZmYTJjMmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQFZgS30CtrUatBjGooClGgxb/8hrRDyrDB6
s1RVWf8FWw76MGbg8RJLC9ODelZ8w0BlPQbHdsMmilSv/TWudzViYWNUYt6HhoL9
FZx3VE2jpeS+SRrWC43l1s+CGyJ8Cl5BTKusx78PpFVZhbeiUOR/0nckqY+Vp0kA
B61sBQAWZfUvzc46/HgG8LEnp41GJ7t9oFyIktoVTd+SUNMPQS1ZoHm8JVLEnitL
hG25Bvgmd7sE5rSC65Hfwq0A+Xh4BsrwSr7pibqUa6HJ1JAguVVreCOMnwkNKdXG
WkRBojx/KiB0cIDkybe/76WEZ2Q05Xpef1SWZltc76UcpdkeRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAB3l6JoGhKxudBrGdMe30mwnDi5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvYTQyYzc0YjEtZTY0ZS0z
ZmQ4LWFiNjctMWMwZTc4NjQ5NGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADSTcZ1+/2osY0VOUDRUNKzmDWAI55k2UT3J2fYRn0yFnpiFxee+
Eq7LU7f+m/Wy8mHsgsj+OFXYItv7DKVMGWA5Rbn2YLwWvGOt+zIQMEAemY9EWAhW
nluC88APjOMT7rPaUs/8XLo8omGUSZ3JZZWuACNitnAJ5S5Gg1fnSmYrMQwWzwkw
boLWJlt67pDO6qMVN67PHa/5Ga4OgZOQ//Z6JGSghvMKXDvsAIquBnE+2mAG2/n6
YhqDTDPJDZPf8H0oe+huop6oMgM/lcjL5OZEYalrKEtUIKsL6wMYsfvCl6bFSRFa
RWdtMMrM2jSl/2o7z4jtUmDY13CA54Q3Beo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org