Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: JouZFWyAknGlhLid/9WCc5xeUVlT6a/Oq61Zrz5vk8g=
Subject key identifier: 61:AF:42:40:75:78:DC:EA:CA:CD:51:AC:14:70:B1:E0:7A:C9:B1:3C
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 4579A6DBB595F85586BF0C381BF23E407EB4A0CB
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS9009.roa
Signing time: Tue 03 Sep 2024 12:43:14 +0000
ROA not before: Tue 03 Sep 2024 12:38:14 +0000
ROA not after: Tue 02 Sep 2025 12:43:14 +0000
asID: 9009
IP address blocks: 66.225.209.0/24 maxlen: 24
104.245.213.0/24 maxlen: 24
204.93.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:79:a6:db:b5:95:f8:55:86:bf:0c:38:1b:f2:3e:40:7e:b4:a0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Sep 3 12:38:14 2024 GMT
Not After : Sep 2 12:43:14 2025 GMT
Subject: CN=61AF42407578DCEACACD51AC1470B1E07AC9B13C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:be:85:fc:97:77:da:16:92:67:8b:2d:6e:
2e:7c:c6:39:75:6a:bb:d2:60:6d:00:bb:f9:54:e4:
d7:e9:07:0b:57:7b:83:2f:de:e0:ad:ff:cc:47:b4:
d2:41:72:07:60:f3:db:0d:df:01:44:3f:c4:36:b6:
63:8e:1c:94:93:89:b7:1f:3a:7c:42:e8:95:49:df:
36:f9:09:69:27:19:43:92:75:f4:5a:f0:65:ba:72:
5b:6a:b0:70:c2:7d:91:1c:93:33:d2:98:11:c6:ce:
eb:29:b3:94:5f:1e:f7:2b:2d:a3:14:25:b1:4e:fc:
9e:86:c9:44:3d:0d:f3:da:05:7d:75:7b:e3:26:a7:
ef:81:b3:35:01:e3:8d:84:b7:f2:3e:93:61:a3:c0:
5d:07:3b:95:89:60:53:3b:f1:4b:ff:ac:f2:33:ab:
94:72:a0:de:c5:d9:db:87:f9:9a:6d:af:40:65:ac:
3a:33:13:47:1c:ac:e2:d5:a9:be:d5:7c:59:ed:72:
ff:1e:4c:f4:e9:a2:91:b0:d9:3f:ba:97:6a:d4:eb:
ae:c6:cc:7f:c6:14:5b:64:7c:3c:51:26:16:a5:fc:
19:20:d4:4d:18:da:39:11:ce:18:54:e8:af:e5:80:
f1:f4:27:0f:f7:dd:f7:8e:19:7c:10:75:1b:f2:9e:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AF:42:40:75:78:DC:EA:CA:CD:51:AC:14:70:B1:E0:7A:C9:B1:3C
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.209.0/24
104.245.213.0/24
204.93.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ae:b0:02:51:84:57:5f:ce:87:f6:f0:5e:b2:3d:11:5c:35:
58:1c:94:d4:06:8d:c9:a2:e4:ce:47:5c:ab:00:79:b5:4a:5f:
3a:2e:cf:b4:9d:7f:7a:00:56:02:a7:b4:d6:63:c6:97:9e:a2:
ea:60:b2:d0:fb:52:d1:2f:d3:82:9b:15:8c:e9:32:22:b8:fe:
fb:a8:d9:89:d3:9d:9f:ee:30:11:b7:fa:a9:40:53:8f:bc:81:
4a:0e:5b:68:68:08:26:20:db:35:2d:d2:71:b7:03:b4:f6:04:
fc:75:78:e8:37:40:dc:ae:9d:62:b7:4e:29:4f:4d:63:f2:97:
9a:b0:2a:e3:cf:67:06:71:fe:c8:65:b0:c8:ce:f5:fa:b6:0e:
9c:fc:9f:5c:f7:b2:4c:94:8e:1e:b7:4d:07:be:26:56:90:ed:
0f:49:a4:b9:b4:94:67:16:37:20:12:f6:ca:6c:37:b5:92:f2:
e5:b9:43:2b:51:e7:a2:eb:63:d6:5a:b8:eb:44:31:a6:67:4d:
c6:c1:11:e5:4f:ea:81:b9:8a:99:47:e6:1f:51:4d:a0:80:82:
e8:1d:c0:ba:69:89:7c:9d:bc:15:cd:e2:b5:82:ee:db:e4:fc:
34:53:ae:25:02:41:63:3c:27:64:fe:2e:5a:94:b5:1d:e7:a2:
da:d3:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 20:45:04 2024 by rpki-client on console-ams.rpki-client.org