Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f390d918-f5a1-363d-8c71-5d48e6546bee.roa
File: f390d918-f5a1-363d-8c71-5d48e6546bee.roa (raw, json)
Hash identifier: NdLaSLCyIVKNRPT5C9p4xS0twrNPXiUDN/lDNZXMPP8=
Subject key identifier: 83:B6:3B:21:47:AF:FD:F4:29:E6:E1:67:90:B6:10:7D:1F:BC:8C:AA
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583F2E3832AFA3F3F7058769AFF8
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f390d918-f5a1-363d-8c71-5d48e6546bee.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Sat 09 Sep 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:38:32:af:a3:f3:f7:05:87:69:af:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Sep 9 04:00:00 2023 GMT
Subject: CN=b022f619-67e9-4cb3-9004-37faafffab87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:a2:06:f8:29:5a:d8:4f:96:da:d9:a9:78:
e1:fa:17:da:9c:c8:e9:b4:51:fa:2d:0e:87:f6:d9:
19:b9:34:9a:58:8c:41:55:49:33:40:6a:84:fb:de:
fe:53:e0:59:d2:b1:c2:1b:5f:cd:10:f1:fe:80:4e:
41:73:82:76:98:73:1c:ac:50:46:7b:b4:bd:dc:17:
f3:07:f5:6c:3a:cd:28:ef:6a:65:07:16:ff:84:33:
5a:1e:85:3d:4f:70:5c:84:ef:5f:97:8f:40:9b:99:
7f:ee:d1:e1:e1:c0:7e:a6:0b:c0:d8:32:b1:d0:20:
12:91:a7:cd:e8:cb:47:7c:cf:f3:4a:48:ae:96:84:
d1:17:9d:ea:6e:6b:22:1e:ab:00:e2:e2:2d:df:88:
5b:77:86:b8:e4:a7:5b:fd:ee:ba:05:47:d7:11:b5:
79:e1:1e:61:d6:9b:4f:5e:75:96:e5:9f:c0:16:22:
d2:91:6d:d4:12:34:17:9e:8d:2e:65:ff:77:27:33:
98:6c:24:1c:dd:ef:40:d3:11:a6:91:8c:91:28:54:
1d:1e:d1:5e:9b:ad:07:45:5c:ab:70:dc:8e:d9:a4:
73:84:5f:aa:03:98:0a:53:a5:8c:89:48:6a:03:c1:
b0:b7:19:36:d3:2b:c5:54:b4:29:07:e7:f1:02:7e:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B6:3B:21:47:AF:FD:F4:29:E6:E1:67:90:B6:10:7D:1F:BC:8C:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f390d918-f5a1-363d-8c71-5d48e6546bee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:10:52:de:95:0c:16:f8:df:44:56:90:83:38:2f:79:8c:da:
8a:80:0a:d9:f7:e1:bd:3b:0f:a4:43:54:a2:11:86:2d:dd:1b:
9b:de:16:e0:d6:65:14:fd:6f:25:ce:92:bc:51:c6:4a:20:5c:
6c:09:34:b3:c2:60:66:7f:d7:98:ba:12:d6:dc:de:78:de:d6:
f6:f4:e7:ab:c4:51:7c:3c:12:b0:7d:f9:45:1d:80:df:09:ef:
ed:a1:ae:af:5a:32:24:2e:dd:71:bb:66:05:51:17:8d:b3:3e:
46:c4:f0:f9:e2:a1:26:ea:16:c2:d3:ab:c1:92:25:70:f1:a0:
c3:8f:cc:0c:10:65:54:34:85:84:7a:6b:11:e1:b2:4b:5b:48:
04:3b:16:ef:3a:ee:bb:9f:de:f7:78:34:95:9e:1e:b2:3c:f3:
f3:40:d1:4f:06:0b:2d:62:76:36:28:ed:54:49:31:45:4b:ae:
49:58:34:ba:ec:b6:11:97:ce:8f:f0:b9:15:4b:39:fe:5e:0c:
f4:90:92:3c:c4:05:ca:85:36:dd:9b:fb:88:08:26:ab:70:98:
93:2c:6a:49:d8:59:de:22:62:eb:ac:19:61:b3:b4:03:fc:9f:
1a:e5:70:f1:72:3f:34:33:ee:3b:bd:ad:69:08:33:45:9a:c9:
78:41:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org