Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/cab4c668-a6bb-3683-b3e9-aa7df64babb3.roa
File: cab4c668-a6bb-3683-b3e9-aa7df64babb3.roa (raw, json)
Hash identifier: 2glsONcRjBX6hOqsRFcfHD8UNI1sLGsGCL2zCb/xbUI=
Subject key identifier: 66:F2:D8:FB:8C:2F:BD:C7:4A:73:94:03:0E:AD:F7:E0:16:89:90:91
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583B92AB6CBDADE1EF8248E1E480
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/cab4c668-a6bb-3683-b3e9-aa7df64babb3.roa
Signing time: Wed 13 Oct 2021 04:00:00 +0000
ROA not before: Wed 13 Oct 2021 04:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 3130
IP address blocks: 2620:9e:6000::/44 maxlen: 44
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:92:ab:6c:bd:ad:e1:ef:82:48:e1:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 13 04:00:00 2021 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=6707f626-8064-43c9-af59-b426da067eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:a7:65:75:6f:ea:24:28:9e:02:c3:42:41:
ea:e8:3e:52:04:82:b1:2f:eb:45:7b:db:ca:9f:d8:
3e:8b:50:64:f2:86:a9:d0:93:fa:18:a9:8c:e3:b7:
69:b1:61:b7:29:e9:94:cf:c5:f0:bf:99:84:f5:d3:
be:67:4e:cb:93:cf:28:5d:d7:8b:e4:b0:98:d4:dd:
76:88:99:f4:c5:ec:49:24:44:7f:9d:2e:bc:ff:ce:
ea:41:08:f0:07:6b:f3:88:29:c2:f2:74:a5:cb:ee:
51:d6:b4:a7:ad:cb:8c:9e:02:fc:84:d2:33:a8:c8:
d4:e3:79:5c:aa:fb:66:b4:c3:5e:32:c3:ed:50:ee:
5f:96:27:bd:c6:c2:bf:dd:29:d2:e5:aa:28:65:57:
c8:ea:49:b4:02:a7:9d:4f:23:fb:be:4f:6b:b0:78:
64:13:f8:dd:cb:ab:f7:39:56:94:25:2d:56:1c:4a:
54:63:ce:d3:0d:0b:fd:f0:69:32:50:66:28:b6:42:
86:85:10:d9:50:aa:21:c5:cd:72:36:28:88:6e:48:
bd:57:d4:d0:fc:2b:a1:e3:ad:4f:2e:0e:36:c4:f3:
dc:2f:0c:6b:af:ca:ec:ce:59:69:56:19:c3:7a:80:
98:5b:02:81:3c:25:00:4a:30:5b:50:68:d4:9c:f9:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:D8:FB:8C:2F:BD:C7:4A:73:94:03:0E:AD:F7:E0:16:89:90:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/cab4c668-a6bb-3683-b3e9-aa7df64babb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:1f:b5:86:3b:e4:99:b1:a8:99:72:c2:38:40:bc:cf:1f:5a:
d4:27:74:5f:90:23:7f:31:34:e0:ef:70:24:cf:e6:1c:36:fb:
85:ff:d3:a8:4d:42:3a:70:c8:13:4a:32:07:c7:ce:25:b9:f7:
d6:f9:83:dc:62:7c:ef:f6:34:a9:3a:74:52:cd:27:b0:56:9b:
95:57:53:44:10:a0:55:6b:cc:23:99:11:51:26:79:3e:3f:6c:
78:d6:dc:a7:7a:00:08:8e:d1:bd:ec:32:a8:0d:29:19:03:da:
ad:eb:61:ae:0c:88:4b:a4:cf:83:ea:0e:af:2e:cb:c8:8f:d8:
ce:3d:b8:c9:0e:55:56:4f:4a:95:8a:c0:3b:44:ca:e8:27:71:
da:28:82:c9:e5:f2:0d:3d:4c:ba:2d:bf:bc:b0:6e:c6:aa:a2:
6e:4b:30:8b:d2:02:f9:a3:2c:1a:b9:f8:6f:e4:08:3a:84:9f:
37:cf:6a:cc:d4:1b:fc:42:13:d7:33:30:ab:17:38:b7:35:81:
94:1e:13:af:81:ed:af:db:ff:6f:f9:b2:84:91:4f:42:ca:1c:
1c:81:bd:37:ae:5d:48:65:5a:43:64:72:57:c9:46:f0:2d:71:
e7:29:29:09:97:59:3f:fa:14:c1:48:78:54:3e:49:70:89:33:
3e:62:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org