Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/da3856fa-0dd3-309d-b0cb-ec81704f0645.roa
File: da3856fa-0dd3-309d-b0cb-ec81704f0645.roa (raw, json)
Hash identifier: uCONZOg0c/2akZHF6F88jlwL1pK+lJ2B0wikMM7nDxs=
Subject key identifier: 19:4F:F5:75:B9:10:3F:BE:6A:03:A0:F2:14:83:17:7C:BD:A0:FD:C7
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D2F10E52C631D3A8B9D84A800
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/da3856fa-0dd3-309d-b0cb-ec81704f0645.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Fri 10 Mar 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:10:e5:2c:63:1d:3a:8b:9d:84:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Mar 10 05:00:00 2023 GMT
Subject: CN=c2632366-c6ab-45f3-ac61-9da5b194d8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:20:77:06:bc:8d:eb:60:5f:9a:f8:7a:a8:
b3:53:92:d6:0c:a9:b6:5e:63:a2:5c:66:13:9e:ef:
5b:2d:7e:44:ca:b9:ca:6a:1f:aa:71:b9:f1:b8:2f:
89:55:61:87:6d:0b:6b:92:dd:a8:74:a2:67:3a:01:
13:90:59:2f:75:d4:8b:b0:f4:b4:31:ff:a2:d5:96:
79:ff:7d:44:b9:3e:f5:68:e7:5b:10:7c:5d:cb:a7:
9e:bd:47:da:6e:76:eb:da:65:56:51:87:4e:a1:11:
8a:18:97:3e:eb:bc:b6:00:08:5d:7e:6e:99:2d:5c:
8a:54:5b:f6:30:33:6c:8f:4d:7b:d7:00:26:91:71:
40:41:d7:5c:4f:08:42:c0:cd:d6:42:bd:b4:03:d7:
4f:4c:64:8d:2b:ef:40:08:1c:c0:70:c8:0e:a4:59:
3e:01:c5:64:2b:dc:12:56:f5:d3:80:71:f0:6a:9d:
7d:8b:53:54:43:2b:85:2b:d1:11:56:12:21:fa:6b:
ef:7b:4d:cb:3a:70:e7:d7:45:e9:d0:a8:9e:c0:f9:
dc:80:d7:4c:4d:8f:d0:71:ed:75:9d:aa:48:5d:45:
74:d6:11:2f:3e:6f:15:b3:05:f7:06:d4:52:78:2d:
b3:7d:04:e0:f1:ae:48:6f:c0:74:5d:ae:bf:2c:1d:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4F:F5:75:B9:10:3F:BE:6A:03:A0:F2:14:83:17:7C:BD:A0:FD:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/da3856fa-0dd3-309d-b0cb-ec81704f0645.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:90:57:c9:07:26:90:d6:30:b5:7c:d0:b5:85:c6:c8:b0:80:
3c:bc:12:04:21:c6:25:84:ee:27:d3:55:64:3b:d4:8a:64:5d:
53:c4:9b:b8:aa:69:40:b4:fd:a3:0a:cf:84:27:12:f2:f1:86:
c2:e2:10:65:d7:03:06:03:50:6a:dc:c5:f9:a1:44:18:d5:7d:
99:a3:bb:cc:fa:87:81:aa:d4:3d:4e:39:0a:fb:d1:93:5d:06:
f4:60:44:b7:20:0a:64:cc:f2:52:ff:59:30:c1:14:c4:32:bd:
2b:64:7e:b5:69:bb:c2:5d:47:5f:0a:b0:ed:c3:39:f9:58:a2:
f9:0b:74:ac:99:cb:e3:cc:06:c9:91:f0:51:a4:ae:b0:32:fe:
2e:c1:99:ce:cb:5e:26:78:1e:fd:ef:8b:53:7b:4d:1b:f5:18:
c2:46:46:bd:b6:86:60:b5:aa:6d:9b:19:0d:e1:ee:bb:d7:e9:
87:5d:1f:f6:7d:82:dd:b8:53:16:5d:28:e8:c3:bc:c8:19:f4:
e3:ce:9a:22:35:de:02:76:f9:80:0d:2e:13:16:2b:fb:0c:a4:
11:f6:e1:d4:3a:0c:34:e2:24:50:51:76:48:5b:e2:1e:bc:d1:
87:a6:e2:e8:a6:2e:95:e6:b1:ad:ac:0d:e9:3f:ab:fb:e4:87:
17:a9:7c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:43 2025 by rpki-client