Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b3ebf2bb-89c4-3ee6-87a7-f6b003ad3efd.roa
File: b3ebf2bb-89c4-3ee6-87a7-f6b003ad3efd.roa (raw, json)
Hash identifier: CL2x3qWh+bLGxiPbkTJsNiu67VoK9wrmg6e69GxqsPI=
Subject key identifier: 27:AE:3F:07:93:AB:94:C1:6F:E5:B4:58:35:F4:3A:36:9A:42:68:FE
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F1A895CBB5DFFA4ECA2C0EE00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b3ebf2bb-89c4-3ee6-87a7-f6b003ad3efd.roa
Signing time: Thu 01 Sep 2022 12:00:00 +0000
ROA not before: Thu 01 Sep 2022 12:00:00 +0000
ROA not after: Sat 02 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:1a:89:5c:bb:5d:ff:a4:ec:a2:c0:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 1 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2023 GMT
Subject: CN=47a62bdb-2b06-4d2a-9477-103a48577948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:0f:82:78:ba:24:d8:8e:d5:db:85:7d:c5:
69:58:63:73:10:6e:8d:11:6f:c2:6f:51:0f:cd:8e:
67:0d:38:a9:01:05:ad:6a:47:e3:89:90:98:ba:e9:
38:cc:98:94:6f:41:af:61:0e:1e:21:a9:4c:91:39:
01:68:40:bd:a5:17:64:fb:9c:35:86:02:2d:c6:e3:
d9:e6:cd:bb:51:b4:2b:5f:83:c6:e6:34:c2:ff:de:
d9:36:e6:6b:e0:69:22:fc:a1:8a:fa:d6:b8:5a:99:
e0:88:e2:f6:2a:ce:e7:26:ba:57:e7:63:71:54:d5:
a6:d6:1d:20:99:4f:81:fc:75:5f:a4:be:f5:f7:b3:
35:06:a0:d0:38:14:36:5c:2e:8e:b3:31:4d:2b:95:
16:65:1c:10:96:6e:d5:de:3f:1d:0d:d4:50:ff:d6:
7f:e6:13:60:bb:ea:8a:1e:3e:b3:2e:bf:78:80:d9:
7d:0b:60:c1:e4:c8:67:3f:72:cb:b8:64:f5:ad:7a:
38:27:85:fd:07:b3:e0:6e:35:a9:f1:1b:e2:0c:7a:
68:bc:b0:b0:7b:8f:3f:1a:b4:89:86:97:c3:a4:ae:
79:ae:00:8a:6a:c7:5a:6c:ba:af:0c:22:12:9f:b2:
8a:78:b7:5a:e5:ef:ec:c0:42:ca:6b:df:71:55:0d:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:3F:07:93:AB:94:C1:6F:E5:B4:58:35:F4:3A:36:9A:42:68:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b3ebf2bb-89c4-3ee6-87a7-f6b003ad3efd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:1f:f5:3c:36:ac:a6:52:a4:53:20:b7:d5:aa:4a:48:2a:91:
f8:97:c6:76:52:ab:03:7f:e3:3b:6d:01:f4:87:dc:f9:ba:8b:
81:c8:0c:8e:60:2c:d0:6c:14:4f:43:e6:7d:25:b7:62:85:1b:
a2:ed:16:45:c4:67:7e:21:11:7f:19:27:41:76:38:dd:b0:fb:
80:eb:3d:36:2f:14:38:85:b0:fb:81:f9:fc:cc:82:1e:26:53:
0e:01:9e:9b:21:df:2f:09:5a:8b:c3:7e:44:5a:eb:43:8f:4c:
a7:83:b6:66:11:90:45:e3:9e:c2:9d:97:6d:60:53:2d:51:a7:
78:cb:e6:57:3e:41:e9:f5:a9:98:79:b9:88:2e:0b:38:f4:f9:
67:75:34:e1:94:fb:50:c8:39:73:f2:d0:1b:12:f2:d6:b7:94:
91:2d:94:ae:ea:f3:f7:05:5c:0f:10:d1:63:fb:12:08:85:c0:
1e:53:84:84:f5:b9:f2:9c:0a:95:bc:2d:b6:5e:d7:2c:2e:c9:
03:9d:f2:d1:82:aa:73:6f:ab:11:b9:14:a7:13:57:36:81:12:
8b:17:fd:13:1d:b1:91:13:b4:86:36:57:d4:94:39:d1:5d:c9:
6d:67:8b:92:c0:4b:c6:dd:df:9f:96:d8:fe:37:b0:c6:cc:19:
b0:93:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org