Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b4a7ea1e-64e0-3f08-8fb8-e3906963a342.roa
File: b4a7ea1e-64e0-3f08-8fb8-e3906963a342.roa (raw, json)
Hash identifier: 1OC/SL81aIUJJ55zvPlGFWVcunjhnMj51DRBE9bUaQw=
Subject key identifier: F3:D0:2A:69:B4:CB:C1:63:C0:12:08:C0:8C:C4:00:15:9A:76:08:1D
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F3984D5F5443B157A5DC93540
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b4a7ea1e-64e0-3f08-8fb8-e3906963a342.roa
Signing time: Mon 12 Sep 2022 12:00:00 +0000
ROA not before: Mon 12 Sep 2022 12:00:00 +0000
ROA not after: Wed 13 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:39:84:d5:f5:44:3b:15:7a:5d:c9:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 12 12:00:00 2022 GMT
Not After : Sep 13 04:00:00 2023 GMT
Subject: CN=2e63e52c-a838-41e0-a285-c70c9a0a915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:f6:90:97:ac:7b:d2:f1:55:f5:c1:31:69:
1c:ce:95:70:19:f5:26:a6:a8:d7:35:5f:c6:6f:ae:
65:5f:91:10:cc:3d:32:1e:74:03:c1:aa:42:bf:f7:
11:e3:02:fa:22:8c:06:e4:f4:79:d3:67:9c:8e:fb:
ab:c2:02:20:6c:d0:1f:96:87:a6:47:db:e4:7d:26:
ae:ff:e9:a0:50:6d:e1:66:41:ea:fb:46:d4:c2:58:
cd:df:bc:94:ac:a1:7b:16:b6:a0:cf:70:4a:1d:6e:
52:39:11:c7:19:63:d9:97:39:51:87:49:02:9f:5f:
92:28:be:06:a6:6f:a4:3c:3f:d6:e1:42:9c:d3:de:
da:56:8f:f8:19:b4:d0:99:f1:23:03:71:e7:d7:b5:
72:c4:53:f3:f6:48:e1:ce:90:4f:13:18:ec:8f:59:
15:86:d6:67:23:5b:28:8e:53:ee:1c:b5:80:c1:73:
d4:31:be:5b:eb:37:5a:23:01:5f:86:1f:3a:33:10:
d0:40:20:e2:c2:86:a5:46:e1:da:cd:dc:01:97:5c:
82:0a:72:4a:fe:28:c8:ec:d1:02:ab:03:8f:b4:90:
21:c9:76:e8:96:06:86:b8:10:3e:16:b6:57:6e:ea:
7c:3c:34:06:57:c9:72:cc:ca:b1:86:f9:41:40:59:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:2A:69:B4:CB:C1:63:C0:12:08:C0:8C:C4:00:15:9A:76:08:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b4a7ea1e-64e0-3f08-8fb8-e3906963a342.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ce:43:32:e3:60:82:e8:f1:db:61:b0:01:a2:4d:63:ed:5a:
40:5d:06:ca:7c:ef:53:05:1f:bb:60:52:87:bb:68:89:a9:c2:
a0:d7:72:f3:93:84:fc:ec:1e:80:9f:ff:cf:55:5d:8c:16:0e:
f4:cc:b9:94:c5:20:9a:08:eb:cb:f3:30:43:33:88:5c:a4:16:
6e:ca:c3:b1:30:64:b3:c9:f0:22:4e:7a:ca:56:c9:04:6b:a3:
07:c1:1c:9f:6f:51:4d:7a:0e:7f:8b:70:63:f0:69:ad:1d:ab:
99:f0:8d:33:9d:80:10:3c:53:a8:a3:91:05:3a:9b:a0:d5:69:
63:fc:f6:4e:19:38:c2:c5:1a:c9:88:55:32:5f:aa:d1:fa:0b:
05:2c:58:05:da:cd:c4:64:08:53:6e:8d:4b:f1:0b:93:75:d0:
78:80:ec:94:51:af:6c:d8:7e:eb:cb:7b:3d:12:bf:66:14:c8:
ea:66:16:99:86:fc:d1:ff:00:4e:65:ef:7a:d7:76:ca:95:82:
ef:af:43:71:3e:0f:f9:1b:69:a9:f9:c5:8a:03:7f:cd:69:f5:
d2:78:e6:0b:71:f8:18:f0:bc:c8:e9:9c:f4:4d:21:d9:9e:c5:
74:78:e3:19:22:26:a4:e9:94:2c:78:b1:08:ae:c6:63:25:f3:
01:13:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org