Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84585dd1-f87b-4acb-882f-4c01a83a643a.roa
File: 84585dd1-f87b-4acb-882f-4c01a83a643a.roa (raw, json)
Hash identifier: b9/bnsn9U4mFGAYrc/ikf6XOLkvBf6rqwscW57nRpmQ=
Subject key identifier: 2D:3D:C7:79:02:EE:16:ED:E0:9E:32:47:2D:96:7D:DC:7B:6A:9C:04
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 37C8CE525E8913DC9D1A963234FF91F55319899E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84585dd1-f87b-4acb-882f-4c01a83a643a.roa
Signing time: Mon 28 Aug 2023 00:00:00 +0000
ROA not before: Mon 28 Aug 2023 00:00:00 +0000
ROA not after: Mon 02 Oct 2023 23:59:59 +0000
asID: 14618
IP address blocks: 15.189.0.0/16 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c8:ce:52:5e:89:13:dc:9d:1a:96:32:34:ff:91:f5:53:19:89:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 28 00:00:00 2023 GMT
Not After : Oct 2 23:59:59 2023 GMT
Subject: serialNumber=367f49affbf08a4ee7d187617ca334023da8891468a0138e4e02d8a60e4fd90c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:7f:bb:6e:f3:22:fc:b8:f0:85:4f:9b:ef:
47:1c:c0:10:24:87:a8:96:65:f4:fa:a9:ec:84:2f:
10:dd:28:30:de:f3:35:02:d1:b2:55:9f:0f:21:4e:
ac:e7:13:8d:1a:0e:0c:69:3c:a5:2e:e8:cf:ad:c9:
66:db:65:f9:d8:24:d4:87:6f:1c:f2:a1:c7:65:69:
d4:4e:83:fd:15:ed:b0:81:db:8e:f3:c0:8e:ef:55:
32:47:61:2f:76:32:6f:60:f4:69:0c:ab:d7:c1:cd:
f4:0d:6e:79:6b:75:b5:34:a7:86:a0:01:0b:38:f2:
7b:23:52:72:09:60:cd:d3:af:e7:5d:9c:2f:f9:cd:
d8:c2:02:76:b5:ea:ba:b6:e0:e8:bc:71:b5:3c:8e:
42:f1:92:5a:83:57:66:83:32:dc:f6:a8:2d:22:de:
95:06:a6:44:08:e9:41:49:50:8a:56:d5:06:a5:e2:
b2:12:68:3e:82:7d:cc:15:9c:7d:de:23:9b:e6:7d:
01:4a:9a:2d:fc:a0:5b:59:29:12:84:80:30:3f:1c:
8f:aa:24:e1:0a:2b:a3:c5:e7:87:bd:03:db:2a:42:
a9:d8:ca:05:ce:3d:66:8d:aa:3f:d1:f9:96:d3:d6:
c2:cb:59:7e:03:50:6e:ce:91:9e:30:90:ee:75:b9:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:C7:79:02:EE:16:ED:E0:9E:32:47:2D:96:7D:DC:7B:6A:9C:04
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84585dd1-f87b-4acb-882f-4c01a83a643a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.189.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:e9:3a:08:ad:c9:53:87:26:8b:cf:3c:8e:5c:37:7d:f2:ca:
c6:b8:21:71:b2:0c:80:d7:77:d0:20:18:ff:75:17:d7:0b:67:
a9:af:86:d8:b3:1a:34:c6:f5:7d:db:e9:62:08:32:aa:11:53:
b4:8b:fd:1d:7a:bd:15:78:f1:33:7d:7b:67:84:73:6b:06:57:
65:bf:f2:76:d6:ef:8f:bd:c5:c2:53:cc:d3:3a:bd:48:59:b8:
e3:4a:79:41:d5:4f:f9:47:13:7e:48:3d:0f:d1:a2:26:4d:f6:
20:87:0b:eb:4f:79:27:81:ab:55:53:58:77:da:f2:56:ed:5c:
9f:55:a5:74:04:fa:a1:0a:e1:6a:31:04:c8:e9:4e:f6:78:99:
bc:5c:43:0d:72:e0:1b:f5:6d:6e:e4:d2:10:0f:71:54:b3:ce:
55:ad:1f:7b:e3:36:50:24:69:3c:18:a6:04:ce:72:bb:6d:48:
f4:38:a6:b4:30:3e:65:5b:10:2d:0f:8d:18:98:e1:72:1f:b0:
e7:9f:5a:86:a9:29:9b:73:2b:0c:de:c6:b0:fe:03:eb:3b:c4:
c5:ab:e9:06:e8:aa:c7:76:4c:9c:6d:67:1d:d0:da:33:18:da:
24:b4:58:92:6a:e9:07:e5:b2:3f:81:16:bc:f3:65:91:3e:40:
16:02:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:52 2024 by rpki-client on console-fra.rpki-client.org