Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/433732bb-9cac-3c17-8337-8b9e5f365a48.roa
File: 433732bb-9cac-3c17-8337-8b9e5f365a48.roa (raw, json)
Hash identifier: cIyruRtkac94hMUKwPQU202EUeUdyGtB/2vUH74nDlI=
Subject key identifier: 84:F5:62:A8:D3:85:47:31:01:02:1B:02:8B:4B:27:A6:D2:42:FD:21
Certificate issuer: /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial: 010D0C9F43285846F8C04AE420936B904FDC88A0
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/433732bb-9cac-3c17-8337-8b9e5f365a48.roa
Signing time: Fri 23 Aug 2024 13:00:41 +0000
ROA not before: Fri 23 Aug 2024 13:00:41 +0000
ROA not after: Thu 21 Nov 2024 14:00:41 +0000
asID: 54885
IP address blocks: 2620:63:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f8:c0:4a:e4:20:93:6b:90:4f:dc:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Validity
Not Before: Aug 23 13:00:41 2024 GMT
Not After : Nov 21 14:00:41 2024 GMT
Subject: CN=1fe1f6ff-2d1e-4241-8b9e-e8525b8b9d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:13:68:83:7a:d0:88:d9:5c:f6:26:ab:41:6c:
b3:0c:03:e7:1f:01:7a:4e:ff:05:8d:2d:78:31:38:
2d:c1:7f:4c:62:be:94:39:de:30:8d:84:af:7f:9f:
ed:c4:24:ed:38:70:c5:9c:fd:55:e8:00:be:6c:1f:
c6:1a:a4:b5:2e:15:cb:45:40:30:d1:3a:3d:f3:f9:
d5:4a:0e:d4:3a:61:76:83:9f:54:7a:dc:29:fe:d4:
36:9b:d7:28:2f:87:46:0a:1a:6a:db:7c:a5:d4:94:
0c:15:7c:78:5d:5e:a8:c9:f3:25:56:3a:60:95:60:
82:c8:5b:4a:27:bb:a1:7e:5b:4d:9e:85:2c:4d:7a:
4c:76:37:e1:4e:ed:0c:23:01:99:15:4d:33:e1:85:
13:25:eb:b7:4f:6b:80:28:d6:5b:3a:e3:7c:d7:c7:
d5:04:32:21:a3:10:46:aa:e9:77:6a:c8:ce:a8:80:
59:73:59:59:ec:92:d1:2b:07:89:08:35:26:ce:38:
69:b8:c8:ea:7b:c8:8f:45:3a:1f:52:bb:17:f0:d5:
8d:a8:76:b1:ee:b1:3a:d3:f1:4c:71:66:34:cd:22:
12:0d:12:33:eb:02:8f:7b:c4:15:39:99:5c:a1:bf:
da:8f:ec:2f:8a:a4:48:db:0d:f7:87:70:93:7a:92:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:62:A8:D3:85:47:31:01:02:1B:02:8B:4B:27:A6:D2:42:FD:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/433732bb-9cac-3c17-8337-8b9e5f365a48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
X509v3 Authority Key Identifier:
keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:63:8000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:50:55:b0:57:a9:c5:95:1c:14:d4:87:30:a0:b1:4f:0b:1e:
75:d7:cf:e9:e5:c1:63:d2:af:2c:6d:a7:71:8c:a5:3e:e9:3f:
9d:5b:c6:7b:be:0a:02:3c:1c:c3:7c:ce:b1:65:ba:4b:b2:30:
e9:a1:e2:f8:24:46:01:b4:e6:58:5f:c6:2d:bb:78:e6:a1:c7:
23:a6:0f:5e:51:25:27:62:db:c0:d1:50:8c:96:23:22:9d:36:
49:3d:96:09:b4:81:56:5f:a1:cf:2d:11:d4:e3:a0:d0:1e:7a:
bc:ff:21:dc:27:12:2a:dd:9c:2a:60:84:e4:d0:35:02:00:3b:
f4:3f:93:49:1e:68:e9:39:e6:82:da:8b:ba:f0:64:27:6b:7e:
87:b3:73:1d:a9:0e:ff:87:4e:03:f0:84:ae:b0:f0:53:08:57:
d0:2a:1c:36:6d:db:e5:a0:6f:a6:1a:1f:b5:cf:73:1b:eb:61:
b2:36:62:26:a3:68:9c:0e:67:ab:ac:17:77:40:6a:8b:24:56:
12:b4:8f:ef:45:c4:c5:ef:02:65:5b:2b:34:b6:f0:f9:42:b3:
a3:31:de:bd:a4:58:3b:9b:d2:a1:6a:bf:22:80:a4:d2:5e:79:
0a:5c:84:ae:7d:13:d1:21:29:a4:6e:67:72:e6:b6:55:b2:fa:
ca:bc:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 20:11:57 2024 by rpki-client on console-ams.rpki-client.org