Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f82de070-dbbd-3b72-82a1-9296441fe39e.roa
File: f82de070-dbbd-3b72-82a1-9296441fe39e.roa (raw, json)
Hash identifier: q1whnsAQQQITj+MVBkMIV/Hh4oe1V6blDIME2DieOkQ=
Subject key identifier: CE:E2:A2:14:02:4A:D0:DE:1A:9D:3D:B5:EF:E4:9F:56:22:F1:74:E4
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F43285840373BA335CD7E61422A23C870
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f82de070-dbbd-3b72-82a1-9296441fe39e.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Wed 13 Dec 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:37:3b:a3:35:cd:7e:61:42:2a:23:c8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Dec 13 05:00:00 2023 GMT
Subject: CN=0ec9b7f5-d46b-42a9-ba37-f346d57740ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:73:b5:0d:88:0f:de:3f:8d:a0:b8:60:2f:
de:0d:43:0a:d2:7d:24:db:48:91:00:fb:d0:84:4c:
9e:a5:54:6f:33:38:14:8c:1c:cb:3a:2a:10:7c:e7:
35:31:85:1a:6d:d9:c0:7b:2a:2c:6a:8e:67:81:0a:
d1:dd:6f:4b:a6:bf:31:17:19:d1:76:2c:94:d6:89:
41:c6:f5:04:19:73:a4:76:63:ef:4d:ff:58:03:6b:
f0:1d:bc:41:3a:25:1d:e3:25:a4:55:78:6d:d9:d9:
56:b3:94:5d:bb:08:cb:4e:00:94:93:7f:c9:37:c1:
8e:08:12:c6:c3:78:d4:c7:da:b3:9b:88:e6:94:c0:
f5:e1:bb:38:65:5e:07:8c:01:d8:b2:6a:22:33:07:
1f:d2:c6:ed:16:91:70:73:3d:46:76:50:8c:13:3a:
c9:1c:81:29:dc:52:4b:4b:07:a5:9a:19:e8:e0:7d:
8d:f7:17:64:c3:9f:e4:9c:f4:26:6d:3a:fc:67:1b:
95:70:dc:ce:44:78:ac:57:84:5d:9c:be:83:91:e0:
1c:2e:93:44:c4:ae:39:d8:3e:ad:cf:63:75:0b:84:
e2:66:a6:04:af:3a:8f:bd:c6:b3:f1:29:3b:cc:2f:
3a:ba:ee:f8:d1:a9:34:ad:a5:bc:1f:c4:a9:9a:f1:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E2:A2:14:02:4A:D0:DE:1A:9D:3D:B5:EF:E4:9F:56:22:F1:74:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f82de070-dbbd-3b72-82a1-9296441fe39e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:b9:17:51:c1:40:47:a1:d7:ae:24:e8:19:e1:6e:3d:7a:78:
2c:1e:fa:7a:b2:27:d5:bd:12:2d:2f:38:00:d5:7d:6a:6a:27:
44:b0:21:85:33:91:5d:e3:76:6e:b4:42:0e:86:b9:97:fd:ed:
cb:37:57:5f:1c:10:4f:d8:26:b3:08:e6:7e:2d:95:c8:f5:eb:
53:3d:d6:04:7c:d1:7b:e4:b9:3b:bf:34:2c:e2:8e:88:5c:f2:
8b:76:6a:43:c1:93:f7:5a:03:a2:ce:07:37:de:ea:69:06:9f:
cf:e0:7b:14:5a:be:64:b5:62:e7:b3:68:aa:b7:95:c8:73:57:
bd:71:b9:9c:ec:fb:0a:27:0e:79:60:3d:5d:05:b9:da:d0:85:
8a:87:e5:98:a2:a7:28:2f:e3:26:af:c2:67:07:83:2e:3d:f7:
9d:e2:95:fe:71:64:91:6f:33:f4:2d:7b:e0:12:af:c2:fc:c6:
e6:6c:07:4a:61:92:d3:34:86:c3:d5:fe:80:16:a3:69:7e:78:
23:80:60:71:ea:f2:e9:ac:59:86:85:5f:e4:48:b2:2e:7e:98:
a4:c0:e1:38:f6:a6:75:2b:4d:de:08:c3:85:c1:4f:de:96:e6:
3b:25:43:5a:3f:14:de:76:15:d1:f4:e1:2b:6d:54:f2:02:ec:
e7:f2:7e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:59 2025 by rpki-client