Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdea9d2d-f0d2-36b2-8f48-241ec752ba92.roa
File: bdea9d2d-f0d2-36b2-8f48-241ec752ba92.roa (raw, json)
Hash identifier: GGs0wl3xOO5Y6ZefcLTuy86m8fjXbiIb+2X6SDfCJv4=
Subject key identifier: 52:C5:7F:69:15:F5:A8:50:7D:7D:46:18:A7:01:37:D9:23:7F:65:45
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F12880CA77A762824D458C9B0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdea9d2d-f0d2-36b2-8f48-241ec752ba92.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Wed 30 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:12:88:0c:a7:7a:76:28:24:d4:58:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Aug 30 04:00:00 2023 GMT
Subject: CN=33fe9d1a-d1e3-4207-b809-54f4cbae982a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:9c:85:55:6d:a2:95:39:36:23:59:f3:58:
e2:a3:83:48:40:f4:bf:8a:1c:ea:91:df:8b:b9:29:
f8:07:10:98:e8:ed:52:b7:fd:d7:a9:1f:4e:49:e2:
ad:4c:7b:88:28:6d:7e:fb:b0:97:a4:f8:b9:92:51:
da:76:48:fb:4f:bd:4a:56:4e:e0:36:57:ec:25:f7:
07:e8:c3:0a:3e:03:f4:02:ae:b3:65:b9:e7:dc:31:
a4:79:13:f9:c7:24:9e:ce:d2:7a:a7:ae:6e:42:cf:
45:14:c3:28:9e:c6:b3:14:3a:aa:66:3f:f1:23:80:
20:32:65:05:03:28:62:ff:2c:4c:10:5c:00:23:c8:
05:67:35:59:76:ad:7b:70:ac:12:24:db:c6:9d:0a:
e0:3d:c0:d4:a7:ef:96:20:22:0d:19:a8:66:d1:74:
47:18:bd:7f:b0:ba:e9:b5:0c:72:f0:0a:1a:21:02:
2d:36:f3:9b:38:70:02:97:ee:25:33:cb:3d:29:67:
f4:f0:b2:ec:fe:f2:47:24:69:da:66:49:c0:41:5a:
f8:ad:66:66:8a:02:80:65:74:ad:8f:42:71:45:d5:
d8:6f:cf:3b:0e:15:80:eb:a1:e1:a1:bd:c5:78:df:
9b:5c:63:a7:a6:ee:b2:2b:c6:4a:85:65:96:38:9f:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C5:7F:69:15:F5:A8:50:7D:7D:46:18:A7:01:37:D9:23:7F:65:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdea9d2d-f0d2-36b2-8f48-241ec752ba92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ff:36:a6:da:c4:92:55:ea:53:b9:ad:e8:ab:94:45:8c:91:
5b:65:6a:7b:97:58:e4:68:91:cc:0c:32:d0:d9:37:0b:7d:35:
5f:7c:ae:d1:a1:ca:5f:5c:5e:a7:d4:03:4d:05:11:e7:50:b6:
d5:fc:2a:55:96:4d:01:be:d1:3e:45:07:97:06:60:cf:01:57:
8c:52:8c:ea:ef:fb:99:7f:05:d5:d0:79:2c:0e:5f:4e:09:ec:
1c:a2:c2:13:d6:e9:b9:b1:3e:dd:ec:2e:a6:dd:c4:90:f9:49:
1a:6d:2e:00:57:5d:9e:ee:56:0a:5c:c6:92:77:a5:39:b9:83:
e6:06:ec:2d:75:bd:f8:ed:cb:b5:0a:98:73:72:b0:d2:b0:75:
f1:2d:c1:f6:aa:ab:1c:55:22:63:5f:10:5a:39:d2:46:46:f3:
e2:19:77:39:96:fa:e0:37:3b:c8:19:3c:55:00:57:9e:9d:d7:
8e:21:ad:5b:8d:d1:78:3f:34:e7:a5:9a:da:62:90:2f:15:75:
bd:6b:2e:fb:9c:5a:b0:63:44:46:50:87:df:ed:c1:31:15:fb:
6f:d6:ad:ec:39:e0:49:be:d2:d2:57:cb:68:2f:fa:ec:8f:01:
99:54:f1:a8:c5:34:61:20:d0:26:14:16:58:31:00:e0:64:2a:
fc:3d:e0:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD8SiAynenYoJNRYybAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDgyOTEyMDAwMFoXDTIzMDgzMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzNmZTlkMWEtZDFlMy00MjA3LWI4MDktNTRmNGNiYWU5ODJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI6chVVtopU5NiNZ81jio4NIQPS/ihzqkd+L
uSn4BxCY6O1St/3XqR9OSeKtTHuIKG1++7CXpPi5klHadkj7T71KVk7gNlfsJfcH
6MMKPgP0Aq6zZbnn3DGkeRP5xySeztJ6p65uQs9FFMMonsazFDqqZj/xI4AgMmUF
Ayhi/yxMEFwAI8gFZzVZdq17cKwSJNvGnQrgPcDUp++WICINGahm0XRHGL1/sLrp
tQxy8AoaIQItNvObOHACl+4lM8s9KWf08LLs/vJHJGnaZknAQVr4rWZmigKAZXSt
j0JxRdXYb887DhWA66Hhob3FeN+bXGOnpu6yK8ZKhWWWOJ+h+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFLFf2kV9ahQfX1GGKcBN9kjf2VFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvYmRlYTlkMmQtZjBkMi0z
NmIyLThmNDgtMjQxZWM3NTJiYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADv/NqbaxJJV6lO5reirlEWMkVtlanuXWORokcwMMtDZNwt9NV98
rtGhyl9cXqfUA00FEedQttX8KlWWTQG+0T5FB5cGYM8BV4xSjOrv+5l/BdXQeSwO
X04J7ByiwhPW6bmxPt3sLqbdxJD5SRptLgBXXZ7uVgpcxpJ3pTm5g+YG7C11vfjt
y7UKmHNysNKwdfEtwfaqqxxVImNfEFo50kZG8+IZdzmW+uA3O8gZPFUAV56d144h
rVuN0Xg/NOelmtpikC8Vdb1rLvucWrBjREZQh9/twTEV+2/Wrew54Em+0tJXy2gv
+uyPAZlU8ajFNGEg0CYUFlgxAOBkKvw94Jc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org