Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bd69da4e-79f5-34a1-8b79-3cd24b9eb49e.roa
File: bd69da4e-79f5-34a1-8b79-3cd24b9eb49e.roa (raw, json)
Hash identifier: mFVvCst6wRA5tnml7Kpr1vSWmlcDanMucNCogEvreZw=
Subject key identifier: 3F:CD:E6:BE:6B:90:E3:8C:55:1F:C5:72:B3:02:F7:D4:9D:2D:90:CD
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D3ADC2FA95D12F09FADD29680
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bd69da4e-79f5-34a1-8b79-3cd24b9eb49e.roa
Signing time: Mon 14 Mar 2022 04:00:00 +0000
ROA not before: Mon 14 Mar 2022 04:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3a:dc:2f:a9:5d:12:f0:9f:ad:d2:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 14 04:00:00 2022 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=0df9cf25-ccb1-47e2-b74d-90e91cdb9106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:e7:5c:fe:1c:34:f0:8a:81:1e:55:5b:a3:
fd:e0:6c:a5:08:88:3a:dd:6d:f3:f6:3e:37:e6:90:
37:07:7e:5d:61:b5:47:ee:22:76:19:75:f2:a2:84:
55:90:4b:42:d7:a2:90:d2:af:7c:6c:10:15:02:a7:
f9:7c:9f:60:0f:77:03:08:dd:d3:df:e2:cb:3e:98:
ab:43:48:8a:81:e4:8a:bd:78:1d:f5:04:68:ea:9e:
9a:7b:d8:b5:b9:fa:1a:bc:fc:75:ee:56:59:4e:f5:
d1:83:36:02:5d:10:bc:8b:3f:d5:e8:92:a3:aa:08:
bf:60:9a:e7:83:39:20:7b:0d:72:8f:2d:0a:45:4a:
11:47:12:1a:5e:44:cf:42:20:2a:9a:84:19:54:b9:
89:4a:80:98:99:c1:cc:c1:14:3d:02:62:6d:c0:32:
7e:5f:94:0c:3c:1e:ff:75:d6:d5:f5:49:19:b5:74:
53:b7:bf:c1:e2:34:06:83:9d:1f:e7:c8:7c:68:06:
79:ee:89:84:59:c8:a0:5b:4a:72:79:e5:ed:86:e9:
3d:83:5c:45:04:24:b5:f6:17:5e:dd:71:93:59:77:
5e:56:28:c5:f5:03:f1:de:7f:25:d6:3f:1c:d6:27:
3d:9a:aa:ba:84:9a:ed:6c:29:a0:6c:39:f1:77:c5:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:E6:BE:6B:90:E3:8C:55:1F:C5:72:B3:02:F7:D4:9D:2D:90:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bd69da4e-79f5-34a1-8b79-3cd24b9eb49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:c5:12:b0:f4:e0:eb:ce:63:2e:a0:c0:85:f4:ed:46:e0:9d:
0b:4a:cb:47:8a:ec:86:b8:3b:16:9d:2b:ef:ae:59:a5:be:a6:
ff:8f:43:43:c6:97:84:9f:14:6d:a9:b7:c3:0b:f1:1b:6e:e4:
b4:2e:86:d4:60:bb:ac:9b:97:af:2a:4d:e7:5e:bf:68:98:a0:
78:b4:9e:83:c1:19:d8:8a:1a:2d:59:60:a9:43:48:2d:55:1e:
6d:6a:59:6a:81:1f:3a:0b:03:a9:8a:56:5b:b9:a1:af:fa:39:
b4:c2:10:bc:77:aa:45:28:db:20:b8:55:71:9e:e2:bf:66:55:
b1:27:90:da:19:3c:a8:13:14:e4:a7:28:0a:de:33:02:2a:fc:
55:46:58:21:4a:6b:55:b7:81:0f:01:a0:4a:a3:2f:5f:c1:dd:
0b:29:18:c8:47:42:bd:20:79:17:1e:65:28:b6:f3:42:d9:b8:
3b:94:ed:ba:16:4c:68:5b:56:f3:6a:85:8a:8f:e5:13:d4:1c:
64:f3:7e:71:9a:8c:81:bc:38:15:8e:69:80:26:00:16:98:35:
fb:d7:ee:92:01:87:d6:8b:ea:b5:58:65:88:c2:6b:1c:07:6b:
6e:be:c2:30:10:87:79:ec:aa:a1:f9:a7:cb:90:46:f3:26:c8:
3b:9a:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org