Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/db14992a-6c1e-36dc-8bcd-5f3db1eb8100.roa
File: db14992a-6c1e-36dc-8bcd-5f3db1eb8100.roa (raw, json)
Hash identifier: VABc/ng2ZV+R6EgH/Z6XWI52kJnWNSY+ZR0duEbPFZs=
Subject key identifier: D7:03:4A:D2:CE:19:4A:29:A7:B7:5A:DD:17:84:78:F0:D0:95:3C:D6
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DCEB91382A62978F85A8AB7C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/db14992a-6c1e-36dc-8bcd-5f3db1eb8100.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Sat 06 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ce:b9:13:82:a6:29:78:f8:5a:8a:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : May 6 04:00:00 2023 GMT
Subject: CN=1b5c2f6c-1437-49f5-b0c1-6a161626193e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1c:61:c4:42:57:e8:9b:a6:2c:93:6d:a3:a0:
f8:89:c1:28:82:fd:e4:9d:4b:bb:a1:76:e5:62:31:
51:35:29:93:2c:d9:e8:e3:27:83:04:ce:9c:14:bc:
b0:37:6d:d4:3e:40:bd:0d:6b:a0:9c:3a:d4:ea:f1:
55:ae:aa:fc:a2:05:39:34:94:b1:02:9f:64:3a:75:
fb:38:66:03:0e:a5:7a:ea:90:b9:79:a2:a9:47:76:
a1:bc:1b:b5:da:af:42:4d:e7:1a:75:d3:bc:fc:42:
fe:d0:76:6e:c4:76:27:e6:db:75:04:4a:bc:79:8c:
e5:c2:6d:fd:04:3e:50:fe:ec:68:57:ae:4c:49:ce:
06:f8:df:80:fa:f0:c4:c5:bd:53:31:65:4f:ff:65:
6e:4b:8f:11:d6:6b:ed:ad:1b:4e:fb:5a:1d:1e:e5:
a5:cd:37:90:1a:75:2d:da:8e:bc:24:f8:0a:8e:d2:
a6:5d:f2:d0:fe:4f:a2:1c:1e:5c:a0:de:d8:8e:88:
87:62:56:02:e0:33:17:0b:3e:47:cb:1a:7d:ac:1a:
15:85:b7:de:d9:a6:67:c5:7a:7b:a3:3a:1c:1b:a6:
f3:4c:b1:f9:d7:30:62:65:72:87:03:23:db:49:4e:
6a:9b:16:85:b5:a4:eb:62:f2:80:9e:f1:76:c0:4f:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:03:4A:D2:CE:19:4A:29:A7:B7:5A:DD:17:84:78:F0:D0:95:3C:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/db14992a-6c1e-36dc-8bcd-5f3db1eb8100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:13:58:fc:45:0d:b0:f3:74:41:7b:40:27:fe:57:3e:67:93:
72:0a:27:ec:bc:bf:b6:ca:ad:24:14:0d:5c:a8:8b:d5:da:ab:
1c:2c:26:a1:f8:32:3a:a7:dd:3b:67:d2:60:5a:c8:b5:fa:18:
37:75:90:09:01:cb:58:48:c2:b4:df:60:65:5e:9f:7c:8a:fe:
f8:b9:80:83:e9:62:bf:df:62:ed:49:8c:2a:31:fd:fc:09:12:
64:39:e4:a1:92:9b:49:59:e7:53:40:bb:e5:22:ae:f4:a7:57:
82:f2:36:ce:47:23:ea:b6:92:bb:d4:15:65:70:2b:8a:a6:6a:
13:27:f3:bd:10:49:6d:6f:17:04:ee:2d:45:d5:a9:b6:8f:d0:
11:41:74:e4:bd:e5:52:b6:02:74:93:35:c3:82:f9:80:c5:16:
32:49:f9:7f:bf:eb:1d:9a:89:ab:9e:80:61:6f:f5:53:6c:f6:
50:39:3f:e2:74:9a:46:19:5b:de:59:6d:37:ab:4b:bf:8a:a1:
14:1e:59:f6:42:01:26:5f:73:33:bb:60:6f:cb:4a:5e:b7:a7:
ff:65:22:32:c3:22:77:27:29:8f:4b:51:ab:6f:7e:99:a7:da:
b3:b8:56:af:73:59:4b:a5:9c:47:a7:0e:98:31:e0:45:82:82:
63:ef:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org