Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e1cfe3bf-d6ed-31de-b559-02b3dcfe79af.roa
File: e1cfe3bf-d6ed-31de-b559-02b3dcfe79af.roa (raw, json)
Hash identifier: Xq5a7RIvQaCyVXZl9NjHPN+F7jkrDP/805pyq+nhtLk=
Subject key identifier: 41:73:80:39:37:7A:86:EB:1C:BB:24:74:0B:8F:31:87:47:15:16:C0
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F06EEA762889418BCE0AF0680
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e1cfe3bf-d6ed-31de-b559-02b3dcfe79af.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Sat 26 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:06:ee:a7:62:88:94:18:bc:e0:af:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Aug 26 04:00:00 2023 GMT
Subject: CN=fc764d13-e085-4953-9a8b-b95c62e25722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:07:05:19:7e:31:9c:7e:c6:71:fc:9f:ab:
04:19:94:ff:fc:f4:c1:f2:f9:6e:2d:b1:34:60:c0:
74:ce:e7:68:aa:4f:cc:53:f5:c7:39:8d:8b:ef:11:
68:11:45:e3:8d:e0:93:7c:8a:1b:57:23:63:ad:b5:
18:53:28:30:f6:51:42:dc:22:b8:63:e5:73:82:26:
9f:30:31:57:13:75:8f:74:78:9a:5a:11:1d:67:c1:
10:59:70:5b:43:40:2a:f0:73:17:1b:ae:09:62:be:
31:96:86:d7:d5:7b:7a:75:b2:36:66:86:57:c2:ae:
d2:ed:f0:a1:0c:ed:18:16:32:99:a5:47:c0:83:dc:
2f:30:35:09:9f:2e:0c:87:05:da:9f:f6:f7:f3:b5:
48:93:06:ce:f7:24:7c:d0:c1:87:7a:9e:52:c7:aa:
59:7e:31:ee:28:7b:d9:17:c1:d0:08:0f:f5:b4:d5:
d0:07:e3:ee:af:21:f1:74:51:b7:30:a8:d4:30:a6:
97:c2:1c:38:1b:d1:b6:8a:e8:f1:f7:db:5d:8f:06:
ee:d4:7b:b0:ce:4a:5d:58:a3:9c:b5:ec:c5:35:cc:
8a:89:ca:a2:31:d3:df:c1:52:1a:70:8b:44:4a:14:
34:d0:44:a0:22:b6:2b:6e:df:79:46:51:dc:49:31:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:73:80:39:37:7A:86:EB:1C:BB:24:74:0B:8F:31:87:47:15:16:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e1cfe3bf-d6ed-31de-b559-02b3dcfe79af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:c7:e3:cd:86:a4:ad:30:d7:c0:7c:c4:ea:a5:60:b9:e1:d0:
42:90:c9:d8:10:96:1c:32:59:dc:a8:0d:d9:18:dd:33:4c:b4:
a3:26:78:34:dc:bd:f9:c2:e4:46:7f:5c:dd:53:fa:78:f0:6b:
35:82:88:c0:e1:95:93:2a:4a:8c:33:d2:79:cb:67:0e:4f:f8:
c3:12:39:78:32:08:f5:0e:9a:8c:ea:4a:49:ee:94:85:a6:34:
0d:0d:f5:a5:b8:56:32:e2:1b:02:c2:48:65:25:7d:79:b7:55:
19:88:d6:de:06:4f:38:88:3b:5e:45:9d:6d:16:04:3c:c0:59:
39:b3:44:22:d8:b3:47:6c:b6:ee:d8:dd:7b:22:02:a6:6a:07:
28:05:90:b6:78:ea:a2:55:42:c0:a1:8a:42:d1:40:2e:98:63:
25:dc:0c:13:d9:cc:c8:e6:94:1c:0e:85:b2:9b:42:c0:49:a2:
47:20:99:e1:15:56:49:f5:4a:41:cf:1a:15:24:af:17:52:01:
3f:a2:01:2b:5e:7c:19:43:32:91:3d:10:b0:9b:34:54:cc:f0:
d6:f8:c2:67:9f:a4:45:ff:12:38:43:85:43:92:7f:a1:6e:95:
16:11:bf:d4:2d:1a:dd:d1:e5:d7:10:9f:cd:e6:8a:eb:0b:a1:
fb:f7:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org