Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b4b39cdd-f160-3a21-a5c7-dd5523c1245f.roa
File: b4b39cdd-f160-3a21-a5c7-dd5523c1245f.roa (raw, json)
Hash identifier: I9yuv+F9BSNlR72M6kHO0TL5yIWioFH/3FjojXrdL0s=
Subject key identifier: 1E:B6:F4:5B:15:7F:5C:F8:CB:8A:71:67:6A:9A:C1:E1:08:DD:1E:FB
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E763EC203EAE44AAFEA08B580
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b4b39cdd-f160-3a21-a5c7-dd5523c1245f.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Wed 05 Jul 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:76:3e:c2:03:ea:e4:4a:af:ea:08:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Jul 5 04:00:00 2023 GMT
Subject: CN=fa9a0fbf-65ee-4b26-8fc5-6044402d52ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:c1:bf:68:82:28:2d:d8:08:5a:b6:56:d2:
1c:e5:20:3f:d1:06:05:6a:09:ff:b6:30:4e:2b:19:
d1:87:b9:6c:29:55:1d:db:97:e7:50:7d:ac:b9:16:
b9:f4:8a:db:05:c3:fc:8e:25:2f:1b:79:cd:8c:52:
33:a8:0b:f9:c6:95:5a:6b:7d:a2:37:62:d9:18:1e:
9d:83:d6:e0:8b:38:e5:c2:c5:55:34:bb:e6:5a:4c:
a4:03:c3:b5:45:1c:0a:9d:6b:3a:ce:d2:44:21:fd:
5e:13:58:a9:c9:aa:fa:40:8e:0a:f9:1b:da:2a:6b:
1e:4e:8a:8b:1e:28:ad:eb:13:1f:6a:b4:84:cb:3f:
91:ea:cf:e7:52:08:bc:be:2f:98:91:2b:8d:c5:b2:
ea:59:4d:d3:09:e0:3a:f0:45:e7:b0:16:19:33:60:
f8:74:11:35:23:59:88:f6:62:46:fb:7a:69:66:03:
18:4a:53:70:b3:2b:75:7f:d7:dd:5c:e4:d6:f5:1e:
f3:2d:eb:21:f2:01:9c:f2:ab:93:24:2a:c3:cc:21:
b0:b2:e1:35:ed:56:6f:06:ee:f3:2d:c2:ae:1c:d4:
b1:34:88:0f:ef:80:b4:c3:43:9a:cf:70:4c:d3:57:
ef:35:12:c9:6d:f3:9e:4c:73:02:57:4b:0b:d4:56:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B6:F4:5B:15:7F:5C:F8:CB:8A:71:67:6A:9A:C1:E1:08:DD:1E:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b4b39cdd-f160-3a21-a5c7-dd5523c1245f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:ac:12:92:a1:3b:25:c8:d8:b5:46:96:d0:16:d1:6e:4b:6e:
f5:cc:9e:9c:ae:f8:cb:ca:13:7a:31:cf:4a:49:1f:4f:48:6c:
76:fa:77:b6:c4:01:16:df:d5:0e:d3:7b:4c:67:3d:a6:bc:e4:
df:65:44:d6:09:56:93:b6:f1:c9:0c:ea:a0:75:0d:da:2e:7a:
49:b3:aa:07:47:af:7c:ed:4c:38:0b:ad:83:d1:c0:ee:f0:12:
ec:6d:5b:fa:45:3a:40:6e:f8:cc:45:8c:88:53:d6:58:c4:c8:
95:a3:e3:34:7f:04:fd:5a:2a:d7:ac:a0:31:88:d3:d3:64:d7:
0c:4c:ed:51:41:02:ec:c4:9b:f6:a5:fd:dd:6c:62:ae:f5:19:
1d:3f:5c:b2:99:0a:20:07:dd:a0:26:26:fb:69:bf:a2:fd:07:
67:fb:ad:30:1a:81:b5:f2:22:1d:16:80:74:f1:02:e4:5e:83:
47:4d:f0:69:ac:24:bd:0f:69:60:22:cd:2b:28:04:29:39:43:
23:1d:98:56:23:7f:08:57:a6:f2:90:69:67:b9:b1:6f:0f:8c:
1e:88:dd:7d:b3:89:1a:e4:ae:47:a5:f1:75:af:91:16:92:86:
24:99:5e:39:01:cb:90:45:98:0d:af:89:15:bf:26:85:3b:a5:
14:cc:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org