Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f381ad6e-9442-330b-9c52-faac266e628f.roa
File: f381ad6e-9442-330b-9c52-faac266e628f.roa (raw, json)
Hash identifier: AhoNelP7GTvbaF6LUtpUXAA0/clrZi87qj8BpMuebfA=
Subject key identifier: 74:22:30:19:ED:23:68:74:96:1E:F8:C8:0E:3A:CE:EA:FE:2D:3F:34
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DBAC68FC75A5E4CDAE235E300
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f381ad6e-9442-330b-9c52-faac266e628f.roa
Signing time: Thu 28 Apr 2022 12:00:00 +0000
ROA not before: Thu 28 Apr 2022 12:00:00 +0000
ROA not after: Sat 29 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ba:c6:8f:c7:5a:5e:4c:da:e2:35:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 28 12:00:00 2022 GMT
Not After : Apr 29 04:00:00 2023 GMT
Subject: CN=7961f800-e62e-4a9e-bdb6-afa1024ac5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:05:83:80:5b:b9:0f:1e:3b:9c:42:7c:0a:
6e:4a:36:e9:1b:b1:a0:b3:18:7e:57:47:f8:0f:ee:
95:65:8c:7b:94:71:df:6c:3b:a2:8a:ac:a4:29:77:
82:f3:40:a5:b0:0e:18:ad:c4:86:50:8b:7a:a8:22:
cd:8d:a8:4f:c7:c1:27:d3:50:24:45:97:d6:51:45:
4d:dc:fa:82:d6:9a:88:18:40:08:c6:e4:a7:5c:3a:
54:f4:42:71:1b:21:a1:93:28:54:93:1d:0f:52:91:
31:51:a7:de:e4:b2:67:22:71:5e:cf:13:6b:88:dd:
71:9a:10:b8:e2:cb:7f:c3:c0:1b:b9:c7:4f:4b:e2:
8f:31:7e:7e:02:59:1c:17:32:92:40:71:38:a1:4b:
c7:62:22:f0:98:15:05:71:65:8f:a5:dc:d3:0f:65:
d4:76:34:1a:64:c1:4c:c4:09:fd:fe:eb:bc:e1:f9:
72:96:b1:82:32:76:9c:56:d5:cc:c5:20:29:32:0e:
97:72:0e:35:8e:ba:db:1e:01:ef:28:6b:e6:b8:f2:
3d:a5:57:ec:40:6f:a1:18:b0:0b:a6:f0:7e:cb:15:
29:ed:6a:56:04:35:05:f3:85:d9:a5:40:16:03:6f:
fd:19:13:40:3d:75:df:88:13:44:9a:90:f9:a6:d2:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:22:30:19:ED:23:68:74:96:1E:F8:C8:0E:3A:CE:EA:FE:2D:3F:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f381ad6e-9442-330b-9c52-faac266e628f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d4:98:95:cc:c7:2b:e2:0d:9c:9d:3e:70:85:47:5e:ba:31:
55:fc:9d:91:ab:eb:c1:0a:5e:dc:34:fe:1c:30:40:d3:dc:b6:
d2:1c:3f:ba:59:2b:7b:8e:e0:9b:8f:4a:0a:4e:c9:0b:85:1c:
ba:82:c0:ee:1e:a2:f6:93:85:b9:64:e8:98:9d:2e:e2:0a:98:
67:f5:bb:fb:0b:91:be:6d:8f:c1:83:93:3e:98:e8:11:d9:78:
b0:46:7d:24:dd:1f:3c:da:ba:02:66:8e:ff:b8:1f:76:91:22:
97:10:e4:05:52:03:e6:2e:dc:71:1e:7c:1a:d7:c5:7f:8f:ab:
8a:1b:83:de:d8:84:48:9a:42:b2:7e:b1:cf:ff:b9:c4:53:b7:
45:b7:1a:50:f9:ec:9c:89:85:86:9b:a8:41:82:1a:64:5d:2d:
8c:37:d5:d4:5c:b6:77:92:a6:b9:a9:f3:90:cb:b7:bb:8e:d4:
66:af:84:58:53:07:ff:90:39:35:17:22:17:f7:42:6b:35:b1:
32:7c:e1:84:50:62:d9:5b:3f:65:11:d3:b6:00:30:74:99:d7:
58:ab:88:26:53:af:29:0f:fd:09:d9:28:18:01:99:6f:36:f8:
dd:88:d8:2d:31:b8:92:13:98:ab:39:80:7a:38:05:54:8b:78:
e2:35:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org