Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/34da8780-3e9e-3a17-a7cb-4e57a7d7deba.roa
File: 34da8780-3e9e-3a17-a7cb-4e57a7d7deba.roa (raw, json)
Hash identifier: 3Zw3X0lKAUpJE+WpzjhgSjxvGEzy4EWKbONoq8xvROU=
Subject key identifier: 5D:03:9D:2B:31:BA:04:59:4F:93:FD:35:7F:7A:1C:27:56:15:34:A4
Certificate issuer: /CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5
Certificate serial: 010D0C9F4328576D51CC73C042CFC16BB7CFC082
Authority key identifier: C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/34da8780-3e9e-3a17-a7cb-4e57a7d7deba.roa
Signing time: Wed 03 Jul 2019 12:29:34 +0000
ROA not before: Tue 02 Jul 2019 04:00:00 +0000
ROA not after: Mon 02 Jul 2029 04:00:00 +0000
asID: 7381
IP address blocks: 2001:538::/32 maxlen: 48
2600:1100::/28 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6b:b7:cf:c0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5
Validity
Not Before: Jul 2 04:00:00 2019 GMT
Not After : Jul 2 04:00:00 2029 GMT
Subject: CN=3be759a3-d0fe-4814-b738-61030cb93014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:0a:6f:a0:51:fc:5c:15:75:11:43:3a:3a:
0a:68:d6:40:34:65:06:a2:3e:74:00:dd:d2:ab:72:
d8:95:e0:31:9a:d3:9e:64:4d:d7:77:93:a0:08:d9:
87:b9:a8:46:79:39:00:e5:4a:a3:fc:ac:24:17:24:
e7:f4:bf:c2:f9:e7:f3:8c:44:d7:c9:d2:a1:fb:92:
eb:57:d0:da:06:a1:58:ba:9d:80:9d:10:04:88:84:
b9:9d:8e:cd:a2:ab:87:ba:cb:31:97:aa:ed:58:fb:
1a:60:c8:65:ce:1b:27:87:36:a3:98:74:a4:6a:b9:
df:f6:62:26:4e:c0:9b:3f:60:9d:60:b1:12:f8:4c:
e2:d2:13:a4:0c:51:33:70:e2:b1:ba:f7:43:49:b1:
4e:69:36:eb:09:77:b3:4d:0e:ba:1f:eb:81:4b:fc:
75:b8:70:c8:0a:35:cc:c4:d0:c9:af:dd:d5:ec:ba:
f1:6e:a2:22:4d:57:64:fa:7a:03:70:50:fa:52:b4:
69:99:9e:6d:e6:11:0f:1d:e3:37:98:1d:00:b5:9c:
1a:74:08:b4:56:3a:01:b0:fa:14:a2:c8:cd:d4:97:
e8:58:67:4d:8f:f5:68:35:9d:d8:39:59:05:7f:4f:
0c:ba:f3:df:a1:38:5a:f4:e6:0b:0d:e4:11:fb:76:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:03:9D:2B:31:BA:04:59:4F:93:FD:35:7F:7A:1C:27:56:15:34:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/34da8780-3e9e-3a17-a7cb-4e57a7d7deba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.crl
X509v3 Authority Key Identifier:
keyid:C0:46:8C:7A:DD:6F:E6:DF:35:E9:26:BC:D5:11:5D:27:3C:7F:52:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a8f8f8cb-5e7b-4e02-b27e-c6963479e8b5.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:538::/32
2600:1100::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:76:64:da:87:04:24:ac:3f:59:96:48:b5:bd:f3:cd:e7:3f:
78:e2:0a:d4:37:c8:50:0e:0b:aa:74:bd:87:25:2e:d7:a2:de:
b9:4d:61:64:14:9f:76:a8:bb:e4:7d:3a:88:2e:1d:3e:60:62:
bc:c9:fc:0b:8d:24:34:73:fd:c1:a3:78:67:27:41:ef:0a:99:
95:f5:ba:73:c7:35:72:4e:0c:7a:bc:be:e0:bb:4b:2d:47:f1:
c2:56:e9:77:0a:ca:25:79:cc:82:3e:8c:12:28:4c:81:cf:fa:
b8:ec:35:cd:6c:88:4a:85:d8:bb:b9:a8:26:f1:c8:10:2f:13:
7b:7d:1b:15:a6:d8:94:c3:1c:ac:b4:46:5d:d1:3a:d5:a9:75:
d9:58:de:d1:94:71:68:71:0f:f4:70:29:2c:fb:f2:16:da:06:
a6:e8:77:1d:b2:61:6a:b3:b5:87:56:29:53:67:42:8f:72:16:
08:07:c0:54:ee:99:9e:7e:4d:30:ae:1a:49:be:79:2e:a7:35:
c1:97:63:26:34:9c:8a:f8:a6:db:32:ec:42:42:02:8b:9f:9b:
a5:12:7a:91:e2:4d:54:e4:28:95:e6:1a:9b:12:3e:6f:c7:6d:
4e:7a:c6:7c:01:79:98:fe:cf:6a:0b:e1:c0:0c:4c:45:56:3c:
9b:90:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:42 2024 by rpki-client on console-ams.rpki-client.org