Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e4a9e64a-7c99-37cb-a12f-43ea83c654cb.roa
File: e4a9e64a-7c99-37cb-a12f-43ea83c654cb.roa (raw, json)
Hash identifier: kWwuW6EsypUNZ0oxUKEsA/g9HPKLcTMh4uUrufEBVco=
Subject key identifier: CD:A1:E5:51:AD:BE:F9:C5:B8:FC:34:9D:48:90:6C:30:89:32:B5:84
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DB5B0BE8476790306DA547340
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e4a9e64a-7c99-37cb-a12f-43ea83c654cb.roa
Signing time: Tue 26 Apr 2022 12:00:00 +0000
ROA not before: Tue 26 Apr 2022 12:00:00 +0000
ROA not after: Thu 27 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b5:b0:be:84:76:79:03:06:da:54:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 26 12:00:00 2022 GMT
Not After : Apr 27 04:00:00 2023 GMT
Subject: CN=eb54a896-f3f7-4ee1-b6c6-c9c8d0598d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:06:cb:f6:9e:39:4d:26:76:a9:9a:7d:66:26:
29:90:81:90:9a:1d:3e:92:16:d3:cd:f4:48:84:e8:
ca:e3:41:92:f4:43:c6:a0:a6:39:1d:0f:0d:5b:7c:
b7:ee:8e:73:c8:78:9c:95:83:86:04:7c:bf:57:9a:
dd:b7:06:6e:77:a2:b5:85:66:56:bc:1b:8c:3b:84:
c0:ab:fe:f7:a9:e2:cf:5d:1a:26:8a:5f:6b:71:8f:
22:b0:67:06:3f:4e:75:06:31:6d:30:bd:00:ea:59:
45:14:eb:a9:b7:e7:6d:b7:ca:07:04:60:fb:6f:c7:
5a:7c:0e:ca:05:f0:e7:12:e9:9f:26:07:22:ff:07:
56:ee:2f:78:9f:c9:89:fb:fa:df:19:ec:ed:b2:a3:
f0:65:34:58:f2:53:47:78:5f:6b:ce:2d:ca:be:10:
29:59:1c:28:fe:33:ad:11:de:56:97:08:09:09:f2:
ca:7a:99:de:88:a2:f2:00:c6:b5:e1:09:68:f9:48:
50:f8:19:b7:74:eb:86:2f:52:17:29:69:21:fe:ac:
e3:10:a5:5c:1e:f8:4d:fb:6c:e4:21:c7:cf:c1:4c:
9a:46:bf:71:5b:0f:76:43:41:e7:b6:0c:73:b5:7b:
c2:a3:46:81:03:bd:ef:14:db:b5:42:3c:cc:7e:4d:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:E5:51:AD:BE:F9:C5:B8:FC:34:9D:48:90:6C:30:89:32:B5:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e4a9e64a-7c99-37cb-a12f-43ea83c654cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:62:ad:43:cc:d7:9d:c3:1f:d3:15:39:83:1f:41:48:63:86:
6f:ed:b9:3f:76:58:a1:ca:47:8c:5a:eb:ec:04:63:a3:a0:85:
c4:1a:f6:62:9e:db:13:03:91:5c:c0:73:0b:e5:46:eb:55:6f:
62:f2:ff:be:8d:45:00:51:40:65:20:d9:06:b2:7f:e1:6e:d6:
63:f1:b6:82:12:af:1c:61:00:8a:71:f1:ee:8e:10:72:dc:e9:
a4:59:83:07:1c:60:ce:f7:16:80:05:3e:fb:5f:73:bd:5d:ea:
0d:87:cc:ff:7d:dc:ae:07:1e:a5:2d:16:bb:3e:33:99:8f:09:
53:f1:80:b4:41:9a:26:6d:cc:28:5e:8f:f5:f2:3d:86:9e:a5:
e3:54:52:01:2c:e7:8e:82:2c:57:86:42:35:b6:c3:b7:49:f4:
d6:33:73:95:ad:b2:6a:35:5d:37:de:f3:e3:2a:66:97:36:54:
28:78:6b:15:94:dd:38:5f:9f:c2:a2:8d:7f:4e:21:44:e3:a9:
7d:b9:60:9b:e2:7f:57:17:fe:0d:b2:91:53:1a:9e:1b:8a:e9:
0b:f4:15:5b:ae:83:b3:3f:30:ba:37:b0:94:76:97:ac:b0:d7:
72:71:59:54:fd:52:54:6c:75:e1:e4:12:50:35:57:3a:9d:70:
58:66:42:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD21sL6EdnkDBtpUc0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDQyNjEyMDAwMFoXDTIzMDQyNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZWI1NGE4OTYtZjNmNy00ZWUxLWI2YzYtYzljOGQwNTk4ZDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwbL9p45TSZ2qZp9ZiYpkIGQmh0+khbTzfRI
hOjK40GS9EPGoKY5HQ8NW3y37o5zyHiclYOGBHy/V5rdtwZud6K1hWZWvBuMO4TA
q/73qeLPXRomil9rcY8isGcGP051BjFtML0A6llFFOupt+dtt8oHBGD7b8dafA7K
BfDnEumfJgci/wdW7i94n8mJ+/rfGeztsqPwZTRY8lNHeF9rzi3KvhApWRwo/jOt
Ed5WlwgJCfLKepneiKLyAMa14Qlo+UhQ+Bm3dOuGL1IXKWkh/qzjEKVcHvhN+2zk
IcfPwUyaRr9xWw92Q0HntgxztXvCo0aBA73vFNu1QjzMfk09iwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM2h5VGtvvnFuPw0nUiQbDCJMrWEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvZTRhOWU2NGEtN2M5OS0z
N2NiLWExMmYtNDNlYTgzYzY1NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIpirUPM153DH9MVOYMfQUhjhm/tuT92WKHKR4xa6+wEY6OghcQa
9mKe2xMDkVzAcwvlRutVb2Ly/76NRQBRQGUg2Qayf+Fu1mPxtoISrxxhAIpx8e6O
EHLc6aRZgwccYM73FoAFPvtfc71d6g2HzP993K4HHqUtFrs+M5mPCVPxgLRBmiZt
zChej/XyPYaepeNUUgEs546CLFeGQjW2w7dJ9NYzc5Wtsmo1XTfe8+MqZpc2VCh4
axWU3Thfn8KijX9OIUTjqX25YJvif1cX/g2ykVManhuK6Qv0FVuug7M/MLo3sJR2
l6yw13JxWVT9UlRsdeHkElA1VzqdcFhmQpU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org