Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bcd8a745-5aef-3cdb-a864-3935fff10ad3.roa
File: bcd8a745-5aef-3cdb-a864-3935fff10ad3.roa (raw, json)
Hash identifier: ThiezYO+VOda5b/nREMcGXPC/RHP3kKkKTVcpnfqQig=
Subject key identifier: D9:9B:85:0B:67:F9:C0:F4:D7:EB:62:E4:FB:13:9E:46:B5:7A:20:45
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D99D5D7E8C140EDDC79621340
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bcd8a745-5aef-3cdb-a864-3935fff10ad3.roa
Signing time: Sun 17 Apr 2022 04:00:00 +0000
ROA not before: Sun 17 Apr 2022 04:00:00 +0000
ROA not after: Mon 17 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:99:d5:d7:e8:c1:40:ed:dc:79:62:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 17 04:00:00 2022 GMT
Not After : Apr 17 04:00:00 2023 GMT
Subject: CN=ee33df0a-8429-48b4-acfc-b40ff1eafea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:65:65:a4:47:52:55:52:18:7f:7b:33:40:
03:ba:79:7a:a5:08:8b:fc:f1:00:a5:1d:e1:6c:98:
4c:a7:0b:50:62:b5:c0:d4:c6:9b:38:25:61:68:d3:
23:89:11:bd:0d:95:3d:42:08:b4:27:82:d5:52:17:
d9:b8:cd:9e:b4:0a:b3:70:9f:85:a1:08:c4:54:d2:
f9:70:d5:f4:5d:43:1e:ec:6d:14:f2:85:75:49:db:
4c:97:5d:a7:a6:a3:04:39:7e:0b:05:f0:5a:f7:fa:
af:36:5e:0d:74:87:e3:e3:52:81:78:fb:86:e0:2d:
de:6e:df:55:8d:c5:18:47:54:b9:c3:a9:b6:63:ff:
48:b1:bd:0a:b7:f2:d2:ee:d2:a9:b2:4f:bb:52:44:
1f:21:06:af:87:fd:19:d1:34:5d:10:1a:84:f6:f1:
58:d1:e6:62:6e:61:64:c8:3d:4c:fe:ef:49:ee:f6:
94:7b:d4:8a:05:b3:5f:56:60:c5:8d:f6:4b:72:a0:
16:89:c0:6a:0b:01:28:bc:13:6c:af:5c:b2:1f:f3:
09:cc:63:d6:dd:97:53:a7:90:be:ec:bc:0f:5a:52:
e7:0d:d7:84:32:bd:98:05:a8:2c:83:e7:09:bb:5a:
24:1c:5c:60:64:9c:17:f7:48:3d:cf:78:f8:ac:ca:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:85:0B:67:F9:C0:F4:D7:EB:62:E4:FB:13:9E:46:B5:7A:20:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bcd8a745-5aef-3cdb-a864-3935fff10ad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:bb:23:07:e0:48:14:9a:f9:b4:73:09:1c:e9:e4:4d:ba:2f:
44:5d:e5:d4:7f:b2:10:a3:30:e3:8f:09:c5:f8:0b:5d:47:ee:
5a:f5:47:54:91:34:6e:29:94:a2:54:2c:23:04:63:28:7c:29:
c0:57:f5:bc:38:ba:19:12:12:a3:3d:f8:2e:33:70:aa:c9:f4:
8e:f0:a5:fb:b8:eb:69:f3:55:d9:59:b2:bd:5a:21:6e:c2:bf:
a9:ae:5e:be:3f:cb:f7:aa:5d:f3:c9:37:19:15:50:7f:73:51:
bf:c1:b6:f7:ca:4c:8f:dd:0d:0b:0b:59:1e:f4:4f:ff:0f:39:
a1:3f:1a:b3:f4:0f:98:5e:f2:64:2b:83:f2:dd:c8:cb:7b:ba:
38:d0:ff:39:56:de:a0:7a:57:6a:38:43:73:6c:03:9d:f0:50:
a8:a7:e8:c8:9d:91:eb:00:05:a3:19:5d:83:c8:7c:7b:ed:d6:
d2:bc:33:43:2d:61:48:a7:45:b5:57:0f:48:da:2b:48:12:2d:
4c:66:74:ee:4a:71:1f:75:fa:03:6e:60:a8:b4:74:81:d7:52:
37:c9:93:b6:19:10:e7:e3:0d:00:ee:52:71:05:ff:33:8a:28:
9f:d1:3f:5b:cb:79:3c:ef:82:da:25:40:bc:f8:74:15:b8:20:
ba:31:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:11 2025 by rpki-client