Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f9f532ff-1d0a-3938-8584-a7a266b202dd.roa
File: f9f532ff-1d0a-3938-8584-a7a266b202dd.roa (raw, json)
Hash identifier: EJmYnqTTHP4mjJgzhEXajmzjmJDRmJ9ru/2MVv6/XtI=
Subject key identifier: E4:15:E3:E7:96:44:61:77:BB:A1:66:E5:AB:D0:5B:35:C7:D9:69:2F
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583D7254F7BA0AC3DDAC31467F80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f9f532ff-1d0a-3938-8584-a7a266b202dd.roa
Signing time: Sun 03 Apr 2022 04:00:00 +0000
ROA not before: Sun 03 Apr 2022 04:00:00 +0000
ROA not after: Mon 03 Apr 2023 04:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:72:54:f7:ba:0a:c3:dd:ac:31:46:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Apr 3 04:00:00 2022 GMT
Not After : Apr 3 04:00:00 2023 GMT
Subject: CN=e832b502-c216-4e8d-96cf-65e93d719231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:73:fa:c0:5a:e8:6c:3f:0c:72:49:52:79:
5d:15:7b:49:83:0c:5c:6e:c4:8d:61:de:8b:af:72:
e1:64:c4:10:16:47:78:e7:7a:f4:a4:88:ff:20:76:
6f:f2:1e:3c:fe:eb:6e:e1:e9:f0:34:98:2a:62:32:
88:78:1e:71:33:ff:b3:48:dd:5f:00:a3:0c:8f:bf:
02:31:a5:2e:ff:bf:12:aa:f3:d0:84:4f:26:3f:35:
33:fe:bb:a7:42:83:28:35:fd:67:8e:43:60:04:ed:
fb:2a:5c:0d:11:14:a5:80:14:cb:c5:af:35:42:65:
91:68:0b:e0:90:98:4e:40:9b:78:d7:ef:c1:20:66:
c7:98:30:f7:b1:ff:42:f2:37:cf:14:c3:23:18:e5:
3c:84:07:5f:e8:d7:3c:39:61:07:46:e8:b9:1f:74:
4a:00:9b:31:76:db:19:ba:88:1e:20:3a:c7:0a:96:
1a:a1:4e:bf:fd:b4:8d:36:8c:1d:cf:52:c8:85:39:
89:9a:5b:6d:58:20:96:87:89:a2:d6:9e:a5:86:07:
ec:3d:00:0f:ab:b9:9f:58:c6:16:ac:4b:14:df:39:
7c:05:52:cb:1b:ac:63:1b:f8:8e:5b:37:f5:9b:2a:
85:a0:dd:13:da:56:19:2f:94:a3:a8:4e:34:b9:8c:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:15:E3:E7:96:44:61:77:BB:A1:66:E5:AB:D0:5B:35:C7:D9:69:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f9f532ff-1d0a-3938-8584-a7a266b202dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:bb:43:05:29:41:90:e7:eb:8f:9d:26:06:c7:2c:90:b6:6c:
bb:a6:05:b8:16:52:68:eb:4e:f4:50:61:c4:26:99:60:49:89:
41:d8:73:08:af:54:9b:8e:fe:a0:9e:73:d5:c7:b1:80:0b:11:
92:4b:98:2e:cc:5d:50:36:b1:b4:37:12:0c:12:6c:a1:c8:18:
dd:b3:c0:75:e2:43:0b:32:d5:04:6b:2b:14:09:3c:46:d0:70:
5c:ca:b7:0a:a5:e2:2d:07:0f:23:59:70:3c:04:52:eb:5b:bc:
38:6c:7f:04:7c:78:68:1a:60:db:c4:5e:6f:b5:97:20:dd:8d:
06:14:8d:1c:b0:cf:6c:be:9a:56:d5:18:27:25:0d:ec:03:e9:
9d:c7:f6:93:6d:0c:e2:6b:03:d5:40:48:0c:9f:8b:55:92:86:
4d:53:52:86:68:cb:c4:3f:52:ed:ff:a2:1e:4c:32:1b:8c:4e:
90:5d:76:3b:bd:25:bf:21:b1:2a:b9:02:66:23:f1:34:21:56:
aa:b3:e2:14:a8:31:6c:53:c6:ef:fa:c7:91:7f:2e:73:90:12:
1d:d4:bc:9c:13:88:24:29:6a:a2:72:9a:d0:f3:6a:cb:5d:21:
e3:f0:7f:b6:6c:e7:fc:5e:86:9d:0d:b6:29:32:f3:08:9b:19:
0c:5a:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org