Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/8c614e03-65f6-3016-bea3-5135bdcb7b58.roa
File: 8c614e03-65f6-3016-bea3-5135bdcb7b58.roa (raw, json)
Hash identifier: DHPilKrYhLJR1TF5dLgGhoIyleT6kRq7bGkZkaHhFSc=
Subject key identifier: 14:8D:7A:07:2E:09:6A:BD:A5:DD:61:66:2D:52:4B:99:F0:E3:67:FE
Certificate issuer: /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial: 010D0C9F43285848F65BC74091B3B0CB4E493C10
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/8c614e03-65f6-3016-bea3-5135bdcb7b58.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 0
IP address blocks: 2602:fd10:d00::/40 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:c7:40:91:b3:b0:cb:4e:49:3c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=6c40b1b1-0596-4d95-a8ad-4006d5772b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:5b:a7:dd:5a:c7:eb:60:22:5c:ea:ad:ee:
68:eb:f2:79:91:05:e7:87:54:83:70:ca:07:bb:b2:
79:d3:33:3c:bd:f2:ac:4b:96:01:24:d8:75:9a:68:
1e:ab:1b:c6:23:86:bb:59:9f:57:40:26:ef:63:1b:
e0:89:84:76:3e:2b:98:e2:4d:ee:68:59:dc:91:7f:
cc:ee:53:a5:f7:92:bd:73:c7:f9:98:02:53:5c:5e:
27:6a:85:95:5a:53:ff:75:31:c1:74:08:67:f1:07:
69:42:bb:88:a1:cc:eb:49:53:af:63:e8:a8:da:28:
1c:36:af:2a:5a:03:0d:95:c1:da:4e:7b:7f:cd:85:
ee:0a:76:75:d5:4b:c3:a1:10:5f:1a:5f:6c:b8:37:
75:8a:df:aa:13:cc:b8:fc:3d:4c:49:bc:46:40:61:
f8:10:3b:af:63:69:ae:6f:48:11:3e:ff:8e:47:23:
bd:61:a9:6d:a3:b1:a5:55:2b:3c:fc:11:a7:b8:66:
bc:8a:97:31:20:cd:bd:fc:32:d3:cf:32:13:5a:96:
db:ca:07:4a:1b:31:ba:d9:c1:59:0f:30:19:c6:0a:
af:82:6a:c3:41:54:37:e3:d6:94:72:9d:48:1e:80:
8d:6e:57:8d:fa:24:8f:8e:09:a4:77:03:df:b1:b2:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:7A:07:2E:09:6A:BD:A5:DD:61:66:2D:52:4B:99:F0:E3:67:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/8c614e03-65f6-3016-bea3-5135bdcb7b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
X509v3 Authority Key Identifier:
keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:d00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:e2:98:c5:20:63:b1:21:a1:54:df:f1:f0:ee:af:7c:6e:9b:
f6:83:bc:7e:88:23:49:90:0a:22:d8:2f:cb:ae:49:ad:e1:01:
e9:f5:ad:e4:aa:c5:9a:91:b7:e0:ba:70:b0:2d:5b:54:a7:d6:
1a:d0:d0:b3:47:52:a2:95:b9:57:73:0b:e0:f7:ed:06:c8:43:
5e:78:8a:5a:90:2b:fb:73:96:bc:2e:3d:1a:02:7f:a7:1c:ef:
01:ca:f2:9e:d4:52:89:cf:36:97:c9:f0:f3:f5:e3:cc:b8:5e:
0d:e3:e7:59:c7:39:86:56:78:2c:13:f6:7b:37:8c:f9:53:dc:
22:df:ba:75:2e:0b:1d:38:21:15:18:31:1d:b2:ff:3a:a8:60:
af:84:82:35:e7:44:dc:29:ab:db:0d:78:7b:06:a8:b8:e1:5e:
42:67:f5:fd:34:96:4e:fd:2a:8e:a3:5c:0a:59:29:81:ed:57:
8f:78:2d:3b:31:dd:d9:e3:5f:65:ed:b6:08:f0:50:de:4d:b5:
95:6a:bc:dd:ab:4a:af:b3:16:7f:d6:fa:f4:cc:b8:c1:02:37:
51:11:10:02:bd:48:e5:ca:97:ee:89:58:a1:5f:5c:20:4c:9e:
74:67:d9:ba:9a:ad:e8:b8:9d:c4:87:66:a3:64:32:3e:2b:8d:
5c:20:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:29 2025 by rpki-client