Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ff57b5ac-dcd5-3415-8754-eacf1a8ef089.roa
File: ff57b5ac-dcd5-3415-8754-eacf1a8ef089.roa (raw, json)
Hash identifier: l7/gLeGA1IpE0ESY2M2eFXVYE0kik18exhA1OjJyKOU=
Subject key identifier: 38:95:8C:DF:4D:E8:28:55:F2:B7:59:37:88:A9:85:92:8A:43:02:93
Certificate issuer: /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial: 010D0C9F4328583FD033A1215DEC3CF1EEA840A0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ff57b5ac-dcd5-3415-8754-eacf1a8ef089.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Mon 06 Nov 2023 05:00:00 +0000
asID: 3970
IP address blocks: 2620:9e:6001::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:33:a1:21:5d:ec:3c:f1:ee:a8:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Nov 6 05:00:00 2023 GMT
Subject: CN=a2948cf0-9196-4724-be7e-3faa2a31acfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d8:86:d4:6a:99:56:15:2b:0f:98:df:cb:23:
97:b8:69:3b:f6:88:ee:d4:20:4a:58:33:35:a7:f3:
84:93:59:af:49:1a:6f:4d:67:a6:ac:6a:07:e9:df:
77:6d:05:8c:3a:2a:74:d3:75:27:16:2c:11:8c:52:
c6:6a:1f:f9:89:43:5f:01:e1:fa:a4:75:0c:57:b4:
54:47:1b:0e:cb:c0:d6:d6:82:02:a1:f2:ae:2c:5c:
fc:f0:a8:17:21:26:a6:04:9a:14:5c:80:8c:7a:bc:
02:47:aa:68:c0:14:75:66:75:41:13:d6:d7:28:92:
0e:23:41:0d:1c:79:7d:1c:bd:54:c6:d0:35:0b:a4:
a7:f3:9a:eb:eb:2c:73:0c:2e:bf:13:65:b0:47:5a:
ab:b1:4b:54:f1:1f:57:6a:03:48:23:bf:a2:f9:67:
03:94:95:09:7e:da:53:3e:ee:21:51:e0:47:1f:a8:
73:d6:08:ad:ab:f7:a5:e8:61:ad:f8:82:d3:8a:48:
9b:99:ea:cb:d8:43:01:de:08:bd:d3:20:41:c5:ea:
a3:95:db:66:ec:af:a2:01:89:d9:ec:c1:ad:3b:2d:
09:76:85:3c:b9:26:28:e0:49:fc:31:be:94:ac:5c:
5b:e6:ff:34:c6:b3:05:0c:5c:49:35:67:1c:3d:e3:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:95:8C:DF:4D:E8:28:55:F2:B7:59:37:88:A9:85:92:8A:43:02:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ff57b5ac-dcd5-3415-8754-eacf1a8ef089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl
X509v3 Authority Key Identifier:
keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:9e:6001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:25:88:9b:06:19:13:36:09:a8:fc:5c:ca:1c:ad:05:74:9b:
df:96:37:a1:93:0f:19:3c:44:d2:20:86:db:29:03:de:a2:81:
10:35:8d:09:cf:5a:85:76:f6:1e:91:1a:61:a2:3f:ec:f5:ce:
65:82:d8:c1:bc:8e:ef:3d:b5:d5:eb:03:14:77:08:fa:b8:73:
f4:62:82:20:2f:6f:96:de:b3:ac:07:ae:30:4e:25:91:d1:23:
84:24:b7:76:d7:41:d2:b6:2a:54:d9:0f:13:07:04:94:f8:0f:
d4:7c:4d:64:d0:7d:1c:30:bb:a2:24:58:46:07:07:10:4b:f3:
8a:86:9b:87:ec:49:49:27:da:b5:b9:6a:8e:a8:0c:71:81:34:
49:14:b7:d2:eb:8c:fa:77:4f:bc:d3:a9:7e:e2:0c:61:30:25:
85:b4:7f:50:e4:c1:b3:50:36:4e:eb:b0:69:81:c7:3f:9f:ed:
49:7c:31:ed:00:2b:1b:25:70:e8:5b:2e:05:0d:a9:3b:5a:2c:
6b:56:67:76:4f:0a:bf:c4:7b:68:98:5a:02:df:2f:45:f2:b2:
c4:4e:2f:a2:c2:ac:7a:aa:25:29:6f:78:ca:5d:af:23:05:ba:
4f:01:1a:d0:25:50:6b:67:19:ae:3f:2e:4c:cb:bd:e9:85:55:
d0:28:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org