Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e4d0379b-4cdf-3012-a9fe-cae716484336.roa
File: e4d0379b-4cdf-3012-a9fe-cae716484336.roa (raw, json)
Hash identifier: ogc/gTmGjGsHPCLEpFY+GpoZ++L+MVDM60GkPgL8EjU=
Subject key identifier: 70:D3:2C:D0:68:43:03:39:FD:77:C4:43:A1:31:8E:7D:43:9D:2B:5D
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DD437C40D784C69EB00F6124C
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e4d0379b-4cdf-3012-a9fe-cae716484336.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Mon 08 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d4:37:c4:0d:78:4c:69:eb:00:f6:12:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : May 8 04:00:00 2023 GMT
Subject: CN=d6ae75b3-9297-4b81-a8d0-79ef7ad2b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:66:92:19:49:71:d3:e8:6b:e3:d5:43:79:
10:bb:62:50:3a:21:d8:d0:0a:03:27:cd:47:c6:f2:
97:80:14:2d:5d:ad:02:8b:04:60:94:3e:2f:73:3c:
27:91:5a:46:b8:67:2f:74:23:d9:94:e9:63:19:e2:
cc:eb:f3:f6:2c:a7:4e:8d:89:85:7d:a3:dc:1e:1d:
15:3a:9e:55:50:e0:6a:bd:96:04:55:1d:8c:01:9e:
5d:01:b0:2e:2a:68:61:15:e1:75:87:aa:7a:65:4f:
d0:46:52:95:8b:f0:9d:b2:bd:9d:5b:82:84:0f:83:
8e:77:ea:8b:8e:d7:b3:a7:3a:65:de:65:bd:b0:c6:
8b:67:55:05:09:07:6d:31:af:65:0f:29:dd:55:92:
a1:91:a3:51:e7:ab:15:59:77:e7:be:65:ac:1f:aa:
39:1f:56:04:74:c2:11:46:98:49:b9:e9:6a:4a:57:
eb:1f:2f:3e:13:97:90:29:69:34:df:01:41:47:12:
ee:a0:ae:5f:63:0e:01:bc:8c:27:b1:81:09:e4:bd:
d6:07:a6:4f:42:99:e1:f8:b3:2b:d2:04:4d:9a:eb:
a1:ba:b1:f9:69:fe:87:6f:1f:7b:50:76:09:54:bf:
fc:d8:f2:f6:e5:7e:50:9b:3d:09:c6:f1:9d:3c:ec:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:2C:D0:68:43:03:39:FD:77:C4:43:A1:31:8E:7D:43:9D:2B:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e4d0379b-4cdf-3012-a9fe-cae716484336.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:d0:8c:4d:c7:97:99:32:c4:11:c6:38:f8:05:35:80:a0:73:
ef:0c:4e:5b:a0:d5:e9:17:eb:d5:ee:21:f6:bc:60:a2:22:74:
91:00:72:ba:32:68:cf:9e:5b:2b:bd:2e:5c:96:fd:b4:bb:d5:
46:6d:87:d5:e5:a2:ba:10:ca:ff:03:e3:3c:3a:ab:24:08:a6:
5f:f1:98:5f:85:18:74:20:82:21:52:ce:03:74:03:8d:24:be:
33:f5:24:9c:7a:c4:78:90:84:42:34:46:0a:ce:d6:f5:94:23:
9d:2c:51:a5:87:1b:0d:b9:65:68:9d:44:1c:00:e1:d4:99:fc:
30:2f:f2:bd:99:9b:b1:69:08:eb:33:e0:88:d5:3a:65:0e:d7:
a8:6f:3c:03:e7:d4:6e:3e:cf:df:e7:56:7a:89:57:61:0f:43:
e8:d6:a6:9b:1d:31:76:f4:e7:a4:0d:b0:92:c4:5b:ab:13:56:
60:9c:42:71:fb:e1:f1:4a:36:9f:f5:c9:18:d5:3b:9d:33:b4:
4d:82:09:7a:3c:45:06:9c:ec:e9:70:cf:dc:6f:b3:61:3e:f0:
52:9b:2d:27:56:65:6a:2e:83:32:d0:0d:fb:ef:9c:21:9e:16:
aa:09:ce:19:68:fd:0e:b7:66:20:55:16:91:9e:9d:27:79:f9:
e5:ec:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org