Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14315.roa
File: AS14315.roa (raw, json)
Hash identifier: JYDqjMXA7eza1k20hv+6wsXrCUDuM25LMYMgYMXYmfw=
Subject key identifier: AE:7E:18:C3:FF:89:88:DE:FE:E6:03:03:9A:A9:6F:B0:36:34:A9:3A
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 04A0393E9087DE1B1E1E22F505559BBD0754353F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14315.roa
Signing time: Fri 07 Jun 2024 21:05:44 +0000
ROA not before: Fri 07 Jun 2024 21:00:44 +0000
ROA not after: Fri 06 Jun 2025 21:05:44 +0000
asID: 14315
IP address blocks: 23.130.240.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a0:39:3e:90:87:de:1b:1e:1e:22:f5:05:55:9b:bd:07:54:35:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jun 7 21:00:44 2024 GMT
Not After : Jun 6 21:05:44 2025 GMT
Subject: CN=AE7E18C3FF8988DEFEE603039AA96FB03634A93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:33:a4:af:b1:f4:c8:37:79:fd:70:9b:3d:
3c:33:b5:47:8a:25:7e:a8:8a:45:5b:db:80:4a:ff:
83:3c:64:5a:ce:db:48:01:55:c0:b5:9b:f8:71:ec:
ca:9b:d4:86:a8:e9:da:5d:db:40:77:cb:31:44:3e:
67:a3:ae:13:3d:3f:dd:8e:52:aa:c7:ca:84:63:c5:
38:b8:dd:d8:38:ea:b0:fe:a1:ce:5e:eb:4e:5c:97:
50:b6:9d:14:73:9a:b0:2d:1c:d9:b2:f9:b5:44:fb:
ce:4f:82:4c:1b:75:c6:52:98:44:b3:19:e4:68:38:
e1:86:81:35:40:43:af:02:68:18:bd:73:35:b7:3e:
87:e3:17:1e:a3:65:82:91:bf:d3:8a:dc:0a:e1:c7:
cb:42:73:be:8e:49:ce:f7:18:1a:74:66:05:13:64:
da:35:44:e0:9c:d3:70:1f:d7:54:b9:e2:c7:15:76:
f7:9c:83:7c:ca:8d:ed:58:75:fd:33:23:26:a0:f5:
bb:57:2f:54:f2:0b:75:cc:c7:ca:3a:fe:5a:f8:12:
20:5b:32:b0:49:6d:3b:4c:65:c8:fa:b2:8c:4d:1a:
b0:33:c3:4a:ef:69:f7:ea:12:23:23:51:19:7b:e0:
6b:0a:b0:3b:c1:b6:ad:0d:88:2f:f7:5e:ba:8c:2f:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:18:C3:FF:89:88:DE:FE:E6:03:03:9A:A9:6F:B0:36:34:A9:3A
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14315.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.130.240.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b1:c6:e4:ee:7e:b1:9a:dd:f5:62:72:c8:ef:83:14:a4:15:
06:be:9c:64:0f:3f:5e:17:5b:51:0e:99:83:aa:d4:84:12:34:
f6:d1:2b:f5:9a:de:d0:37:50:65:16:ff:8f:11:eb:99:3e:07:
38:03:7d:44:99:c1:a8:61:58:5d:4d:c5:ef:ea:9c:41:50:7f:
17:6e:49:84:6e:fd:95:ec:8f:6b:a6:a4:b8:f0:82:71:aa:2c:
34:2e:31:65:5c:ef:3c:83:96:97:8e:3c:14:8a:f0:fc:f8:95:
76:64:53:b5:f1:d5:26:5e:bb:a6:f8:d8:58:2c:0e:cf:57:2e:
72:73:7f:40:44:d2:a9:19:88:11:64:9a:fa:2c:3b:5c:42:6f:
dd:ea:5a:70:9d:79:99:23:bd:b2:1f:9b:cd:fd:e2:2f:95:fe:
d0:5b:1f:66:f0:19:66:39:bf:ff:54:7a:4f:b9:8c:b3:d7:c8:
5b:28:1e:49:6c:93:6d:6b:c9:5b:60:ed:fe:09:01:1e:1d:84:
ee:ea:1e:b4:b0:45:91:c7:ac:55:fd:aa:11:4d:63:c0:b0:f8:
5f:7f:26:d8:0a:e9:2f:42:21:fb:09:c4:70:ca:e6:cc:3d:2d:
5b:3d:e5:66:cf:ea:a5:a2:89:2c:4c:da:0c:1c:1b:a6:f8:bd:
e1:bc:16:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 23:20:59 2024 by rpki-client on console-ams.rpki-client.org