Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS19762.roa
File: AS19762.roa (raw, json)
Hash identifier: bbCA8qjQ+jjVhr1V0G1G8dbg777gYiVdGZzBk1U/1q4=
Subject key identifier: 3F:18:B0:3B:21:7B:CC:2A:F7:00:61:86:6D:23:43:98:CB:BD:B3:0C
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 2460DADFF9B945F99D83F09BD8A1883488F81FBF
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS19762.roa
Signing time: Mon 01 Jul 2024 04:48:59 +0000
ROA not before: Mon 01 Jul 2024 04:43:59 +0000
ROA not after: Mon 30 Jun 2025 04:48:59 +0000
asID: 19762
IP address blocks: 205.234.243.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:60:da:df:f9:b9:45:f9:9d:83:f0:9b:d8:a1:88:34:88:f8:1f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Jul 1 04:43:59 2024 GMT
Not After : Jun 30 04:48:59 2025 GMT
Subject: CN=3F18B03B217BCC2AF70061866D234398CBBDB30C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:37:df:2c:9b:5b:4a:35:5f:11:91:cd:68:
70:15:96:54:78:43:c2:67:92:39:85:24:94:ec:ce:
4f:08:66:de:c5:31:86:cf:fc:1b:3e:cc:45:b0:00:
1b:b6:3b:88:d4:c7:16:5e:da:4f:88:00:8d:36:07:
22:9d:cc:7f:5c:96:8f:12:20:18:31:04:e5:4b:4e:
0f:80:fc:3a:8a:85:1d:bb:ce:58:4f:b8:98:1a:3f:
04:6b:7c:2e:7a:08:8e:04:40:7f:99:79:dd:f9:2d:
39:0b:9f:c5:f9:38:61:df:80:88:5d:ee:0a:17:db:
a0:bf:fc:d8:6c:86:b8:15:96:34:40:cf:8c:e6:13:
cb:46:2b:ab:4d:87:03:e0:91:39:17:67:ee:d9:6e:
a4:0a:c8:9a:93:5d:84:33:bc:68:05:79:8b:7a:e6:
85:ab:ab:06:31:d7:21:13:3a:e4:14:7d:af:0d:4c:
92:60:f5:19:69:82:16:d1:15:f7:aa:b3:62:aa:f9:
d8:9a:7b:3e:47:6f:fd:82:d8:d6:cf:2c:31:e0:82:
de:31:38:e8:5b:31:b4:d6:e2:9c:ca:3e:cc:f1:92:
c5:ed:b0:ab:1f:a8:3f:58:da:e1:6f:6d:53:2c:c8:
13:9e:47:bb:37:17:a6:e8:a7:22:24:c7:da:97:d0:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:B0:3B:21:7B:CC:2A:F7:00:61:86:6D:23:43:98:CB:BD:B3:0C
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS19762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.243.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:f1:ac:a7:64:20:e9:7b:75:cc:12:9e:35:59:a8:0b:dd:52:
d3:11:b5:97:45:e9:99:95:6d:aa:81:8c:97:13:47:db:6f:aa:
e3:53:54:aa:82:e1:c6:60:45:35:cc:7d:0d:dd:f9:5a:59:70:
6b:e2:c8:ae:e1:d2:b0:c6:68:62:d3:9e:85:43:d6:91:93:3f:
b8:39:92:02:10:99:6d:08:03:0b:89:4d:39:39:ac:59:0d:9e:
91:04:f9:30:d4:35:02:c6:ee:8b:a8:e0:ac:34:65:f2:a0:1f:
cf:36:1f:af:9a:3f:58:e0:5a:63:c9:f3:30:eb:4f:6f:89:04:
a1:08:b5:a1:65:9c:cd:6a:3a:52:9e:57:73:08:8a:48:52:07:
92:aa:23:76:04:76:e3:78:79:f8:f8:74:56:e9:8c:bb:36:79:
cf:16:b7:96:6c:f4:4b:04:94:12:91:2f:3f:7a:ec:b1:ff:1b:
6b:cd:31:f2:75:7c:77:87:8c:c3:99:e9:ad:ff:4e:cc:01:70:
d9:b1:c2:5a:c1:02:42:02:ca:de:d1:d6:1e:91:cb:bd:e7:7f:
dc:b3:97:98:7d:a1:c2:7a:ee:a9:f0:8d:fa:82:e0:7e:52:2c:
27:d8:33:26:6b:24:7c:c6:c9:40:a3:6a:7a:9e:66:22:fc:c9:
a9:47:87:c4
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUJGDa3/m5Rfmdg/Cb2KGINIj4H78wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQwNzAxMDQ0MzU5WhcNMjUwNjMwMDQ0ODU5
WjAzMTEwLwYDVQQDEygzRjE4QjAzQjIxN0JDQzJBRjcwMDYxODY2RDIzNDM5OENC
QkRCMzBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKY33yybW0o1
XxGRzWhwFZZUeEPCZ5I5hSSU7M5PCGbexTGGz/wbPsxFsAAbtjuI1McWXtpPiACN
Ngcincx/XJaPEiAYMQTlS04PgPw6ioUdu85YT7iYGj8Ea3wuegiOBEB/mXnd+S05
C5/F+Thh34CIXe4KF9ugv/zYbIa4FZY0QM+M5hPLRiurTYcD4JE5F2fu2W6kCsia
k12EM7xoBXmLeuaFq6sGMdchEzrkFH2vDUySYPUZaYIW0RX3qrNiqvnYmns+R2/9
gtjWzywx4ILeMTjoWzG01uKcyj7M8ZLF7bCrH6g/WNrhb21TLMgTnke7Nxem6Kci
JMfal9CwRwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFD8YsDshe8wq9wBhhm0jQ5jL
vbMMMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzE5NzYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzerzMA0GCSqGSIb3DQEBCwUAA4IB
AQC68aynZCDpe3XMEp41WagL3VLTEbWXRemZlW2qgYyXE0fbb6rjU1SqguHGYEU1
zH0N3flaWXBr4siu4dKwxmhi056FQ9aRkz+4OZICEJltCAMLiU05OaxZDZ6RBPkw
1DUCxu6LqOCsNGXyoB/PNh+vmj9Y4FpjyfMw609viQShCLWhZZzNajpSnldzCIpI
UgeSqiN2BHbjeHn4+HRW6Yy7NnnPFreWbPRLBJQSkS8/euyx/xtrzTHydXx3h4zD
memt/07MAXDZscJawQJCAsre0dYekcu953/cs5eYfaHCeu6p8I36guB+Uiwn2DMm
ayR8xslAo2p6nmYi/MmpR4fE
-----END CERTIFICATE-----
Generated at Fri Nov 15 20:45:04 2024 by rpki-client on console-ams.rpki-client.org