Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/ddce7339-5147-3e64-a375-7ea1cd112ffa.roa
File: ddce7339-5147-3e64-a375-7ea1cd112ffa.roa (raw, json)
Hash identifier: Bdl/izjssDukahLxPT7j/inRicdGV3ExpWREkNs67vE=
Subject key identifier: 04:D9:2F:48:94:BF:35:D5:18:D9:37:C8:EC:B0:7A:54:E9:F9:D0:6B
Certificate issuer: /CN=c6d7cdcd-700c-4860-84dd-573f95f48e4f
Certificate serial: 010D0C9F43285848B8F0CCB0CC4FC120A0385F40
Authority key identifier: 26:EE:39:F3:9F:3B:C1:05:EB:A3:E2:61:E0:60:10:09:29:70:96:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/ddce7339-5147-3e64-a375-7ea1cd112ffa.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 49286
IP address blocks: 2607:3a40:9000::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:cc:b0:cc:4f:c1:20:a0:38:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d7cdcd-700c-4860-84dd-573f95f48e4f
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=2d615ba5-f95b-449d-8f5f-16fa97c3cdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:af:c2:da:25:d7:fe:76:be:99:86:a2:3d:
1b:e9:e7:49:81:08:e2:12:14:78:56:c7:50:19:14:
44:e6:31:fe:19:dc:c5:1d:03:53:3d:a1:c1:ba:b6:
c8:36:22:a7:0c:8e:35:d9:33:04:a2:2b:67:59:80:
a4:3d:a4:da:0a:1a:7f:3b:1d:70:90:13:93:7c:6d:
f3:c6:22:a5:c5:15:74:ab:99:38:87:6f:02:60:2d:
82:6a:99:65:82:2b:a7:da:fa:fa:bd:cd:4f:66:de:
34:70:b2:b2:c4:0a:f9:47:22:57:e1:a6:6f:26:35:
b6:fd:2c:78:b8:17:b3:61:b8:a1:a5:84:20:08:5d:
ac:9f:13:0d:9f:b4:12:5f:f2:2a:a2:5c:d7:37:fc:
44:c1:0e:b3:35:36:35:48:11:4d:bb:6a:5c:9b:21:
12:8c:29:8d:13:30:49:bc:48:fe:5f:5b:c7:a0:ca:
58:3f:d6:cc:2c:23:c9:b8:a8:4e:2c:69:5e:38:57:
c7:b2:ba:d2:34:31:c7:90:80:d4:00:3f:73:59:eb:
2f:39:77:ff:cd:b9:1c:8d:08:84:22:d4:a2:8c:71:
c9:14:00:8b:db:ef:c6:64:9e:48:52:8e:45:bb:15:
20:69:03:b0:02:e1:13:9d:bd:e1:e4:9e:78:f1:30:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:2F:48:94:BF:35:D5:18:D9:37:C8:EC:B0:7A:54:E9:F9:D0:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/ddce7339-5147-3e64-a375-7ea1cd112ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/c6d7cdcd-700c-4860-84dd-573f95f48e4f.crl
X509v3 Authority Key Identifier:
keyid:26:EE:39:F3:9F:3B:C1:05:EB:A3:E2:61:E0:60:10:09:29:70:96:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:3a40:9000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:43:7f:57:b8:8e:ff:62:de:86:e8:73:eb:de:e3:31:d6:be:
2c:2e:8f:99:a5:a7:05:36:80:0c:a8:6b:d6:37:17:e6:85:69:
9e:e9:b0:a6:57:a7:f4:08:30:fc:6e:04:5e:cc:bd:70:42:ec:
da:1b:3e:b1:b6:82:5e:36:e9:14:94:74:ea:25:56:0c:98:23:
76:38:9a:a5:30:af:c0:a6:50:79:84:31:d9:1e:44:1d:33:6c:
17:3f:24:e7:a7:8a:58:76:21:62:aa:2e:f3:72:59:0c:56:79:
86:b7:c3:f2:2b:62:bb:e9:a7:c1:93:26:1d:51:7e:31:28:e9:
dd:b6:d4:5b:b1:b1:5b:9b:83:da:e4:60:88:4a:a9:d6:91:66:
fb:87:7f:d3:92:3b:02:bf:a5:20:46:ed:22:fb:16:87:93:bd:
d6:1f:38:81:7d:f9:ad:20:c0:3b:00:a7:87:e0:74:e4:a6:00:
ba:9f:d8:7d:26:c8:3b:e0:a4:d9:7a:df:09:4b:47:08:26:0a:
8b:40:77:6c:93:4b:51:17:66:f1:63:f8:c9:7e:d4:0c:fc:03:
9d:4c:9b:34:eb:c2:6d:89:78:9f:f0:9b:5a:9b:9d:0e:7d:4b:
69:0e:ba:8c:d2:f5:b2:97:09:07:73:7f:69:5b:4b:52:a0:ca:
35:50:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:15 2025 by rpki-client