Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/df157e33-658d-332a-8f0e-890d342c2149.roa
File: df157e33-658d-332a-8f0e-890d342c2149.roa (raw, json)
Hash identifier: OhGm5RJBXCTqfBbk22IY9vdORhLVUZYsRnhCxvk6hx8=
Subject key identifier: 9F:23:42:02:DB:67:90:44:55:D4:7E:B6:F3:D9:EA:48:C3:D5:BA:BB
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FAEBC8097D76050DB20225D00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/df157e33-658d-332a-8f0e-890d342c2149.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Wed 25 Oct 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ae:bc:80:97:d7:60:50:db:20:22:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Oct 25 04:00:00 2023 GMT
Subject: CN=0de708b8-8a50-4ad3-8dfc-70eddfd48be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:da:5b:93:db:54:93:cc:64:7c:94:39:26:00:
0e:37:9d:8c:c0:35:7a:4b:05:e1:ff:5a:18:de:4b:
a8:7b:3d:ad:7c:47:11:55:00:8e:58:b7:2d:66:d2:
f1:f1:fc:d1:99:8d:85:be:9e:7f:d7:36:a3:3a:80:
bb:93:d4:17:99:3a:db:45:be:9c:40:12:15:36:4a:
0f:11:4f:c2:b2:db:a2:ce:95:86:62:a0:12:52:33:
5d:60:79:ca:13:58:37:20:8c:58:52:e2:a9:f9:1d:
1b:ca:25:b0:28:82:e0:14:d0:b2:12:ca:49:57:64:
af:00:76:88:35:2d:bb:03:2e:67:a0:37:ba:2a:64:
c1:03:23:f2:af:94:ae:dd:3e:f0:54:c1:53:1f:f6:
a3:bf:41:28:23:d7:17:fd:f9:c2:a5:22:69:69:64:
3d:21:e1:d4:23:10:2c:30:03:a5:0c:9b:88:98:e2:
95:b6:be:b4:1a:8d:b7:27:ed:f2:ad:24:cd:7e:85:
15:16:0c:a0:5a:96:91:2d:fd:eb:dd:82:94:f5:c3:
10:06:7a:87:ec:6c:1b:a1:46:05:d7:7e:11:a3:da:
79:f9:c7:6b:d7:64:20:7e:1c:ba:e7:0f:55:f9:7f:
ba:e1:48:2d:eb:26:93:16:d8:ee:9d:e6:f2:1b:e6:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:42:02:DB:67:90:44:55:D4:7E:B6:F3:D9:EA:48:C3:D5:BA:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/df157e33-658d-332a-8f0e-890d342c2149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:de:47:e3:b4:55:5f:f3:bc:4f:ff:1c:bf:48:32:50:e8:6d:
ef:48:d2:6e:c1:be:6b:7e:13:7a:96:d8:b6:a0:4d:10:94:35:
51:da:0f:9d:fb:ac:29:ab:43:e4:da:f3:78:bf:65:ce:9b:7a:
6d:60:72:a8:74:4e:fb:23:1b:2f:77:d2:2c:42:1b:89:ed:e0:
07:d0:81:63:34:b0:9e:ff:1e:d3:78:6f:ac:fa:8e:4a:4f:85:
53:7a:d6:1d:08:9f:dd:c1:57:17:3e:11:d3:bd:b5:54:5f:68:
94:fc:e0:7d:b2:8d:90:5f:04:d3:9c:ef:09:2d:26:db:e7:09:
ed:6a:88:72:14:ac:0c:c2:fe:b9:a6:5f:c0:1f:02:61:96:a6:
29:3c:c3:aa:10:5a:98:0e:53:c6:a0:a2:e9:ff:11:aa:88:e0:
9b:14:0a:20:b9:46:0c:13:a6:30:bd:fb:c5:85:99:d1:b6:3d:
2e:c0:b0:f8:ba:c6:3e:a3:50:23:51:94:df:cf:40:3c:e0:83:
21:e2:4a:b3:bc:87:65:aa:c1:41:00:c7:99:d8:e0:7b:93:99:
83:22:c5:d9:69:c1:6d:d7:ad:a2:2d:85:b2:17:c4:e0:6a:de:
02:2e:47:7e:96:f9:63:6d:de:88:4d:f6:af:77:a1:f3:95:76:
28:c2:dc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:49 2025 by rpki-client