Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e21640b5-4ecf-3931-9a22-7af6d63aee7f.roa
File: e21640b5-4ecf-3931-9a22-7af6d63aee7f.roa (raw, json)
Hash identifier: SXeAjUWL6lMuqRqaBwCNcB88Vl/JuiTnuDfqSM/pCcs=
Subject key identifier: D2:D4:FD:D1:5F:FA:B3:BC:18:22:A1:AF:99:0B:91:1D:37:37:6E:09
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D9FA66AB086FFF120018FEF40
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e21640b5-4ecf-3931-9a22-7af6d63aee7f.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Wed 19 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:9f:a6:6a:b0:86:ff:f1:20:01:8f:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 19 04:00:00 2023 GMT
Subject: CN=3fc11429-60f3-4ed0-a29c-13d93c3cfba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:b2:0e:ae:91:c9:1d:b7:48:10:fd:56:6a:
8d:b6:c6:56:e0:f4:fb:c9:2b:8c:91:dc:b5:24:a9:
68:9b:b3:1f:81:82:ed:88:62:3e:7f:9c:48:31:ec:
62:8d:69:13:41:86:b5:60:07:fc:50:3f:e2:22:e6:
1b:cc:ea:32:8d:5d:cc:6a:4f:61:eb:ea:56:5f:68:
39:ad:4d:3e:11:b5:ef:e3:ce:3a:e5:4c:1d:05:0e:
a5:44:17:32:be:50:7e:d7:d7:73:1c:f8:ef:64:e4:
5d:86:f1:1a:b8:f3:9b:f8:3a:f0:dd:19:0d:4f:13:
06:4c:b8:e9:86:ca:02:31:6a:68:1f:d3:4e:38:8f:
8a:76:43:05:ac:c3:a7:33:fe:cb:3a:f3:7c:6b:a8:
a8:f7:72:36:ee:7a:a6:ed:65:bb:8b:71:69:3d:dd:
9f:b2:71:a7:d7:cd:17:50:cf:55:cd:ad:e4:26:5f:
ba:56:a1:ae:a9:6c:7d:3b:37:e3:cb:14:24:d4:c7:
cc:c0:f4:91:bb:07:95:f2:dc:f0:fb:fe:38:bd:b5:
9f:06:ac:ac:fc:a7:16:df:7f:fd:5c:b2:b5:8d:0e:
6a:f9:72:fc:fb:ea:01:80:ff:88:ec:d9:78:24:4a:
e8:00:06:f1:97:fa:98:1d:d3:7d:c9:91:6f:ed:db:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:FD:D1:5F:FA:B3:BC:18:22:A1:AF:99:0B:91:1D:37:37:6E:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e21640b5-4ecf-3931-9a22-7af6d63aee7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:b4:70:d2:26:6c:9f:78:70:9d:80:75:51:9f:25:f1:f4:95:
0a:6a:31:90:dc:8b:c5:c3:3f:86:f4:a7:8e:a7:69:f4:8b:57:
17:c3:76:9a:e6:dd:9d:0c:62:11:69:5b:b7:d3:29:2f:08:9c:
63:09:a4:45:71:09:c7:cb:56:c4:ea:a1:31:e6:ec:af:3b:0d:
3e:a0:90:75:6e:2e:6b:de:c9:dd:45:9c:b6:4b:ff:e2:0e:62:
bb:8c:d9:aa:a7:fe:fa:ce:52:bc:ca:cc:3b:1d:be:98:74:b4:
fc:4e:5b:11:90:18:52:1e:f5:59:ff:8f:ee:df:b9:bc:50:28:
91:75:3f:ee:75:d6:34:f7:7e:00:f0:27:3e:6c:cb:21:98:46:
65:08:cc:4e:b1:71:86:92:1e:4b:a8:5d:0c:e7:a2:54:48:3b:
d7:42:6b:93:f3:96:df:25:46:fb:e3:00:fb:09:7e:07:73:3a:
e0:b1:87:4a:b3:45:2b:be:33:e8:7e:90:35:49:2b:cd:b3:94:
ad:65:64:26:47:c3:84:ed:49:fa:b8:8f:2e:f9:40:96:c2:bf:
16:91:46:c8:fe:59:44:01:1e:54:b1:14:5d:98:ea:14:49:59:
99:f1:a0:fc:a0:b5:40:f2:8e:e5:5e:8a:90:95:63:96:92:55:
e8:1c:34:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD2fpmqwhv/xIAGP70AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDQxOTA0MDAwMFoXDTIzMDQxOTA0MDAwMFowLzEtMCsGA1UEAxMk
M2ZjMTE0MjktNjBmMy00ZWQwLWEyOWMtMTNkOTNjM2NmYmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswmyDq6RyR23SBD9VmqNtsZW4PT7ySuMkdy1
JKlom7MfgYLtiGI+f5xIMexijWkTQYa1YAf8UD/iIuYbzOoyjV3Mak9h6+pWX2g5
rU0+EbXv48465UwdBQ6lRBcyvlB+19dzHPjvZORdhvEauPOb+Drw3RkNTxMGTLjp
hsoCMWpoH9NOOI+KdkMFrMOnM/7LOvN8a6io93I27nqm7WW7i3FpPd2fsnGn180X
UM9Vza3kJl+6VqGuqWx9OzfjyxQk1MfMwPSRuweV8tzw+/44vbWfBqys/KcW33/9
XLK1jQ5q+XL8++oBgP+I7Nl4JEroAAbxl/qYHdN9yZFv7duFswIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNLU/dFf+rO8GCKhr5kLkR03N24JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvZTIxNjQwYjUtNGVjZi0z
OTMxLTlhMjItN2FmNmQ2M2FlZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIi0cNImbJ94cJ2AdVGfJfH0lQpqMZDci8XDP4b0p46nafSLVxfD
dprm3Z0MYhFpW7fTKS8InGMJpEVxCcfLVsTqoTHm7K87DT6gkHVuLmveyd1FnLZL
/+IOYruM2aqn/vrOUrzKzDsdvph0tPxOWxGQGFIe9Vn/j+7fubxQKJF1P+511jT3
fgDwJz5syyGYRmUIzE6xcYaSHkuoXQznolRIO9dCa5Pzlt8lRvvjAPsJfgdzOuCx
h0qzRSu+M+h+kDVJK82zlK1lZCZHw4TtSfq4jy75QJbCvxaRRsj+WUQBHlSxFF2Y
6hRJWZnxoPygtUDyjuVeipCVY5aSVegcNMY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:45 2025 by rpki-client