Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/78add20f-546f-3f5a-b084-ca6c907a9783.roa
File: 78add20f-546f-3f5a-b084-ca6c907a9783.roa (raw, json)
Hash identifier: Z8Qz2tS54Hd4b4lBEGjNZTS8VsqavakCbly1VyeTqQQ=
Subject key identifier: D4:06:28:DF:C6:AF:20:6C:84:7C:F7:AB:17:91:29:60:8F:4E:EF:22
Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial: 010D0C9F4328584777C644A2A56CE9391076B640
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/78add20f-546f-3f5a-b084-ca6c907a9783.roa
Signing time: Tue 08 Oct 2024 01:00:31 +0000
ROA not before: Tue 08 Oct 2024 01:00:31 +0000
ROA not after: Mon 06 Jan 2025 02:00:31 +0000
asID: 2648
IP address blocks: 2610:20:9122::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:77:c6:44:a2:a5:6c:e9:39:10:76:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
Validity
Not Before: Oct 8 01:00:31 2024 GMT
Not After : Jan 6 02:00:31 2025 GMT
Subject: CN=6023f0c4-4a5d-4118-94e1-8d9a78420c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c0:f4:e0:9c:40:85:2a:fd:1b:f7:9b:ca:ca:
4c:1c:5d:a3:dc:ee:c9:d7:d5:d4:b2:3e:d3:b6:10:
2f:ab:49:7e:05:c3:6a:da:28:a6:04:af:33:d6:34:
f6:08:21:fb:cb:9a:ee:54:7d:17:42:b1:80:21:7b:
a8:05:70:ed:62:6c:8e:d3:1a:b0:a2:84:1a:5f:3d:
d7:a7:46:2e:3f:71:6a:d7:70:db:fd:ab:37:65:ae:
6f:b6:b8:17:25:32:e4:16:50:46:13:c4:c3:1f:a1:
70:64:22:7d:a8:27:0a:e7:ed:0d:4e:06:8c:02:26:
54:bf:39:85:2a:3f:cb:69:33:24:06:6c:5a:22:2e:
be:e3:15:ea:71:d0:97:7c:be:d5:4a:0b:57:b3:6a:
2a:ac:d2:09:c8:1e:f2:63:14:51:66:a1:7d:e9:59:
a3:98:ca:a2:02:d0:6b:52:b3:05:65:e9:5c:6b:e7:
db:17:09:05:a2:ce:47:f0:26:5f:49:b2:75:26:d7:
9d:5c:1b:3b:72:a2:91:a9:be:cb:ab:94:ed:8a:6b:
d5:bc:f3:2b:5c:32:1b:98:9c:17:81:80:cd:4b:d8:
ac:68:44:13:b7:f7:47:50:e9:f4:09:19:5b:88:8f:
f7:12:08:09:d9:5f:52:0e:88:48:c0:01:1f:6b:28:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:06:28:DF:C6:AF:20:6C:84:7C:F7:AB:17:91:29:60:8F:4E:EF:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/78add20f-546f-3f5a-b084-ca6c907a9783.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
X509v3 Authority Key Identifier:
keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:9122::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d0:d5:b9:21:85:a3:c5:42:1a:47:a6:dd:58:b3:f7:07:6a:
6f:86:9a:9d:e5:18:72:c9:f5:52:33:a7:04:00:a8:7d:e6:47:
74:38:8b:3a:eb:b7:6f:c2:c3:a2:0c:87:9e:22:28:ad:3d:f1:
06:88:3b:bc:31:dc:ac:d9:c5:14:9e:98:fc:ce:f7:35:af:44:
cd:54:35:11:52:e8:1c:b7:b5:33:33:7c:dc:a7:6c:19:2a:0d:
70:31:ab:0d:ce:74:d4:33:f4:79:fc:7e:36:77:93:1c:ca:b5:
d3:3e:cc:60:33:d3:ec:ca:9b:f9:95:1e:eb:df:b2:f7:8b:e4:
8d:48:e6:ce:3f:b5:67:8d:b2:c4:fe:03:17:e8:83:e6:d8:8b:
7e:08:ed:c1:67:79:6a:15:b6:90:e4:da:43:a6:bf:0e:fb:6c:
13:d9:be:60:67:a6:45:72:68:01:1f:4f:37:0e:2d:64:b5:cc:
19:fe:99:db:3d:5b:66:69:be:ff:fc:e4:77:9d:36:fc:85:48:
54:fd:0f:fd:e2:f5:33:46:79:92:93:6d:a7:36:ff:87:77:59:
1c:55:71:53:50:02:2b:06:6a:e4:d0:9f:21:e7:12:7c:1d:5f:
05:29:6d:d7:52:a2:e7:a1:b6:a9:74:06:22:9e:5e:df:60:d3:
ee:91:ee:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd3xkSipWzpORB2tkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm
YWI3MB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk
NjAyM2YwYzQtNGE1ZC00MTE4LTk0ZTEtOGQ5YTc4NDIwYzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMD04JxAhSr9G/ebyspMHF2j3O7J19XUsj7T
thAvq0l+BcNq2iimBK8z1jT2CCH7y5ruVH0XQrGAIXuoBXDtYmyO0xqwooQaXz3X
p0YuP3Fq13Db/as3Za5vtrgXJTLkFlBGE8TDH6FwZCJ9qCcK5+0NTgaMAiZUvzmF
Kj/LaTMkBmxaIi6+4xXqcdCXfL7VSgtXs2oqrNIJyB7yYxRRZqF96VmjmMqiAtBr
UrMFZelca+fbFwkFos5H8CZfSbJ1JtedXBs7cqKRqb7Lq5TtimvVvPMrXDIbmJwX
gYDNS9isaEQTt/dHUOn0CRlbiI/3EggJ2V9SDohIwAEfayhLkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNQGKN/GryBshHz3qxeRKWCPTu8iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk
NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvNzhhZGQyMGYtNTQ2Zi0z
ZjVhLWIwODQtY2E2YzkwN2E5NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2
ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3
ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4
ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIJEi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACXQ1bkhhaPFQhpHpt1Ys/cHam+Gmp3lGHLJ9VIzpwQAqH3mR3Q4
izrrt2/Cw6IMh54iKK098QaIO7wx3KzZxRSemPzO9zWvRM1UNRFS6By3tTMzfNyn
bBkqDXAxqw3OdNQz9Hn8fjZ3kxzKtdM+zGAz0+zKm/mVHuvfsveL5I1I5s4/tWeN
ssT+Axfog+bYi34I7cFneWoVtpDk2kOmvw77bBPZvmBnpkVyaAEfTzcOLWS1zBn+
mds9W2Zpvv/85HedNvyFSFT9D/3i9TNGeZKTbac2/4d3WRxVcVNQAisGauTQnyHn
EnwdXwUpbddSouehtql0BiKeXt9g0+6R7m8=
-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:58 2024 by rpki-client on console-ams.rpki-client.org