Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdb68177-b04e-3a22-9b85-6a09b3b92760.roa
File: bdb68177-b04e-3a22-9b85-6a09b3b92760.roa (raw, json)
Hash identifier: +kpPZeNqrLcQ6bljuXWf5o1bvWUx6L+YVqBkrrOhddQ=
Subject key identifier: 7A:1F:6E:69:D8:2E:78:14:D0:C4:B7:A5:45:28:BD:19:F0:7B:DD:A7
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583E2AD0567A35E5240C96B64200
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdb68177-b04e-3a22-9b85-6a09b3b92760.roa
Signing time: Tue 07 Jun 2022 12:00:00 +0000
ROA not before: Tue 07 Jun 2022 12:00:00 +0000
ROA not after: Thu 08 Jun 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:2a:d0:56:7a:35:e5:24:0c:96:b6:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Jun 7 12:00:00 2022 GMT
Not After : Jun 8 04:00:00 2023 GMT
Subject: CN=fefc1588-eb37-4171-baf8-ef71b84c23a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:eb:41:4a:b2:a8:63:7d:e3:77:62:49:dd:
e9:09:11:0f:9f:74:2c:6a:cf:11:29:ad:e3:4c:0e:
62:c4:3b:33:7b:a2:86:71:8c:ea:62:e5:d2:18:af:
98:06:c7:cd:04:a2:d1:58:1c:93:53:f5:b5:56:08:
ca:8a:2a:0c:b3:3a:ae:29:e8:d9:99:3e:b4:f0:37:
e2:8a:32:cf:d3:df:08:9d:57:7d:c9:11:d1:3d:5f:
cd:2b:c2:43:6f:80:d4:45:88:52:7d:03:9e:74:b1:
15:08:94:ac:b0:f2:96:b7:17:47:23:95:8b:08:37:
77:27:d7:f2:79:23:46:6b:0b:61:ec:0c:28:fb:03:
f6:47:87:68:c5:17:14:7c:1a:0a:6a:21:17:d4:d6:
ca:ab:9c:39:ee:83:8c:bf:0d:39:b3:5b:c8:93:62:
f5:cf:1d:37:3e:2b:3a:c3:52:47:ee:b1:22:12:11:
b1:ba:73:45:dd:98:27:b8:99:44:73:f5:d1:5f:f5:
09:91:cd:d9:42:0d:47:cc:15:29:d1:46:11:d8:77:
0c:f0:ef:6d:20:40:93:fb:18:be:70:f7:59:04:3d:
f0:7f:3d:29:93:67:54:c4:a1:7e:89:8f:24:b5:2d:
e4:52:25:6c:ff:28:fa:c4:d9:8e:26:9b:f1:33:95:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:6E:69:D8:2E:78:14:D0:C4:B7:A5:45:28:BD:19:F0:7B:DD:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdb68177-b04e-3a22-9b85-6a09b3b92760.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:61:46:90:85:09:c4:21:98:9b:5e:fc:55:09:06:77:20:0e:
9a:0b:30:46:b3:1e:c1:fe:33:ab:ed:46:eb:00:72:d9:44:42:
8c:05:d5:b0:fa:0a:9a:44:02:bf:5d:d1:30:2f:39:1c:97:8d:
d4:b9:62:45:38:77:ef:55:f9:5d:ba:a7:62:3b:a9:22:55:81:
9d:3b:61:73:b9:48:97:5b:f8:ec:0f:f1:e4:28:8f:a4:53:42:
36:93:b3:4c:c8:95:22:3e:ab:59:b3:fb:17:d0:c9:c3:5e:78:
39:2c:4a:3f:2a:48:c7:0e:8e:44:ac:55:71:33:f0:2a:46:50:
be:b0:23:01:04:2e:3b:07:41:f9:a4:e3:e5:24:74:c9:d4:cf:
8e:43:d3:50:47:59:15:17:32:f9:fc:33:76:d2:45:cd:e2:00:
f0:cf:96:44:e7:3f:07:53:92:83:4b:d1:93:a3:35:67:37:60:
1c:26:1a:6a:24:96:43:12:e1:e9:87:f9:e1:93:82:06:d9:2f:
9f:20:eb:ba:29:29:be:f3:5d:4e:92:45:4e:4e:d0:85:16:e5:
6b:09:f2:36:cc:76:6d:5f:f8:c8:b9:31:2e:c6:b3:f4:63:19:
59:68:6d:85:99:de:a7:3b:1f:35:96:c1:2e:24:82:5f:ae:63:
97:c0:48:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD4q0FZ6NeUkDJa2QgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDYwNzEyMDAwMFoXDTIzMDYwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZmVmYzE1ODgtZWIzNy00MTcxLWJhZjgtZWY3MWI4NGMyM2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihvrQUqyqGN943diSd3pCREPn3Qsas8RKa3j
TA5ixDsze6KGcYzqYuXSGK+YBsfNBKLRWByTU/W1VgjKiioMszquKejZmT608Dfi
ijLP098InVd9yRHRPV/NK8JDb4DURYhSfQOedLEVCJSssPKWtxdHI5WLCDd3J9fy
eSNGawth7Awo+wP2R4doxRcUfBoKaiEX1NbKq5w57oOMvw05s1vIk2L1zx03Pis6
w1JH7rEiEhGxunNF3ZgnuJlEc/XRX/UJkc3ZQg1HzBUp0UYR2HcM8O9tIECT+xi+
cPdZBD3wfz0pk2dUxKF+iY8ktS3kUiVs/yj6xNmOJpvxM5UE6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHofbmnYLngU0MS3pUUovRnwe92nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvYmRiNjgxNzctYjA0ZS0z
YTIyLTliODUtNmEwOWIzYjkyNzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFFhRpCFCcQhmJte/FUJBncgDpoLMEazHsH+M6vtRusActlEQowF
1bD6CppEAr9d0TAvORyXjdS5YkU4d+9V+V26p2I7qSJVgZ07YXO5SJdb+OwP8eQo
j6RTQjaTs0zIlSI+q1mz+xfQycNeeDksSj8qSMcOjkSsVXEz8CpGUL6wIwEELjsH
Qfmk4+UkdMnUz45D01BHWRUXMvn8M3bSRc3iAPDPlkTnPwdTkoNL0ZOjNWc3YBwm
GmoklkMS4emH+eGTggbZL58g67opKb7zXU6SRU5O0IUW5WsJ8jbMdm1f+Mi5MS7G
s/RjGVlobYWZ3qc7HzWWwS4kgl+uY5fASAM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org