Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ccd62f48-c215-30b7-b8e5-2e02300a078a.roa
File: ccd62f48-c215-30b7-b8e5-2e02300a078a.roa (raw, json)
Hash identifier: H/1n4pjf5CI0on6v3C6syMVETjfvYsmV0pyYWY3ibHs=
Subject key identifier: 9A:B6:B5:2D:1A:31:69:73:25:95:3C:BF:2A:83:D1:CD:3B:0B:B2:93
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DA275A80A94C1AA5B1CB0FE60
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ccd62f48-c215-30b7-b8e5-2e02300a078a.roa
Signing time: Wed 20 Apr 2022 04:00:00 +0000
ROA not before: Wed 20 Apr 2022 04:00:00 +0000
ROA not after: Thu 20 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a2:75:a8:0a:94:c1:aa:5b:1c:b0:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 20 04:00:00 2022 GMT
Not After : Apr 20 04:00:00 2023 GMT
Subject: CN=aa1c8f92-3e85-4ff3-9ed7-62e5393bc677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:80:b5:75:08:7c:a4:9e:dc:1d:e3:86:fc:
be:46:9f:98:14:83:ec:30:5e:93:0e:27:c0:2e:1c:
90:06:5e:10:b4:c7:31:1e:9e:71:32:01:19:78:c7:
ac:46:48:c4:07:3c:d5:31:4f:fd:1c:20:37:91:4f:
36:74:30:b0:48:9b:1d:e1:21:2a:4e:10:04:34:5a:
33:0c:70:fc:f9:c9:7b:14:a9:65:53:80:51:ce:74:
0b:aa:99:50:d1:b2:08:0a:ac:71:78:16:94:d0:30:
6b:25:19:dc:22:58:8b:2f:af:61:53:7d:3f:78:fc:
d8:c3:8f:aa:d5:fd:08:09:e9:08:c1:89:84:1b:18:
de:2f:59:34:4e:f8:9a:a9:7f:55:ee:31:3f:4a:e5:
77:d4:43:c5:32:29:ca:2b:21:d9:c4:b9:66:90:e4:
48:49:56:29:19:c2:c7:09:77:2a:38:5c:ff:0d:7f:
73:34:1f:7e:67:1c:d7:6f:f3:a7:16:36:bc:c4:fe:
9e:23:10:52:f2:a6:45:4c:19:54:6f:39:14:0f:a1:
ed:f6:0b:8d:30:d2:ad:35:94:07:92:33:1e:0d:25:
ed:21:39:45:f6:1e:ea:6f:9a:35:79:67:41:4c:5f:
59:2a:98:eb:8d:29:da:98:cd:1d:3b:a5:d3:00:c4:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B6:B5:2D:1A:31:69:73:25:95:3C:BF:2A:83:D1:CD:3B:0B:B2:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ccd62f48-c215-30b7-b8e5-2e02300a078a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:0f:65:76:34:d3:d9:63:7b:14:ed:78:2b:e0:ad:3d:31:76:
5b:33:d6:52:d6:ca:50:ee:a0:6b:94:bb:eb:e4:2c:28:16:89:
6a:41:1e:b7:e8:9b:27:e3:eb:c5:6d:10:58:d0:4f:c2:de:e8:
09:b6:4f:ba:2f:71:70:33:64:64:5b:f9:14:73:67:52:89:98:
17:c4:89:36:d8:90:b9:f6:36:e6:50:68:c2:db:22:11:b4:36:
88:1c:d1:bb:a9:99:24:73:a9:a7:8d:9a:05:35:67:f6:44:de:
7f:1e:0a:72:36:62:69:b5:28:1d:a1:3c:72:ea:46:8c:a5:75:
89:f2:c5:be:c8:5a:05:a3:0f:f1:7d:6c:d0:e5:c6:1d:ea:a0:
27:78:86:e0:61:c0:14:27:ec:a0:5c:9a:e2:d6:1e:82:16:cd:
a0:1a:2b:c5:31:4f:0a:d4:52:7e:a6:60:39:33:8c:94:08:e8:
71:a5:be:dd:8e:1f:2a:bc:80:44:ac:81:41:89:35:51:ff:cb:
a6:d6:9c:c8:ad:10:ac:6d:d7:83:78:d3:a0:b2:00:fb:73:d2:
97:87:15:2f:d3:39:85:53:9e:02:93:3d:b1:b4:5f:61:8a:b3:
a0:78:b1:b1:19:7a:67:db:3f:69:58:c9:92:5e:1d:62:be:ae:
cc:6b:4b:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD2idagKlMGqWxyw/mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDQyMDA0MDAwMFoXDTIzMDQyMDA0MDAwMFowLzEtMCsGA1UEAxMk
YWExYzhmOTItM2U4NS00ZmYzLTllZDctNjJlNTM5M2JjNjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbCAtXUIfKSe3B3jhvy+Rp+YFIPsMF6TDifA
LhyQBl4QtMcxHp5xMgEZeMesRkjEBzzVMU/9HCA3kU82dDCwSJsd4SEqThAENFoz
DHD8+cl7FKllU4BRznQLqplQ0bIICqxxeBaU0DBrJRncIliLL69hU30/ePzYw4+q
1f0ICekIwYmEGxjeL1k0TviaqX9V7jE/SuV31EPFMinKKyHZxLlmkORISVYpGcLH
CXcqOFz/DX9zNB9+ZxzXb/OnFja8xP6eIxBS8qZFTBlUbzkUD6Ht9guNMNKtNZQH
kjMeDSXtITlF9h7qb5o1eWdBTF9ZKpjrjSnamM0dO6XTAMQc0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJq2tS0aMWlzJZU8vyqD0c07C7KTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvY2NkNjJmNDgtYzIxNS0z
MGI3LWI4ZTUtMmUwMjMwMGEwNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHAPZXY009ljexTteCvgrT0xdlsz1lLWylDuoGuUu+vkLCgWiWpB
Hrfomyfj68VtEFjQT8Le6Am2T7ovcXAzZGRb+RRzZ1KJmBfEiTbYkLn2NuZQaMLb
IhG0Nogc0bupmSRzqaeNmgU1Z/ZE3n8eCnI2Ymm1KB2hPHLqRoyldYnyxb7IWgWj
D/F9bNDlxh3qoCd4huBhwBQn7KBcmuLWHoIWzaAaK8UxTwrUUn6mYDkzjJQI6HGl
vt2OHyq8gESsgUGJNVH/y6bWnMitEKxt14N406CyAPtz0peHFS/TOYVTngKTPbG0
X2GKs6B4sbEZemfbP2lYyZJeHWK+rsxrSww=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org