Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/f1631a4b-e9a7-3001-b6fc-733c542dcefd.roa
File: f1631a4b-e9a7-3001-b6fc-733c542dcefd.roa (raw, json)
Hash identifier: VsmEC390LYNAWcuc3XQXkHddXEtpVSPY4w3EGiCVJDI=
Subject key identifier: 75:A6:3F:A0:61:FB:8E:7E:89:B7:C0:AA:82:F1:77:BE:B4:6E:B7:41
Certificate issuer: /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial: 010D0C9F43285848F65BC6E01D8958AB82B05380
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/f1631a4b-e9a7-3001-b6fc-733c542dcefd.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 0
IP address blocks: 2602:fd10:500::/40 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:c6:e0:1d:89:58:ab:82:b0:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=de215068-09b4-43ef-b57a-3145be63a9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:98:f1:8b:af:c8:d6:6d:28:b2:d9:87:b9:
fb:9b:00:7a:4c:74:f1:22:f6:c6:d2:45:8f:f6:6d:
3e:bb:db:2f:c6:6e:1e:9f:c0:75:1b:80:7e:69:4b:
10:c3:86:bf:93:51:42:a1:e5:76:75:0a:20:9c:b3:
a0:e6:c3:d3:47:6f:8d:f2:3f:15:8c:1f:31:69:e6:
a1:ab:32:fc:7a:7a:d0:da:1a:5d:50:72:28:e9:cd:
2a:e3:16:6f:d5:60:a7:c3:b2:59:32:0b:6c:95:42:
84:38:c5:ab:2f:e9:91:91:b6:94:0e:5a:42:c2:76:
27:5b:3e:d4:44:16:49:c1:d9:91:56:b6:b0:05:94:
6f:9f:38:79:07:c8:0c:9b:ef:f2:a6:40:fb:dd:f7:
71:b2:0e:5d:b8:4b:bd:41:78:7d:bc:92:10:70:da:
f0:be:6d:67:62:1d:40:98:7c:b3:56:ff:71:10:1b:
1d:bf:0b:b3:41:0a:c8:e0:16:44:17:b5:fa:cf:84:
58:09:bc:3d:4b:58:ff:34:dd:57:7a:b7:95:5d:4c:
04:08:f9:5b:61:a9:ab:7b:d3:1e:08:db:18:1a:95:
9d:aa:6d:c5:52:d7:b1:77:34:a9:03:97:77:e4:08:
99:7e:62:73:97:13:b9:67:90:0a:5d:a1:3a:00:44:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A6:3F:A0:61:FB:8E:7E:89:B7:C0:AA:82:F1:77:BE:B4:6E:B7:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/f1631a4b-e9a7-3001-b6fc-733c542dcefd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
X509v3 Authority Key Identifier:
keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:500::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:59:eb:04:2e:9c:19:3f:bd:72:93:71:41:80:97:d6:fa:13:
ab:99:6e:dc:55:57:28:81:1e:71:6e:52:a3:30:ce:b4:61:27:
28:03:b0:63:01:0d:3b:e9:c6:93:a7:df:22:39:98:a7:1c:a8:
e6:39:80:ec:39:fa:4d:ee:47:c4:55:4f:b8:57:25:55:be:a1:
db:f5:41:dc:b4:ce:ac:d6:7a:55:bf:c6:75:b4:32:29:61:93:
ec:fa:25:3d:eb:07:e2:cd:d2:3c:0b:7c:f0:d6:32:5f:39:f7:
86:f5:2c:cc:00:c8:b5:46:69:a6:95:62:70:41:e9:d8:d1:97:
0f:7d:82:72:7a:d7:d0:0d:fa:34:61:53:c5:88:31:be:18:de:
3f:77:18:15:a9:5c:66:af:12:2a:57:92:80:49:8e:42:16:45:
82:68:8a:22:0a:ff:5d:b3:64:68:4b:d8:ca:13:7f:24:c2:58:
78:f9:c7:9f:6a:d8:3c:b7:71:7f:07:1d:83:6d:f9:71:be:7f:
cd:a3:65:2a:b9:56:c5:da:f9:0c:ba:8e:1a:74:94:17:ac:98:
bb:3c:96:64:6e:c0:5b:b3:49:de:6a:3f:8b:6f:63:00:92:ce:
44:29:fc:55:2b:3e:9b:eb:c6:ed:04:2e:af:20:96:03:5a:64:
c8:11:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:09 2025 by rpki-client