Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a82ab6ea-8e91-3f20-891d-2d46abe3732b.roa
File: a82ab6ea-8e91-3f20-891d-2d46abe3732b.roa (raw, json)
Hash identifier: LiOzXvPYLQZhLfFRR6viAjWm08DG6FQcB3p+wknGLLQ=
Subject key identifier: B9:65:B1:CC:B5:04:01:39:A3:59:98:C1:C0:31:C9:40:DC:05:4A:6A
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F432858400B2EB668626282A46AF30F00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a82ab6ea-8e91-3f20-891d-2d46abe3732b.roa
Signing time: Sat 26 Nov 2022 12:00:00 +0000
ROA not before: Sat 26 Nov 2022 12:00:00 +0000
ROA not after: Mon 27 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0b:2e:b6:68:62:62:82:a4:6a:f3:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 26 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2023 GMT
Subject: CN=04539a5b-1066-4ca9-b5fb-337611b5ac5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:c5:08:2f:37:25:7a:e3:74:0f:de:fe:d3:
b1:d5:9b:66:b7:b6:40:ba:c9:a4:b9:fd:ea:fa:a8:
16:34:34:ae:58:2a:ef:52:bb:91:19:57:5a:26:9f:
4a:9e:35:44:2c:e7:13:51:ff:6e:39:f2:a8:06:37:
58:59:55:bf:e9:4f:37:64:9e:fd:35:32:25:fa:f9:
93:fb:07:81:ed:69:36:53:42:5f:f2:b2:65:58:4e:
22:b6:8c:2b:80:86:7c:cb:83:ad:fb:b2:2c:55:d2:
1f:77:64:03:92:db:5c:95:6e:54:90:00:db:f0:0c:
27:08:e2:18:1e:a1:5c:85:90:ad:d6:44:5a:41:e1:
47:87:3a:e9:e6:e5:b9:e4:d6:b1:64:7a:9b:17:57:
93:99:84:ad:ce:11:fd:76:55:74:a7:63:01:5c:85:
d2:5d:d3:6d:2b:fe:97:5f:04:82:b3:df:f2:75:11:
8a:e3:69:08:7a:87:3a:13:fb:f6:ad:3a:e6:ee:e7:
dc:e2:3c:4d:3c:da:79:32:51:b9:1b:70:27:d4:67:
d9:94:58:09:60:63:30:0c:c0:52:77:96:1e:04:5a:
37:18:f3:ae:41:ed:08:fb:9c:80:a6:61:9d:b9:07:
39:df:ba:8b:a7:87:18:53:49:c1:0b:be:88:b1:4b:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:65:B1:CC:B5:04:01:39:A3:59:98:C1:C0:31:C9:40:DC:05:4A:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/a82ab6ea-8e91-3f20-891d-2d46abe3732b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:13:06:b6:c9:a1:ed:f0:66:2f:4c:58:ac:e7:42:31:d2:6c:
9c:03:c9:49:cd:59:80:12:83:cf:bb:66:9c:34:b0:e4:75:05:
87:c4:5a:0b:ca:6f:33:11:63:01:ef:72:9d:1b:af:d6:5d:e9:
2f:36:a4:48:45:f6:ff:50:8a:91:b8:0c:ad:56:ae:1f:50:24:
b4:62:70:21:24:74:03:96:ff:af:cc:9c:4f:bf:af:a6:d0:06:
25:18:1e:4b:2f:6e:01:76:b4:e5:57:2a:ea:db:19:76:b2:00:
ce:90:3c:eb:f9:46:be:36:38:3c:aa:e2:30:61:33:51:37:10:
3b:a5:49:3e:87:ff:1a:ee:f5:e0:28:af:25:50:00:47:33:d3:
4c:13:94:28:ae:50:f6:33:45:d8:9c:4f:63:d4:35:94:ed:8e:
56:42:82:96:d4:d7:48:f7:f7:fd:f1:4a:48:03:c2:6b:d0:e6:
77:de:4a:d2:0f:08:ff:1d:61:f6:e8:ec:68:05:10:b0:1d:6a:
c3:da:32:2a:e5:44:07:c6:e8:e0:04:84:d3:ea:2e:c4:10:87:
dd:e9:f5:81:ee:c2:b0:03:60:25:a2:88:43:38:01:78:87:90:
e2:b5:3b:d1:70:1c:cf:f7:6b:d9:fb:d0:f8:2e:74:07:d6:f9:
82:75:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org