Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/1042b9ff-9534-3a61-b354-936a9d631c08.roa
File: 1042b9ff-9534-3a61-b354-936a9d631c08.roa (raw, json)
Hash identifier: 6JnKHwhsyL0oYPkliX9BMiX1MjOD1QqCSkzwGI5OVFs=
Subject key identifier: A1:A5:C8:71:1F:C7:A0:23:C1:FD:2C:4F:F7:3D:67:36:00:ED:91:45
Certificate issuer: /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial: 010D0C9F43285848F65BD4693514EE5E8EB52AC0
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/1042b9ff-9534-3a61-b354-936a9d631c08.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 0
IP address blocks: 2602:fd10:200::/40 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d4:69:35:14:ee:5e:8e:b5:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=1bc3231b-d9ad-41e5-bd18-183dba7832e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:60:0d:14:ef:17:3e:c1:d9:bd:b2:75:d0:
62:f1:30:bc:f6:88:43:0a:18:dd:71:da:b4:de:b5:
df:02:09:e0:49:c5:a2:a5:a0:84:7d:60:03:48:d0:
89:e4:1f:eb:3d:a0:c2:32:f2:8b:e4:77:09:bd:5c:
f3:05:ca:46:10:f1:f7:bc:35:9e:61:39:7b:b3:23:
4d:c5:c6:d0:d1:9c:54:07:48:96:67:aa:35:5d:3f:
57:b0:4f:5e:bf:04:ea:29:ab:dc:bb:06:7e:8f:b7:
8e:b9:36:95:f0:e3:a4:6d:1f:70:f7:b2:04:29:72:
75:e3:31:59:f8:a2:06:85:00:01:f9:0e:6e:78:0e:
1a:22:b8:ca:3c:31:ee:c4:03:08:55:49:9e:8d:25:
ab:77:e5:0a:f0:1b:9f:8d:cc:23:b1:a5:01:ce:f9:
c7:05:5a:1e:22:c1:f8:48:0c:55:f5:fa:87:37:8a:
94:6d:50:60:63:13:b3:77:5b:e4:62:da:e3:60:20:
6f:e0:21:89:3e:53:00:f4:dd:3b:e3:9e:eb:e5:85:
29:82:68:00:35:d7:e4:f6:1e:26:c4:be:24:8d:20:
62:ab:cd:11:81:b9:35:a7:af:a0:d5:67:d6:c8:13:
f8:3e:2e:86:76:c6:e3:70:c2:a7:7f:44:30:47:aa:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A5:C8:71:1F:C7:A0:23:C1:FD:2C:4F:F7:3D:67:36:00:ED:91:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/1042b9ff-9534-3a61-b354-936a9d631c08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
X509v3 Authority Key Identifier:
keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:0c:2e:f8:f7:c9:87:d3:c2:9d:e0:4b:f4:fd:00:e6:be:d3:
e9:43:fa:e5:91:fc:34:09:bb:db:5e:8f:87:f7:1c:ff:a0:d0:
e3:b1:2e:59:54:ab:b6:85:55:c2:bf:63:05:6e:3a:bf:38:69:
88:bd:f2:33:68:5c:a4:59:6e:fe:4e:66:fe:c8:2f:66:4e:37:
7e:46:51:7f:71:32:95:9e:2e:05:b7:44:26:31:de:92:35:88:
af:24:d0:17:40:72:8c:95:d4:24:63:fa:c7:4b:d7:f8:e6:61:
6e:3f:be:37:77:01:2d:c9:9d:cf:29:cd:eb:03:71:53:e0:89:
68:13:72:30:b8:67:36:27:4b:7c:8c:6d:ac:16:1e:00:f5:73:
24:45:d2:f8:f1:1e:ab:b7:5b:99:c2:a4:07:4e:7e:9c:b5:56:
a6:77:aa:56:c1:fd:bd:81:10:12:f4:be:15:29:0d:70:6b:83:
de:67:38:6e:ac:8d:5d:c9:4e:6a:70:d9:8f:60:ca:a2:c9:63:
63:17:34:f8:51:b9:a7:62:10:12:cf:9f:1d:5a:6f:26:cb:f0:
a4:90:74:49:db:cd:11:f1:01:cb:00:86:6b:8f:cd:a1:e8:78:
78:a7:cd:c3:75:ee:d3:3a:ce:e4:30:71:49:eb:19:b2:e8:c5:
b4:48:5c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:41 2025 by rpki-client