Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: dgEtLcHeOgs1YRyscDf8WsK2XQVttfaZLZmiDLxJpaA=
Subject key identifier: 5D:41:E8:87:2E:4F:E1:9A:E9:4C:D3:BD:42:90:99:98:4A:C4:E8:B5
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 60D28C6BC8B638DD814A79483E2784EB9C27336C
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS20473.roa
Signing time: Sat 27 Apr 2024 13:01:15 +0000
ROA not before: Sat 27 Apr 2024 12:56:15 +0000
ROA not after: Sat 26 Apr 2025 13:01:15 +0000
asID: 20473
IP address blocks: 205.234.161.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d2:8c:6b:c8:b6:38:dd:81:4a:79:48:3e:27:84:eb:9c:27:33:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 27 12:56:15 2024 GMT
Not After : Apr 26 13:01:15 2025 GMT
Subject: CN=5D41E8872E4FE19AE94CD3BD429099984AC4E8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:d9:32:99:ec:6a:9f:b4:99:4d:f6:c6:87:
62:89:c7:76:03:c4:8e:bf:fa:8f:54:9d:5a:1b:6d:
6b:a1:3d:98:ff:1a:15:d9:ae:fd:49:8b:81:d0:66:
25:1d:57:d5:f7:39:d1:a3:d4:12:b3:38:19:f7:39:
78:17:08:18:f1:8a:58:25:63:7b:eb:48:2f:96:6b:
fe:93:55:95:fc:58:cf:c1:49:e6:2d:f6:6a:9a:3f:
c3:96:63:c1:47:00:d9:5f:c2:b6:a8:e5:aa:52:20:
84:91:bb:0a:7d:1d:87:ee:fd:c3:ac:00:4a:22:0a:
79:ae:df:32:66:6d:b1:ac:df:fe:d2:f3:46:06:d9:
3d:95:5f:22:46:1d:ee:dc:30:64:95:5a:0b:7e:ab:
2b:ea:60:c5:aa:b9:03:9f:33:46:1d:0d:b3:a6:85:
c1:0a:fe:ea:ea:11:78:d1:d0:3a:31:66:2f:c4:5a:
e4:19:ac:14:54:84:ea:99:cd:16:81:bf:59:ae:ce:
23:8d:1d:6f:0b:d3:89:4f:7a:a3:ee:32:b7:cb:e0:
6f:f4:13:b9:35:47:11:1d:e3:d9:e2:6b:82:72:a1:
1e:04:9b:e0:4c:e4:d2:45:59:95:14:13:cc:6b:3a:
6a:d4:c6:bb:d2:2a:fc:3c:d7:b5:d2:d3:8b:f9:f3:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:E8:87:2E:4F:E1:9A:E9:4C:D3:BD:42:90:99:98:4A:C4:E8:B5
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.161.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:86:48:e1:6a:62:22:eb:d4:1a:b6:4a:4b:ab:cc:8a:46:2b:
eb:03:74:bf:35:33:e5:0b:6c:ce:bc:8c:92:d8:b2:d0:38:f1:
77:8c:be:d9:9c:87:3e:57:62:3e:d9:e1:21:ed:29:8e:db:04:
8a:65:34:d0:e9:0a:fa:d8:c3:72:11:04:3a:d4:26:5b:fc:cd:
61:8c:8d:46:fa:4c:44:4d:6e:a8:a7:06:53:56:4d:f1:e5:d7:
9c:67:a3:d4:11:f2:40:ae:a0:5f:92:06:eb:58:a9:f4:60:5c:
28:08:a2:94:61:b9:e8:02:87:e5:57:0b:de:1e:d7:77:73:6d:
d1:87:c7:79:33:79:27:c4:16:85:3e:37:56:1f:8c:c6:2f:41:
f1:8b:05:8c:4b:b4:4b:d2:29:6c:be:a3:24:22:46:cd:a4:1d:
9c:9e:d3:47:0c:3d:dc:51:8b:c7:2d:e5:c8:32:5b:16:1d:73:
fa:f6:9a:dd:08:a2:e9:fc:64:a5:9d:4b:22:38:ca:0e:b9:b2:
b7:94:eb:c9:09:4a:4b:22:f8:2e:54:63:52:7c:45:c6:66:88:
69:5f:24:12:5a:c8:d5:9b:4a:02:68:54:7b:a0:b0:6c:d6:5e:
d9:22:d2:79:be:44:57:2a:01:bb:f6:56:12:9c:a1:88:95:4b:
48:02:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 20:45:04 2024 by rpki-client on console-ams.rpki-client.org