Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/5a79242c-086f-3bee-b73b-51b93c22c7db.roa
File: 5a79242c-086f-3bee-b73b-51b93c22c7db.roa (raw, json)
Hash identifier: n0VgKRva7DDFfwqHx4XO6/USkC1aF6VqzcJ3FDTLOg8=
Subject key identifier: 41:C3:02:FF:7D:C4:4D:CC:E9:D7:68:86:CF:FD:E3:45:14:CE:F9:88
Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial: 010D0C9F432858471D0B15A13967B79B79ED5700
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/5a79242c-086f-3bee-b73b-51b93c22c7db.roa
Signing time: Thu 05 Sep 2024 13:00:41 +0000
ROA not before: Thu 05 Sep 2024 13:00:41 +0000
ROA not after: Wed 04 Dec 2024 14:00:41 +0000
asID: 40623
IP address blocks: 2610:20:8020::/44 maxlen: 44
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1d:0b:15:a1:39:67:b7:9b:79:ed:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
Validity
Not Before: Sep 5 13:00:41 2024 GMT
Not After : Dec 4 14:00:41 2024 GMT
Subject: CN=5d04db71-7e1f-4da0-906c-6a2bc0ceea37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:91:e9:4f:15:ea:14:f7:17:04:d8:12:83:
39:22:f0:78:cd:0e:a5:3f:7b:e2:f4:fc:2a:e5:33:
f8:d7:f0:fb:a6:16:19:05:88:cf:d7:33:50:f5:97:
2b:c7:f5:e5:1d:72:5e:c7:48:43:26:ec:72:3c:de:
6f:2a:76:26:8c:fa:22:97:cf:7c:0b:95:a5:09:c3:
48:25:f6:10:84:cf:33:e2:e8:c4:55:1a:5d:79:59:
4c:7c:da:14:eb:af:f5:2a:bd:d9:67:db:22:cf:af:
36:1a:bf:ac:71:86:b5:31:49:7c:d5:09:c5:a5:5b:
51:f9:f3:bc:05:ed:d1:47:d6:cd:07:13:0d:54:5e:
3a:c4:da:f9:fb:b2:7c:92:c2:d2:60:72:a4:29:d8:
bf:ae:7d:50:d4:0f:a0:21:54:6f:fa:e9:79:28:46:
bb:9c:65:40:fe:90:ff:d0:b7:e1:ba:4d:2e:0d:3e:
2e:c3:a8:c0:3b:0d:b3:58:8c:12:43:a8:85:d0:ce:
32:25:bd:6b:2f:99:38:0c:b9:0e:cb:b0:d2:ec:91:
4e:83:a8:6a:25:2a:a3:9e:46:ca:ad:6b:fd:54:18:
64:2c:84:4e:c2:d7:c1:14:a9:cb:6f:27:1e:57:1f:
0c:1f:5e:86:4e:66:51:e4:be:fd:c8:ab:98:9c:22:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C3:02:FF:7D:C4:4D:CC:E9:D7:68:86:CF:FD:E3:45:14:CE:F9:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/5a79242c-086f-3bee-b73b-51b93c22c7db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
X509v3 Authority Key Identifier:
keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:8020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:50:83:8a:9d:ed:9d:90:45:69:4a:40:44:81:d4:5c:36:01:
d0:6c:66:dd:d6:7f:0b:05:a5:2e:25:8a:6f:08:d2:05:9a:8c:
07:3a:9c:53:fb:4d:3d:0c:72:db:fc:95:04:18:d6:bc:58:c6:
8e:b8:2c:f9:9a:2a:d2:94:8f:ff:af:4a:c3:c7:6b:5a:d3:1a:
e5:f5:bb:18:9f:64:b7:27:29:b6:f6:04:f4:ac:5a:fe:8c:e1:
bb:50:b9:f6:68:cc:28:a2:70:ef:8f:1d:d2:7b:30:e0:68:6b:
2c:89:01:dc:28:f6:fc:e3:25:a9:e3:e3:da:d5:b7:24:7f:1d:
66:b1:ea:8b:c6:80:80:88:d0:07:45:36:f6:6b:66:70:5c:0d:
f8:c1:3d:a9:14:b0:d7:36:3b:1e:56:1f:92:73:ac:b8:42:4a:
dd:e6:b9:20:e5:be:24:59:b4:99:f9:bb:3c:ae:ca:75:94:26:
af:e8:e6:1a:2a:90:e7:01:44:21:27:63:7d:69:ef:32:65:78:
ff:4b:63:a1:9a:6c:ec:a0:95:27:c8:f0:ba:5c:41:79:2a:31:
32:ff:8e:7e:f7:59:f3:05:34:5a:67:71:b6:40:83:1a:22:9a:
5f:b5:16:96:2f:d9:25:67:b9:e4:69:e6:09:19:f5:fe:1e:a1:
4b:06:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:58 2024 by rpki-client on console-ams.rpki-client.org