Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/f1f27e94-ae31-3081-82c3-f135a1b0669d.roa
File: f1f27e94-ae31-3081-82c3-f135a1b0669d.roa (raw, json)
Hash identifier: Zang3pCphO3aCJ6w+sIACpzTJzYjkwzBrg0ef94fPfY=
Subject key identifier: F7:5F:9A:84:B7:5F:9E:CE:FB:F6:E9:16:2C:4E:A5:16:0B:B1:B7:83
Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6
Certificate serial: 010D0C9F432858481A0546735BFED3754AB2A500
Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/f1f27e94-ae31-3081-82c3-f135a1b0669d.roa
Signing time: Thu 05 Dec 2024 03:48:32 +0000
ROA not before: Thu 05 Dec 2024 03:48:32 +0000
ROA not after: Wed 05 Mar 2025 03:48:32 +0000
asID: 401538
IP address blocks: 2620:d1:2000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1a:05:46:73:5b:fe:d3:75:4a:b2:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6
Validity
Not Before: Dec 5 03:48:32 2024 GMT
Not After : Mar 5 03:48:32 2025 GMT
Subject: CN=99c04720-0c60-4996-87c8-dc1ef0ca6304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:b6:6b:5b:15:55:9f:98:e6:bb:d7:72:ab:
b4:34:3f:03:a7:a5:23:32:96:aa:af:83:16:dd:fe:
f1:48:03:fd:27:0f:e5:d9:6d:f6:3e:43:c1:3c:35:
5c:bf:09:8e:02:27:5a:06:13:59:5a:f1:33:49:c7:
91:7a:94:da:f5:f4:a2:1f:09:0f:25:cb:e1:e2:cf:
4f:19:55:af:23:b4:e9:9b:c6:0b:a7:e6:f1:84:e1:
f7:07:80:09:9e:a7:ea:90:1c:21:ee:23:91:2e:f4:
1a:a6:c0:54:36:f1:36:ee:65:61:26:4a:ab:b4:48:
30:ac:52:74:6e:8e:31:27:74:b4:cc:1d:56:30:7d:
e9:f0:ab:89:32:4d:91:f9:87:8b:70:b5:8b:b1:e2:
16:2c:44:8c:0d:34:26:fd:b8:7e:b3:5e:7b:dd:f4:
ce:8c:a2:4b:3e:bc:6b:f1:bd:8c:de:c9:2a:93:de:
f2:64:94:23:66:58:9e:b6:0a:71:10:2d:f9:10:8a:
56:30:22:e6:e1:01:ed:04:56:43:aa:ea:fa:a7:6c:
fb:9c:73:9e:72:7d:29:cc:c7:f2:d8:a7:3f:29:4d:
df:8d:79:2e:b8:d5:58:9e:20:d8:ab:16:00:c6:8c:
07:a4:a6:eb:40:6d:23:cb:43:c6:31:ef:ab:45:78:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5F:9A:84:B7:5F:9E:CE:FB:F6:E9:16:2C:4E:A5:16:0B:B1:B7:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/f1f27e94-ae31-3081-82c3-f135a1b0669d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl
X509v3 Authority Key Identifier:
keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:d1:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e6:a1:c7:47:ad:e5:95:b1:48:60:6c:1b:c6:d2:c5:01:d0:
91:58:42:88:fc:7c:eb:28:8f:cd:0e:09:ff:ef:8c:43:f3:18:
a6:f9:b9:14:9e:1b:8f:38:40:3f:08:a9:3c:34:d9:21:05:9e:
69:33:88:7b:7e:95:dc:2a:c3:9c:e6:50:1f:fa:aa:8c:59:3d:
b6:7b:25:21:cb:31:79:bc:45:54:55:38:9d:6d:a0:54:43:e0:
29:fb:47:b0:78:bd:d3:c2:e5:ba:ae:8f:12:a5:8c:93:39:d5:
1d:b9:c9:37:08:b3:66:ac:77:bb:70:68:6b:ec:bd:df:34:0d:
7f:aa:08:52:9a:24:bc:22:f6:fa:58:47:6c:94:b9:f8:a1:82:
c2:5c:6e:a8:f3:05:5c:1b:6f:5d:9c:21:99:96:36:cd:a9:49:
d8:6d:cd:d2:fa:f9:df:0e:41:e6:37:0e:ec:f8:82:64:f3:f1:
a7:94:a9:a3:62:a7:19:3c:a9:90:1a:63:15:5f:da:ee:14:0e:
a7:11:e7:d6:83:af:b5:47:48:e9:78:4b:8a:d9:ce:bf:61:49:
85:3a:d7:12:ab:9b:e6:5e:ec:f7:a9:e2:6e:35:56:8a:6f:39:
cc:9f:5f:34:5d:6d:df:91:30:4b:2e:b4:22:39:f7:d9:8c:99:
a5:8e:13:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgaBUZzW/7TdUqypQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw
ZmE2MB4XDTI0MTIwNTAzNDgzMloXDTI1MDMwNTAzNDgzMlowLzEtMCsGA1UEAxMk
OTljMDQ3MjAtMGM2MC00OTk2LTg3YzgtZGMxZWYwY2E2MzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFi2a1sVVZ+Y5rvXcqu0ND8Dp6UjMpaqr4MW
3f7xSAP9Jw/l2W32PkPBPDVcvwmOAidaBhNZWvEzSceRepTa9fSiHwkPJcvh4s9P
GVWvI7Tpm8YLp+bxhOH3B4AJnqfqkBwh7iORLvQapsBUNvE27mVhJkqrtEgwrFJ0
bo4xJ3S0zB1WMH3p8KuJMk2R+YeLcLWLseIWLESMDTQm/bh+s1573fTOjKJLPrxr
8b2M3skqk97yZJQjZlietgpxEC35EIpWMCLm4QHtBFZDqur6p2z7nHOecn0pzMfy
2Kc/KU3fjXkuuNVYniDYqxYAxowHpKbrQG0jy0PGMe+rRXjs4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPdfmoS3X57O+/bpFixOpRYLsbeDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz
NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvZjFmMjdlOTQtYWUzMS0z
MDgxLTgyYzMtZjEzNWExYjA2NjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm
MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0
MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw
MmQxNDBmYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA0SAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABXmocdHreWVsUhgbBvG0sUB0JFYQoj8fOsoj80OCf/vjEPzGKb5
uRSeG484QD8IqTw02SEFnmkziHt+ldwqw5zmUB/6qoxZPbZ7JSHLMXm8RVRVOJ1t
oFRD4Cn7R7B4vdPC5bqujxKljJM51R25yTcIs2asd7twaGvsvd80DX+qCFKaJLwi
9vpYR2yUufihgsJcbqjzBVwbb12cIZmWNs2pSdhtzdL6+d8OQeY3Duz4gmTz8aeU
qaNipxk8qZAaYxVf2u4UDqcR59aDr7VHSOl4S4rZzr9hSYU61xKrm+Ze7Pep4m41
VopvOcyfXzRdbd+RMEsutCI599mMmaWOE3g=
-----END CERTIFICATE-----
Generated at Mon Dec 16 21:39:32 2024 by rpki-client on console-fra.rpki-client.org