Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db9113eb-224e-4edb-9ad3-cc4445ed134b.roa
File: db9113eb-224e-4edb-9ad3-cc4445ed134b.roa (raw, json)
Hash identifier: e7ymFmbRpD3xDGDLWFiBHO+PTJytrjyVFvP8vVePWS0=
Subject key identifier: BC:1F:4F:67:F8:7A:30:0D:FC:14:A2:D3:C1:D3:6E:36:1C:5C:74:60
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76A225CFFA55BFEEEF65B40549818758086EEAFB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db9113eb-224e-4edb-9ad3-cc4445ed134b.roa
Signing time: Mon 29 Jan 2024 00:00:00 +0000
ROA not before: Mon 29 Jan 2024 00:00:00 +0000
ROA not after: Mon 04 Mar 2024 23:59:59 +0000
asID: 14618
IP address blocks: 206.55.128.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a2:25:cf:fa:55:bf:ee:ef:65:b4:05:49:81:87:58:08:6e:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 29 00:00:00 2024 GMT
Not After : Mar 4 23:59:59 2024 GMT
Subject: serialNumber=955611a8f9f1de5c8eba3bf2cbf24be120cf078bfd735b0cb6e6809c7b9fd91a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:29:ba:db:81:f3:37:b0:89:0b:f1:a6:e8:
1c:91:fa:c1:bf:a3:93:7a:b6:30:3c:22:01:2f:9a:
ce:8d:89:42:57:26:99:fb:c1:1a:d7:97:c4:41:88:
cc:df:55:88:40:64:84:73:eb:8b:34:fa:46:11:d3:
78:11:09:fc:7b:03:6e:25:4e:a0:ee:12:9d:6d:f8:
71:5e:20:a8:ad:1e:6b:f6:26:bc:4c:62:c5:5b:4b:
5d:90:f0:54:56:66:2e:00:89:bc:20:0a:cc:e2:88:
4a:ad:b7:46:79:66:f6:d3:2a:be:75:ee:8b:0b:e6:
7b:4e:61:fa:f4:2a:03:7d:d1:0e:0e:4b:c3:fa:fa:
3d:6d:6c:00:ef:b7:13:52:42:bd:d5:b0:05:71:28:
09:00:fa:2e:72:ef:ff:2a:77:47:94:84:6d:2c:76:
95:fd:4f:fa:83:70:4a:15:31:6a:6b:fa:de:37:66:
47:d9:74:e4:11:29:93:07:cf:85:97:37:4a:3c:97:
71:ee:e9:a2:2f:7f:88:4c:db:36:6f:2f:e8:ac:d7:
1d:c8:32:7c:04:c5:86:06:ad:3d:5e:2b:7d:a0:c4:
ab:63:bf:9e:35:d3:9a:db:e4:5e:54:d2:0c:fc:d7:
77:ba:c9:ab:5a:cb:00:05:7d:af:e9:33:28:ca:d2:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:4F:67:F8:7A:30:0D:FC:14:A2:D3:C1:D3:6E:36:1C:5C:74:60
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db9113eb-224e-4edb-9ad3-cc4445ed134b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:aa:28:23:29:18:23:7f:05:29:3d:d4:06:3c:a9:d9:ec:dd:
b7:46:9e:1f:6a:b9:0f:5c:89:78:fd:97:3b:67:80:5f:44:17:
ec:fa:c4:1a:53:43:aa:bd:2e:14:11:d7:4c:4b:aa:b2:0c:6b:
a7:0b:d9:8c:58:41:3a:67:c0:7c:71:b0:b5:c5:1a:36:cf:8c:
89:b6:f1:0a:74:06:65:50:30:5e:4d:98:f0:6a:a7:e8:e9:96:
a3:8c:e5:be:eb:90:7d:56:a8:93:33:13:94:2d:a2:33:2b:be:
de:b7:ae:16:a8:22:72:19:dc:19:8e:02:a0:80:e9:14:ce:5e:
6d:07:23:c4:30:ef:71:0c:2b:00:99:bd:c0:8e:08:7a:68:39:
ab:4b:d4:3f:5a:d7:75:5f:8e:ee:85:53:c3:cb:79:b1:67:92:
84:23:8d:d3:4a:46:4f:4d:8e:d4:67:6a:dc:62:ee:46:8e:c4:
0a:7d:5d:92:89:e2:3d:e4:db:78:4c:0a:55:d9:51:33:de:31:
ff:cd:43:df:20:f0:81:3c:27:23:65:fe:2b:28:f9:56:34:f6:
2b:01:e6:e7:a8:70:24:cb:4a:b9:4c:79:48:b3:3c:67:c2:05:
82:97:a7:55:bc:83:ee:89:bf:30:74:d8:96:78:46:47:28:4c:
07:5e:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:44 2024 by rpki-client on console-ams.rpki-client.org