Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS3356.roa
File: AS3356.roa (raw, json)
Hash identifier: Z1ax3GS2h5DTU3TCBgCX3i19afsnnSnwr/i5y83vhEU=
Subject key identifier: A0:87:AC:98:DA:07:B0:B1:93:4C:AF:BB:B6:73:33:FF:93:ED:E6:71
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 27BC5FD3441BAA608D858654B114740314797B70
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS3356.roa
Signing time: Thu 25 Jul 2024 17:48:59 +0000
ROA not before: Thu 25 Jul 2024 17:43:59 +0000
ROA not after: Thu 24 Jul 2025 17:48:59 +0000
asID: 3356
IP address blocks: 66.225.236.0/24 maxlen: 24
75.102.15.0/24 maxlen: 24
167.88.146.0/24 maxlen: 24
204.93.147.0/24 maxlen: 24
205.234.154.0/24 maxlen: 24
216.246.106.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:bc:5f:d3:44:1b:aa:60:8d:85:86:54:b1:14:74:03:14:79:7b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Jul 25 17:43:59 2024 GMT
Not After : Jul 24 17:48:59 2025 GMT
Subject: CN=A087AC98DA07B0B1934CAFBBB67333FF93EDE671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:99:a1:b7:f9:77:19:75:47:cf:2d:cd:60:
50:8b:7b:83:74:7f:0a:ff:61:58:56:02:ef:d4:6e:
90:90:66:66:03:d8:c1:67:0d:4a:02:ca:0a:bd:19:
83:ac:a0:ad:ce:11:ad:56:88:df:0a:f0:82:0b:64:
e0:a0:fd:0f:49:0d:bb:47:33:0f:18:ec:2e:3a:17:
eb:4f:76:b8:b2:44:4d:de:06:33:17:cf:9b:e5:61:
81:54:bd:f1:e5:81:3a:af:03:86:34:68:79:52:91:
ac:3e:44:35:d7:2e:02:96:a5:70:6f:51:d5:54:4e:
46:f8:cc:81:a3:0f:c7:30:fa:d6:b5:6b:35:82:36:
8f:f3:41:e0:e4:fd:b5:c4:ab:77:45:70:4d:af:b9:
3b:e7:57:3b:0c:17:c4:9f:32:f8:07:bc:a8:20:84:
bb:3e:dd:c1:82:4a:8f:5a:ad:3b:8e:c7:33:c7:78:
e6:8c:c6:e3:4e:dd:57:e3:7b:bd:98:4f:e7:a5:6b:
0b:21:24:e9:68:13:73:7f:88:08:09:1f:b3:9f:e3:
c3:1a:87:4e:2d:9a:92:71:f1:41:ae:21:45:c2:bd:
0f:eb:7e:ee:ff:51:94:a7:cd:d1:15:b0:ae:73:1b:
78:63:74:f0:21:4e:3b:8a:8a:f9:d1:99:b6:9d:ea:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:87:AC:98:DA:07:B0:B1:93:4C:AF:BB:B6:73:33:FF:93:ED:E6:71
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS3356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.236.0/24
75.102.15.0/24
167.88.146.0/24
204.93.147.0/24
205.234.154.0/24
216.246.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:94:5f:28:05:77:56:38:53:a2:0c:37:bb:a1:ab:9d:e2:7c:
18:5e:30:a8:2e:99:e4:55:4f:aa:49:a8:a3:fc:79:5c:a4:a5:
a9:66:a7:cd:fa:ad:46:cb:61:c3:6a:ab:e9:b9:cd:38:d3:c3:
10:3b:77:b4:35:83:96:44:e0:a8:b6:e7:9f:71:92:10:5e:35:
ed:b4:b0:94:c1:02:cc:98:7d:18:be:ec:01:00:ea:2f:85:aa:
1f:14:ff:6e:fa:a9:8d:ad:3a:79:8f:f3:9a:66:1d:db:84:b8:
b6:af:a8:da:2f:26:da:2b:0b:20:58:e6:ec:51:8a:af:bd:7e:
a0:77:43:11:e9:db:d7:68:9b:7f:c6:7a:32:ba:22:b7:cb:65:
09:15:26:29:f3:03:a5:24:7b:4a:8b:44:7a:c2:40:75:87:03:
c0:26:5f:13:d9:9c:31:6f:21:c9:77:ed:2a:f6:73:ea:52:95:
78:93:f3:05:4a:0b:61:1b:bf:88:2e:c1:44:66:36:ee:55:96:
47:58:98:de:65:e1:bf:7e:1e:65:4a:a7:3e:a6:63:15:00:ea:
7a:10:50:4d:53:a8:b5:d6:dd:5e:b7:0e:17:ae:6f:52:50:ed:
55:1d:e8:3c:f3:7f:32:ee:8a:0d:78:fe:07:25:3c:1f:2f:1c:
c9:21:42:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 15 20:45:04 2024 by rpki-client on console-ams.rpki-client.org