Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/3593ca76-417d-3e1b-ad15-3dd09ebe96e6.roa
File: 3593ca76-417d-3e1b-ad15-3dd09ebe96e6.roa (raw, json)
Hash identifier: qwRU6SsVzJ1Mnm2jeRPg4Hnt4omr1VhoK67UVZMhi7M=
Subject key identifier: EC:D0:A7:8E:D4:FD:3F:69:A0:3D:94:33:64:2D:32:EA:C6:42:D6:2A
Certificate issuer: /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial: 010D0C9F43285848F65BC6FE7033320A318DB800
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/3593ca76-417d-3e1b-ad15-3dd09ebe96e6.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 0
IP address blocks: 2602:fd10:600::/40 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:c6:fe:70:33:32:0a:31:8d:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=241a0e01-f7a4-4742-8bea-5cf63f331104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:0e:31:cd:83:ad:06:3b:ba:98:33:94:81:
42:dd:26:fd:fd:60:ed:b6:e3:65:cc:b1:79:9f:b7:
34:25:6d:ef:27:32:96:dc:80:d1:89:4b:5f:b8:18:
dc:02:fb:ce:70:45:8e:e3:9c:53:ed:2c:5d:ca:7e:
59:70:62:3a:1e:7a:be:f6:b2:20:5e:a8:c6:54:ab:
3e:87:92:3d:b2:0f:42:53:57:9e:b4:8f:02:5f:d9:
1e:98:a7:88:74:3b:b8:99:be:8a:3c:54:8b:6d:f9:
65:a8:00:43:c3:7e:73:8a:e2:2b:a7:4c:15:b0:b4:
34:b4:9f:55:4f:a8:17:92:1f:28:e0:90:8b:c7:bb:
e5:7f:b3:a2:e9:bd:91:29:af:b3:e5:2d:3d:74:93:
6c:bf:a9:49:3c:9b:24:c9:32:85:44:ca:6b:3b:76:
d2:7f:d2:9d:0d:a0:de:3a:56:04:14:07:19:68:b6:
ef:fa:d6:0c:69:6d:33:e2:9c:35:4e:38:de:57:92:
17:1b:1f:b1:16:72:92:58:5e:1a:71:8b:13:d1:23:
a7:de:8b:39:47:0b:5d:4d:70:8c:d9:0d:d3:9f:61:
8c:07:52:d8:5d:47:68:68:e5:1a:f0:60:22:c8:05:
10:be:d6:f2:c1:97:96:91:69:29:40:70:28:8d:49:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:A7:8E:D4:FD:3F:69:A0:3D:94:33:64:2D:32:EA:C6:42:D6:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/3593ca76-417d-3e1b-ad15-3dd09ebe96e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
X509v3 Authority Key Identifier:
keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:600::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:14:b4:1f:96:10:06:e4:4c:88:56:c8:07:dd:6c:74:ed:f6:
90:64:6c:5e:d5:e8:ab:0f:e0:33:7b:20:0b:15:be:f5:18:41:
e8:5e:7c:7e:fe:c6:bd:67:3b:3b:30:18:56:54:a4:51:82:f3:
98:18:00:d3:db:b4:a9:b8:0f:85:14:57:fd:63:d5:3e:11:1e:
f1:f3:00:9e:c9:9e:62:9c:2b:1e:d0:57:86:75:cd:5b:57:86:
fe:1a:ca:72:c7:9c:03:a8:53:e8:5b:f0:f1:5e:cc:69:9d:93:
e8:7c:9a:1a:86:6f:0c:4c:13:58:69:c5:a9:9f:84:0a:56:64:
54:9f:b1:d6:fe:49:d3:c9:13:df:2a:f1:db:18:23:2d:62:ab:
35:e1:21:6c:5c:4f:d2:c5:80:9d:d9:9f:4a:49:98:b0:7e:78:
e3:57:32:cc:4c:2a:a6:e4:c9:02:ab:e8:7a:f8:8b:44:6b:0d:
10:3b:61:60:7f:1a:d1:0b:96:eb:3a:68:93:fb:45:3d:06:a2:
b8:90:6c:58:49:50:b2:cd:a4:d3:b2:31:f3:26:96:6b:f6:19:
69:d5:93:63:da:98:44:e6:c3:e9:01:33:68:b3:b1:92:2c:fb:
72:f5:ea:37:1b:39:9f:4e:b9:5e:93:9f:6f:f2:07:43:df:bb:
5a:83:16:72
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj2W8b+cDMyCjGNuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWVmNzllYjQtNTQ0ZS00NTA0LTlhNmYtZDFkZGZmNWJj
ZDQ1MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
MjQxYTBlMDEtZjdhNC00NzQyLThiZWEtNWNmNjNmMzMxMTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomMOMc2DrQY7upgzlIFC3Sb9/WDttuNlzLF5
n7c0JW3vJzKW3IDRiUtfuBjcAvvOcEWO45xT7Sxdyn5ZcGI6Hnq+9rIgXqjGVKs+
h5I9sg9CU1eetI8CX9kemKeIdDu4mb6KPFSLbfllqABDw35ziuIrp0wVsLQ0tJ9V
T6gXkh8o4JCLx7vlf7Oi6b2RKa+z5S09dJNsv6lJPJskyTKFRMprO3bSf9KdDaDe
OlYEFAcZaLbv+tYMaW0z4pw1TjjeV5IXGx+xFnKSWF4acYsT0SOn3os5RwtdTXCM
2Q3Tn2GMB1LYXUdoaOUa8GAiyAUQvtbywZeWkWkpQHAojUkr/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOzQp47U/T9poD2UM2QtMurGQtYqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWY3
OWViNC01NDRlLTQ1MDQtOWE2Zi1kMWRkZmY1YmNkNDUvMzU5M2NhNzYtNDE3ZC0z
ZTFiLWFkMTUtM2RkMDllYmU5NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVmNzllYjQtNTQ0ZS00NTA0LTlh
NmYtZDFkZGZmNWJjZDQ1LzVlZjc5ZWI0LTU0NGUtNDUwNC05YTZmLWQxZGRmZjVi
Y2Q0NS5jcmwwHwYDVR0jBBgwFoAUdbJ68zRm1GIG+j8mmgiipCB91QIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWY3OWViNC01NDRlLTQ1MDQtOWE2Zi1kMWRk
ZmY1YmNkNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EAYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZxS0H5YQBuRMiFbIB91sdO32kGRsXtXoqw/gM3sgCxW+9RhB6F58
fv7GvWc7OzAYVlSkUYLzmBgA09u0qbgPhRRX/WPVPhEe8fMAnsmeYpwrHtBXhnXN
W1eG/hrKcsecA6hT6Fvw8V7MaZ2T6HyaGoZvDEwTWGnFqZ+EClZkVJ+x1v5J08kT
3yrx2xgjLWKrNeEhbFxP0sWAndmfSkmYsH5441cyzEwqpuTJAqvoeviLRGsNEDth
YH8a0QuW6zpok/tFPQaiuJBsWElQss2k07Ix8yaWa/YZadWTY9qYRObD6QEzaLOx
kiz7cvXqNxs5n065XpOfb/IHQ9+7WoMWcg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:40 2025 by rpki-client