Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f2a1230b-fe68-38aa-87a1-7557f6fa8193.roa
File: f2a1230b-fe68-38aa-87a1-7557f6fa8193.roa (raw, json)
Hash identifier: ZTRG1Uy0c8rnfrhd9qA963Cy2myl8BiTxLwYAICY6oA=
Subject key identifier: E4:F1:AA:E3:10:8C:A6:B1:D9:C0:C7:B0:29:44:04:AB:48:25:0E:2B
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583ED1D3022E59116B11477046B0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f2a1230b-fe68-38aa-87a1-7557f6fa8193.roa
Signing time: Sat 06 Aug 2022 12:00:00 +0000
ROA not before: Sat 06 Aug 2022 12:00:00 +0000
ROA not after: Mon 07 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:d1:d3:02:2e:59:11:6b:11:47:70:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 6 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2023 GMT
Subject: CN=01220714-866b-4a3f-8354-7826b83a45a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:83:6d:76:fc:e3:99:e0:f7:28:c2:1b:35:88:
e8:11:76:07:4e:25:dc:ad:5a:24:98:8e:c0:bb:ca:
75:6e:f3:b6:fc:14:52:1b:57:24:d8:de:67:b4:52:
1f:4a:4e:3d:ca:88:f2:82:a8:92:4b:33:09:1c:d9:
56:5e:44:4a:95:23:4a:09:21:1d:9f:8c:bb:f3:9d:
16:72:f7:c5:38:2d:ae:9d:cc:0f:1b:5e:03:11:0c:
7f:26:78:13:88:c1:c4:af:75:7a:ad:4b:51:08:36:
1e:86:2b:4c:3f:31:d3:0f:2e:59:3c:0d:15:a6:7f:
d2:a0:3d:1a:75:45:4f:9a:10:58:89:54:61:15:50:
f2:6a:3f:a6:7f:97:10:74:39:43:d9:f1:76:0d:21:
11:3e:67:31:6b:12:ce:29:2d:c5:18:e1:f4:3f:71:
9a:57:c3:2d:91:ee:43:31:82:a7:64:80:03:0a:31:
96:2e:05:d5:0e:02:bf:6e:2c:5c:34:eb:bc:53:9f:
c3:13:bb:92:a3:1b:a6:75:29:a4:35:93:26:c9:03:
e8:a4:f4:0b:7a:18:c2:bf:2e:20:8b:f7:89:81:2d:
96:9b:4c:d0:f4:13:9f:1b:53:c7:22:cf:63:e8:1d:
ce:90:3c:11:fc:43:c7:02:d0:d8:51:de:ec:7b:61:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:AA:E3:10:8C:A6:B1:D9:C0:C7:B0:29:44:04:AB:48:25:0E:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f2a1230b-fe68-38aa-87a1-7557f6fa8193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:77:f9:21:31:0c:42:8c:a1:21:2a:3a:65:4d:f2:5d:d3:b8:
f7:05:02:b3:f1:57:1c:2c:7e:a9:42:a4:48:c1:24:1a:e2:94:
08:fb:1c:71:76:e5:88:bc:ea:29:83:7a:51:b7:57:73:35:40:
f1:95:3d:c7:ad:7f:51:f0:35:18:ba:e0:87:12:83:fa:81:a8:
68:ac:62:67:61:26:3c:51:e1:1e:e4:fd:5e:12:44:6e:6a:15:
cc:f5:c2:2f:79:aa:73:ed:1c:4a:d9:41:50:4d:d4:c3:b3:07:
71:13:1f:93:94:66:0a:68:a2:c8:ef:0f:0b:15:d7:9c:be:c6:
7f:8f:50:07:40:ad:0c:e6:29:67:66:f0:2a:88:38:8b:ec:6e:
d8:89:00:e3:ed:ab:17:dd:b3:ca:8c:e7:81:34:e1:28:1c:60:
22:47:57:ea:e0:39:c9:b5:40:fa:2a:04:26:2b:94:74:da:c0:
8b:29:e5:4c:af:aa:01:56:88:52:c5:31:12:c3:eb:62:3e:82:
96:02:28:48:cd:d8:11:da:59:61:54:44:37:15:b0:9f:29:92:
e1:04:9e:5f:55:6d:6f:94:22:fa:3c:0f:61:09:25:5f:1b:17:
df:7a:53:d7:d7:44:01:b2:b7:47:5e:0e:e9:34:c4:ef:3e:21:
2d:a5:3b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org