Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/cc9a7d1d-1749-329e-addc-1b8cb1c6b20b.roa
File: cc9a7d1d-1749-329e-addc-1b8cb1c6b20b.roa (raw, json)
Hash identifier: RQxhhMFMJp7TsYAtBhzeehS/Ib+SSwwSn2HlgDWqHIE=
Subject key identifier: B5:C7:CA:B0:DF:FB:78:54:A8:DE:FD:5C:B8:00:01:C7:62:3A:6A:77
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F7961B385E1F621C0933AFDA0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/cc9a7d1d-1749-329e-addc-1b8cb1c6b20b.roa
Signing time: Wed 05 Oct 2022 12:00:00 +0000
ROA not before: Wed 05 Oct 2022 12:00:00 +0000
ROA not after: Fri 06 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:79:61:b3:85:e1:f6:21:c0:93:3a:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 5 12:00:00 2022 GMT
Not After : Oct 6 04:00:00 2023 GMT
Subject: CN=c566d04b-8cfe-4ab5-9cde-c1a68e2a2be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:f2:25:76:53:96:00:68:f8:ec:b7:46:1b:
36:07:51:c6:cc:a0:5b:62:9d:7d:cb:01:de:69:ab:
55:77:33:25:bb:b3:7a:09:0b:25:26:fd:a5:68:c9:
5f:38:7e:83:9f:ff:76:f8:a1:fb:eb:56:3e:45:f0:
d0:e7:f3:82:2f:1c:86:24:13:2f:76:80:01:7f:be:
8e:d7:55:2e:39:f8:70:e4:9c:36:f0:5d:e2:85:75:
74:9a:79:92:08:26:de:15:b0:d4:1e:93:bc:1c:33:
54:19:25:41:e6:7e:35:9f:87:a2:44:e7:81:5d:14:
6e:00:d5:0c:6e:e5:fe:dd:e9:15:47:4e:58:18:fc:
26:e4:c7:39:eb:0c:2e:97:f2:78:fc:7d:c4:3f:e8:
15:c9:14:68:3b:9f:ad:3e:19:4a:5a:ed:14:45:24:
c7:c5:eb:e8:58:f5:61:3f:fc:8e:91:c0:bb:78:d7:
40:f9:75:9c:ea:58:38:03:c2:d1:e3:bd:e2:24:98:
27:a9:77:8f:fe:13:20:77:96:5b:7e:53:11:49:66:
b9:cb:49:63:08:cb:54:0f:db:c8:59:d3:f0:89:b3:
69:24:6f:0e:90:ea:c2:e0:16:4d:94:9f:ae:fc:ec:
f1:65:66:d3:b5:9d:92:d6:e0:bd:8e:d6:5d:78:3f:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:CA:B0:DF:FB:78:54:A8:DE:FD:5C:B8:00:01:C7:62:3A:6A:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/cc9a7d1d-1749-329e-addc-1b8cb1c6b20b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:1f:7a:86:bc:cd:34:18:6d:14:35:f7:f9:ea:e3:bf:cf:c8:
d1:42:95:a2:69:df:6e:48:5b:a8:92:7a:5a:ed:22:41:26:f9:
19:39:e1:c8:21:68:ef:16:cd:97:1f:0b:29:f0:2b:60:b3:16:
e1:4d:b9:81:55:54:31:3a:91:8b:6d:15:51:3a:ef:bb:ed:0e:
a2:c4:6a:2c:82:11:2d:c4:f9:e7:a8:53:63:6e:2b:08:61:db:
c0:88:62:b5:58:c9:0e:10:82:8a:65:90:eb:b7:88:d5:b5:bb:
6d:d1:4e:9a:6b:10:09:17:10:12:3f:f8:7f:6a:83:ee:57:57:
cd:33:5c:32:e0:c6:3a:5b:33:bf:db:63:68:a9:cc:bd:8f:fc:
f5:3c:36:74:ed:11:34:19:61:dc:4e:39:48:c2:6f:f1:78:11:
4e:cf:14:3c:de:2b:94:4f:f9:ed:b6:57:38:88:32:81:8b:1b:
8f:40:43:90:ef:ae:8a:ca:81:76:50:f2:90:e6:05:5b:f2:4a:
ba:fc:6b:e4:1f:5d:39:03:c2:d8:1b:e5:09:29:fc:01:8b:97:
56:a8:15:ff:23:ba:63:5e:92:f2:04:bf:2f:8c:1e:a5:de:3e:
dd:88:5a:17:35:03:b5:4f:0d:a7:35:a4:21:d2:b7:e0:0f:d9:
2f:86:fe:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD95YbOF4fYhwJM6/aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTAwNTEyMDAwMFoXDTIzMTAwNjA0MDAwMFowLzEtMCsGA1UEAxMk
YzU2NmQwNGItOGNmZS00YWI1LTljZGUtYzFhNjhlMmEyYmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2ryJXZTlgBo+Oy3Rhs2B1HGzKBbYp19ywHe
aatVdzMlu7N6CQslJv2laMlfOH6Dn/92+KH761Y+RfDQ5/OCLxyGJBMvdoABf76O
11UuOfhw5Jw28F3ihXV0mnmSCCbeFbDUHpO8HDNUGSVB5n41n4eiROeBXRRuANUM
buX+3ekVR05YGPwm5Mc56wwul/J4/H3EP+gVyRRoO5+tPhlKWu0URSTHxevoWPVh
P/yOkcC7eNdA+XWc6lg4A8LR473iJJgnqXeP/hMgd5ZbflMRSWa5y0ljCMtUD9vI
WdPwibNpJG8OkOrC4BZNlJ+u/OzxZWbTtZ2S1uC9jtZdeD/3aQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLXHyrDf+3hUqN79XLgAAcdiOmp3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvY2M5YTdkMWQtMTc0OS0z
MjllLWFkZGMtMWI4Y2IxYzZiMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABcfeoa8zTQYbRQ19/nq47/PyNFClaJp325IW6iSelrtIkEm+Rk5
4cghaO8WzZcfCynwK2CzFuFNuYFVVDE6kYttFVE677vtDqLEaiyCES3E+eeoU2Nu
Kwhh28CIYrVYyQ4QgoplkOu3iNW1u23RTpprEAkXEBI/+H9qg+5XV80zXDLgxjpb
M7/bY2ipzL2P/PU8NnTtETQZYdxOOUjCb/F4EU7PFDzeK5RP+e22VziIMoGLG49A
Q5DvrorKgXZQ8pDmBVvySrr8a+QfXTkDwtgb5Qkp/AGLl1aoFf8jumNekvIEvy+M
HqXePt2IWhc1A7VPDac1pCHSt+AP2S+G/tQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org