Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f7af418f-e8d3-34dd-a906-3491fa7cfd9e.roa
File: f7af418f-e8d3-34dd-a906-3491fa7cfd9e.roa (raw, json)
Hash identifier: y6WitVLHSG7oT5tlI7olkeukoZI5NqAXWmV3TL8pnOE=
Subject key identifier: 8E:43:03:B0:D9:4E:0D:E6:1F:08:16:9E:9F:D4:80:1B:58:FB:26:1A
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583DD7084578035E12A9CD374F80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f7af418f-e8d3-34dd-a906-3491fa7cfd9e.roa
Signing time: Sun 08 May 2022 12:00:00 +0000
ROA not before: Sun 08 May 2022 12:00:00 +0000
ROA not after: Tue 09 May 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d7:08:45:78:03:5e:12:a9:cd:37:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: May 8 12:00:00 2022 GMT
Not After : May 9 04:00:00 2023 GMT
Subject: CN=a6fa2a33-3306-4363-a6bd-1dfb8c9130c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:4a:70:65:09:82:0b:1a:a7:f3:6b:6b:ee:
e8:c9:88:17:3d:71:77:9c:ce:4b:0d:5a:c4:d4:4b:
9f:28:99:61:b4:fe:72:10:91:60:77:b3:d9:96:5a:
38:4b:f1:97:32:c2:f1:b6:88:57:93:7f:15:ca:ea:
7b:ac:0b:78:0a:de:7a:6d:5c:0f:e9:2d:9a:6a:85:
1d:63:0a:36:87:08:d1:95:49:ca:d8:61:d8:69:f2:
da:04:1d:12:28:fb:ec:bb:0e:4a:06:f6:6e:13:fb:
17:ee:9c:1b:ef:8b:f1:53:09:e4:0c:67:55:65:8b:
cd:d5:c6:ff:1a:b8:ef:f7:51:98:a6:a6:33:35:52:
fd:b5:48:94:67:18:f7:1d:2d:2c:76:f4:2e:60:4d:
32:05:c7:6f:71:72:ab:14:32:2f:30:11:48:0e:25:
66:ed:70:e4:f8:24:48:d0:06:60:34:12:c8:3c:29:
cf:e6:55:c0:2c:e4:0e:0c:6b:5e:a3:8d:f3:f9:7e:
d8:9c:4c:54:1e:56:12:66:16:cd:03:ee:9f:8a:8e:
05:7f:d9:a3:47:3d:c4:0d:e4:79:08:59:d4:cb:62:
f9:29:c6:ad:47:33:28:96:15:f5:bc:89:73:97:e0:
de:76:56:25:a6:eb:85:cc:4c:05:a6:f4:0a:3c:c2:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:43:03:B0:D9:4E:0D:E6:1F:08:16:9E:9F:D4:80:1B:58:FB:26:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f7af418f-e8d3-34dd-a906-3491fa7cfd9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:6a:4e:b8:70:9b:27:c1:a4:8a:88:56:ac:46:1b:a8:27:64:
9e:a0:0a:87:99:a1:d5:a3:83:3a:13:44:15:b7:41:0d:75:f7:
76:7b:67:db:00:0e:2c:f2:5d:96:a1:11:82:ab:a9:5a:b3:e3:
53:03:9f:17:d0:49:de:32:66:77:cf:9f:25:13:c4:5c:46:3a:
52:ea:ae:17:27:5e:d2:9c:8e:e7:2c:3d:a0:f3:5c:f4:69:70:
8b:12:ec:77:87:77:2d:6b:f6:9d:09:7e:24:65:76:b3:18:bf:
74:b5:6c:9d:72:b7:ce:c5:50:57:66:da:08:7b:be:80:4c:04:
de:1d:27:0f:06:52:90:25:2c:14:6f:c7:02:35:82:58:5b:9f:
7f:50:c3:ff:6a:c9:4f:1e:9a:5e:c3:29:04:a2:60:ae:94:7f:
ca:b6:24:e5:ba:f6:e3:0b:ea:c5:e6:20:67:60:92:1b:8a:30:
c8:5a:81:23:7f:13:db:74:19:b7:59:26:66:50:12:88:47:f0:
c6:b2:09:d2:94:25:5b:ef:9f:fd:58:73:2f:21:5b:1e:9c:7d:
80:2c:8c:79:e7:69:bb:eb:09:f6:24:32:96:7b:06:6c:54:96:
61:20:d0:f9:24:82:f5:3c:36:8f:a2:23:4f:1d:2e:a1:bb:ab:
47:d5:52:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org