Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c5a90298-04fc-3a4f-853b-78411c60bf58.roa
File: c5a90298-04fc-3a4f-853b-78411c60bf58.roa (raw, json)
Hash identifier: RrfL1Oc+0iUAWIQA9RJtmGRHl7X3WSCi/0pepBcio28=
Subject key identifier: 7B:80:DD:6E:EC:5B:E9:AB:15:76:5A:B4:D9:82:13:30:5C:77:C8:47
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D02CB01F2F77C5F5F498F4000
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c5a90298-04fc-3a4f-853b-78411c60bf58.roa
Signing time: Tue 22 Feb 2022 05:00:00 +0000
ROA not before: Tue 22 Feb 2022 05:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:02:cb:01:f2:f7:7c:5f:5f:49:8f:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Feb 22 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=6786e6bf-a941-44cb-8a3e-b65585ed6b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:e7:c7:6b:83:c3:38:82:87:10:e1:1a:30:
fc:db:c8:7b:a2:61:af:09:55:62:43:2e:7a:56:ec:
cb:24:ce:79:0b:2a:16:61:26:a9:bb:65:3c:69:39:
1d:c5:03:77:af:17:93:04:05:99:1c:65:11:ab:15:
cb:c8:27:ab:0f:9f:9e:62:fc:18:3a:02:94:84:8d:
91:82:79:55:62:32:42:9e:e3:fc:93:73:ff:dc:50:
aa:36:48:1d:d3:02:d2:a1:01:ef:c4:ac:b3:bc:48:
50:b5:95:f0:0b:a0:15:cd:82:79:3c:7c:74:55:cd:
a7:56:fc:b9:16:6e:53:ee:2f:f1:87:ff:d1:e8:1f:
8d:99:4b:92:99:3c:bd:00:3c:0b:49:35:c9:17:df:
45:db:21:4f:58:e5:a8:96:3e:20:b4:d2:73:47:e5:
02:49:a2:ee:cc:63:3c:84:35:9a:3a:77:60:ef:86:
08:1f:11:ee:db:88:79:c6:13:d4:27:38:8a:9a:78:
05:9d:db:95:7b:4a:d0:e3:c2:77:f6:41:8f:fc:51:
7c:e1:31:c8:49:b9:92:d7:04:5d:df:78:ce:58:41:
ac:72:7c:3d:4f:b3:3d:f1:1b:b0:08:d4:a6:eb:d5:
a6:1e:20:03:f0:39:c9:fa:ff:1d:77:8e:3b:c0:c9:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:80:DD:6E:EC:5B:E9:AB:15:76:5A:B4:D9:82:13:30:5C:77:C8:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/c5a90298-04fc-3a4f-853b-78411c60bf58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:02:72:47:b2:e1:60:28:15:de:3c:5b:e8:70:30:40:03:43:
8f:3e:5c:c2:42:33:72:60:ad:24:c5:17:08:f2:81:96:16:e9:
e5:b6:27:d4:8c:bd:07:4d:1a:3e:76:6d:90:ed:87:79:5d:36:
65:bc:d9:02:bb:e4:d0:b6:e9:0d:f9:b6:cb:b9:3d:1f:3d:5a:
3f:08:4a:01:83:1e:cd:ac:81:36:f8:f1:3e:8d:a2:86:fd:5c:
6e:10:5e:90:e9:69:db:76:7c:a9:4c:3a:6f:55:b9:e0:1d:2a:
02:fb:b6:96:d8:17:b6:30:d0:12:22:6f:28:55:b0:b7:60:7a:
74:b4:b6:c6:3c:4e:66:18:cd:d0:6f:3f:37:92:41:d5:08:dd:
48:de:5b:c9:73:c1:34:ca:d4:a2:fb:c2:d5:da:dc:7b:15:44:
93:6a:38:2b:30:7d:06:45:c4:ab:e4:6c:0c:50:ef:ad:19:f2:
f8:d5:cb:94:6f:bc:87:9c:e1:89:73:30:61:da:41:bc:89:d9:
d5:2c:49:6d:36:16:77:0a:a7:10:72:b3:93:02:69:c6:cd:b3:
69:8d:f7:4f:13:85:17:cf:3f:94:0a:9d:29:44:cc:b8:ce:bd:
b7:be:dc:f9:70:9c:71:5b:96:8c:ea:a8:79:63:b2:92:fe:ae:
1a:b6:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org