Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/793b4345-6ccd-3719-9d81-e1584765239e.roa
File: 793b4345-6ccd-3719-9d81-e1584765239e.roa (raw, json)
Hash identifier: cAVILMTMs9fvyQisuRDG/fUzOcn5D1uXv2+uHa7uzGU=
Subject key identifier: 43:61:2C:81:D6:D1:37:86:86:38:85:53:29:F7:CA:58:6E:80:16:FA
Certificate issuer: /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial: 010D0C9F43285848F65BD4A2AC7DA695ED5A3C00
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/793b4345-6ccd-3719-9d81-e1584765239e.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 0
IP address blocks: 2602:fd10:f00::/40 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d4:a2:ac:7d:a6:95:ed:5a:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=646b5981-72d5-4706-874d-6866027b16c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:bb:26:d7:12:0b:8c:ec:68:cb:8d:64:8e:
b7:98:9c:b1:be:09:7b:83:ef:10:e9:41:6f:d1:91:
5e:91:7d:72:ed:b1:e6:bb:19:19:d8:46:8e:36:08:
1a:2a:4d:ba:a6:92:87:84:28:c4:e4:81:95:34:d9:
7b:2e:cb:53:17:22:f0:81:b1:a4:0e:b8:44:36:e5:
c3:91:18:d5:68:b6:41:38:1b:5f:14:95:85:67:ee:
3a:26:ac:fc:6d:ea:d6:09:1b:1d:08:d0:94:67:46:
ca:52:0d:a3:36:0f:1d:a4:c1:a4:d0:6e:d4:47:03:
bf:07:ff:61:e9:31:ec:77:14:f4:a7:a3:c9:6b:cf:
76:70:72:a2:74:82:3b:be:83:a7:a4:c7:d3:eb:c3:
98:ee:eb:93:ed:9c:7a:cc:b8:06:80:56:13:26:80:
bb:ed:c7:7e:1c:72:0b:a3:15:1f:9d:9b:4e:bd:65:
e4:cd:47:2b:04:84:f5:f5:05:98:62:94:92:dc:89:
59:05:64:5e:4e:7e:c8:55:7f:67:40:d1:42:93:fc:
03:3f:35:a1:72:6e:3e:4e:84:a8:e2:91:d5:09:50:
2d:21:e4:2b:f8:34:86:2e:62:76:00:d0:92:eb:42:
66:a5:bb:ab:2f:bc:b0:7f:bd:0a:a1:d0:63:2d:88:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:2C:81:D6:D1:37:86:86:38:85:53:29:F7:CA:58:6E:80:16:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/793b4345-6ccd-3719-9d81-e1584765239e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
X509v3 Authority Key Identifier:
keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:f00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:5b:3d:80:94:73:84:f2:d9:a7:86:cd:26:62:80:98:db:9a:
e8:4e:c7:d8:69:e8:e9:c7:6d:2f:06:20:f5:78:4e:35:8e:6b:
a2:72:5d:cd:c6:e9:0b:4d:42:a7:5a:33:d3:dd:4c:5a:e7:35:
d9:bd:7d:0f:9c:be:8b:26:f1:0b:63:e0:7b:20:b7:11:a2:55:
a8:05:1e:f0:43:ac:50:33:aa:a6:e1:10:d1:60:b4:e4:61:bd:
51:c3:bf:d2:e9:f2:46:69:65:0b:3a:9d:00:71:6d:9e:f4:19:
8d:30:97:e7:a2:b6:35:03:d2:5f:53:e3:c6:86:86:54:2c:9b:
33:06:93:60:80:9f:c2:1c:de:1f:48:ea:f7:bb:ac:f6:46:94:
f0:96:e0:e7:c2:08:93:8f:96:a7:05:de:38:20:75:94:8a:04:
f5:4f:cd:b7:6c:17:5f:59:20:c8:4f:9d:70:46:8c:7c:72:f0:
ab:1e:da:c6:ef:b2:c7:a4:ee:b1:4f:b7:6f:f1:55:11:8a:ec:
c1:44:f2:91:14:6b:8d:f2:5a:c9:c5:b3:b6:20:d5:f8:88:f9:
29:43:62:62:fc:cd:fc:27:a6:c3:df:d3:78:9a:42:71:01:10:
8c:4a:a0:5a:22:52:88:b9:74:c2:1f:49:48:c3:51:18:46:88:
29:2f:2d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:32 2025 by rpki-client