Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e9cbe19d-064d-33d2-9caa-bf9b7f17eb50.roa
File: e9cbe19d-064d-33d2-9caa-bf9b7f17eb50.roa (raw, json)
Hash identifier: UxSNz3bYlSHye642kR7JTROZqiAWjF3jrr4azaMTB6k=
Subject key identifier: 0B:7F:29:63:6B:11:6B:68:0A:E0:0C:1B:86:54:BB:AA:77:9F:14:6E
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DFAE751859111903298C50800
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e9cbe19d-064d-33d2-9caa-bf9b7f17eb50.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Mon 22 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:e7:51:85:91:11:90:32:98:c5:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : May 22 04:00:00 2023 GMT
Subject: CN=46065d74-dc3a-4839-a9a0-ba7618a54928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:14:e8:ec:c7:e7:8f:59:d4:ed:e0:3c:83:
67:37:7d:40:97:f1:69:72:24:82:d7:a6:38:30:a4:
eb:56:fd:d2:70:08:4a:a5:dd:07:e1:bd:74:9c:b6:
92:05:a0:8f:5b:3b:c2:bb:59:79:d8:b7:76:fc:4f:
8b:1f:96:fb:18:be:df:04:00:4a:c5:af:ff:fa:86:
3a:14:13:40:fb:9a:b3:57:c6:77:86:ae:bb:98:f5:
55:18:0b:76:fb:a2:4f:91:cf:8a:9c:53:fa:5e:12:
45:15:6d:eb:97:bf:48:4f:af:2d:ac:2e:e0:7e:34:
c9:41:d3:9a:6a:0d:7a:93:65:29:d4:61:88:98:23:
90:52:92:45:c0:c0:17:c8:01:2c:e1:24:89:ab:bc:
9b:8f:5d:c2:c2:72:92:0e:82:05:06:d5:c9:96:e1:
60:51:3d:ca:7a:6c:8d:ac:cd:7a:80:45:d9:c0:6e:
07:16:d8:fe:e6:ee:a2:be:18:34:c8:71:fb:57:98:
c2:d3:df:88:46:f1:01:2b:e4:2f:47:34:66:ae:05:
22:1a:8d:45:06:28:ef:5b:48:6e:ff:58:eb:45:db:
13:c2:1d:06:b8:76:2f:01:f4:87:cd:b5:3d:7d:b9:
de:00:b4:3e:d2:07:5e:4c:50:a4:92:ce:f1:6b:e2:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7F:29:63:6B:11:6B:68:0A:E0:0C:1B:86:54:BB:AA:77:9F:14:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e9cbe19d-064d-33d2-9caa-bf9b7f17eb50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ee:ba:ed:8e:31:4c:f9:0d:2c:d8:7f:6d:a7:c7:6a:d0:40:
0c:d1:4f:49:27:70:de:d9:03:9f:34:95:e3:ee:9b:e7:cf:40:
60:35:af:48:4c:45:69:3a:fd:98:67:b1:76:93:8e:a6:1b:60:
27:44:92:9d:46:b5:44:31:f9:1d:55:5b:37:15:c4:02:93:a6:
61:65:c8:3e:2b:a5:e9:ae:70:4d:ee:9a:9a:03:9c:47:84:9d:
ce:85:47:94:10:50:af:e0:0a:9f:58:17:02:ec:b7:a2:77:0e:
f5:22:c0:82:56:0b:c3:88:3b:a2:44:b8:00:1b:99:a9:c2:65:
9d:d8:9d:02:e6:cc:9b:9c:fd:9f:b9:69:c6:09:01:29:7a:f4:
92:d4:c6:41:15:b1:0b:b7:d3:1d:f1:59:40:37:31:e1:f8:df:
b9:36:40:d7:46:4a:3a:ce:45:9e:62:d4:11:99:77:44:86:7d:
f2:5f:94:74:49:f8:f7:95:83:f0:52:a8:90:f3:bb:25:c2:31:
81:ef:d9:44:17:d2:52:cd:70:d7:45:2a:2e:4d:dd:fe:eb:5b:
6b:f0:89:e5:d2:41:25:d6:b2:ba:e8:44:06:5b:de:23:1a:9f:
39:a9:78:40:38:a5:44:89:ec:da:26:9e:3b:58:cd:6f:44:47:
0f:ae:28:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org