Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f93432c4-a025-37d6-a4d2-1fae353fa8f3.roa
File: f93432c4-a025-37d6-a4d2-1fae353fa8f3.roa (raw, json)
Hash identifier: aT3yFFXpl/EKnK675CBDvB78QN0jnFM0t5ZAp+DBdL4=
Subject key identifier: 34:F2:DC:8F:51:00:66:47:AC:61:74:30:50:AF:84:88:1F:99:4A:26
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583ED4A8886B4720491E56011F80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f93432c4-a025-37d6-a4d2-1fae353fa8f3.roa
Signing time: Sun 07 Aug 2022 12:00:00 +0000
ROA not before: Sun 07 Aug 2022 12:00:00 +0000
ROA not after: Tue 08 Aug 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:d4:a8:88:6b:47:20:49:1e:56:01:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Aug 7 12:00:00 2022 GMT
Not After : Aug 8 04:00:00 2023 GMT
Subject: CN=cafaa287-7e3e-4bb4-9899-1aae8dd3285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5f:ff:ab:fb:fe:73:18:7f:c4:3c:3c:28:d7:
ef:66:c5:e1:60:1d:11:c0:fd:60:5b:5a:d3:37:55:
18:39:9a:bb:b3:2a:23:0c:ff:1a:2e:2c:8c:ad:62:
42:5c:b2:3e:a4:dc:22:74:f1:3e:cb:51:09:d8:4b:
4b:37:47:67:af:7e:f2:23:80:02:30:dc:d9:b4:36:
12:34:27:2e:52:8c:05:fe:c2:97:ff:a3:26:12:43:
54:52:cb:91:8f:1e:48:6f:e1:7e:d0:10:4c:16:0a:
34:26:8c:58:5e:0e:48:5c:8a:3d:80:e7:db:05:80:
41:15:8f:b6:73:6b:a4:91:27:eb:e4:38:e2:bf:05:
46:0a:90:b9:98:5b:e0:04:21:62:b6:22:cc:1b:4f:
e5:d2:c7:da:2d:fb:19:d0:48:d9:b1:26:92:59:e2:
70:b1:38:95:87:94:fc:e1:4d:3d:90:d5:08:11:4c:
6e:f9:4c:56:08:04:a9:0b:57:8e:ae:b9:87:1c:1e:
8c:b6:81:20:81:cd:24:d8:04:c6:f2:bc:45:4c:1b:
43:6c:6f:74:3e:c2:00:8e:34:ca:12:e3:c7:eb:c0:
4f:93:c4:3a:4b:a2:2d:a2:9c:36:c6:46:c1:65:65:
c0:0f:88:3d:08:b4:76:d4:88:2e:94:55:46:dc:19:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:DC:8F:51:00:66:47:AC:61:74:30:50:AF:84:88:1F:99:4A:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f93432c4-a025-37d6-a4d2-1fae353fa8f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:aa:b0:cd:57:75:3f:1f:34:9b:45:50:e0:02:65:18:38:08:
67:a5:52:26:50:c9:e1:88:90:39:40:92:04:98:3e:c9:68:ba:
d8:3c:02:bb:7b:86:12:45:e9:c1:29:84:e9:47:ea:bb:e1:17:
d8:62:08:f1:4a:f3:0b:de:47:76:92:ba:70:15:fe:f3:e7:cd:
e6:39:91:4f:70:ca:16:cd:29:98:c2:d3:61:f6:13:15:e8:7d:
a1:32:59:c0:99:d1:56:93:e5:75:21:5c:25:5e:60:df:38:b6:
a4:e3:dd:36:c0:bd:25:9a:ee:b8:76:8a:66:35:26:56:44:ea:
54:43:a3:d7:1f:ea:40:f7:19:56:ce:c1:4f:fd:3d:e3:65:50:
ab:f1:97:2f:db:6b:8f:62:c3:12:c1:24:21:28:7d:f3:cd:8a:
e3:c2:4d:3c:67:6c:33:f5:5a:73:a6:28:c6:fa:36:a4:89:4b:
4a:ab:c2:90:71:b0:09:44:b9:7a:1f:c5:86:8a:47:8c:12:cb:
c5:d7:b9:a3:ca:31:37:10:d0:de:a3:f7:50:c7:c8:5b:1a:3f:
5c:ab:24:60:3f:e1:ad:5f:0c:a5:2a:4f:1f:e0:e6:a2:a1:5e:
0b:08:c0:33:05:41:d6:be:e8:10:44:fd:01:c4:af:5a:dc:8a:
52:9e:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org