Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa
File: 3134342e34382e38312e302f32342d3234203d3e20323133313232.roa (raw, json)
Hash identifier: hNiNnSxTnRilgFeafqGwRRqHkH8qbnxdXCBlA1uzZmM=
Subject key identifier: AF:B7:1B:E6:5D:8B:25:08:23:FF:9F:3C:77:16:C3:75:53:7D:84:65
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 379878C8A11380B250CC3FE87975EF0BD4D6600A
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa
Signing time: Tue 03 Jan 2023 02:07:01 +0000
ROA not before: Tue 03 Jan 2023 02:02:01 +0000
ROA not after: Tue 02 Jan 2024 02:07:01 +0000
asID: 213122
IP address blocks: 144.48.81.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:98:78:c8:a1:13:80:b2:50:cc:3f:e8:79:75:ef:0b:d4:d6:60:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Jan 3 02:02:01 2023 GMT
Not After : Jan 2 02:07:01 2024 GMT
Subject: CN=AFB71BE65D8B250823FF9F3C7716C375537D8465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:15:12:1a:6e:23:55:b4:70:4e:db:42:74:
ce:5a:e5:e0:5c:77:61:ab:1a:9f:ca:c1:ec:2c:24:
4d:42:dd:44:0f:1d:63:09:cb:dc:72:fa:e0:69:2a:
fe:c8:86:7b:b9:23:6d:52:87:2c:ba:8c:82:bd:fc:
de:3d:8d:2c:3f:39:87:f7:a5:26:b5:4d:00:47:38:
b1:b6:3e:e2:5c:5c:5f:e7:ce:5d:54:95:6b:a5:a1:
57:2e:1a:93:4c:14:33:d1:33:4b:6b:82:ce:4e:4b:
ea:58:bf:cb:fc:42:c6:b0:00:38:c9:4f:df:6b:eb:
9d:86:ae:79:80:d5:26:5e:b4:c0:67:f9:67:6d:9e:
f1:3d:7f:d1:20:8d:e0:d9:8a:89:60:d3:d8:5d:de:
42:4a:1c:c6:80:a0:5a:23:26:2f:ff:09:d1:89:9a:
bf:24:fa:84:e3:d5:fd:37:f1:5a:33:bb:5e:ba:f4:
79:67:b6:8e:9d:14:10:69:62:7a:eb:46:08:74:1f:
9c:b9:62:5c:6b:51:ee:90:31:38:ae:72:e2:d5:f5:
07:81:4d:28:95:f5:d8:74:03:4c:b0:2c:01:cc:b5:
44:16:4f:93:52:22:c9:48:c5:8b:30:bc:af:5f:79:
4a:e6:bf:da:e7:90:0f:67:61:2d:55:19:33:58:bf:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B7:1B:E6:5D:8B:25:08:23:FF:9F:3C:77:16:C3:75:53:7D:84:65
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.81.0/24
Signature Algorithm: sha256WithRSAEncryption
86:73:12:c3:18:60:e8:40:2d:0b:05:c5:30:35:b4:31:b3:9f:
9c:89:0a:fb:03:e8:f6:4e:94:4c:f6:ba:72:38:90:5f:bb:59:
14:38:6a:64:04:b4:b3:00:67:6f:c0:53:af:93:1e:fa:db:57:
a6:06:a0:82:ad:96:9b:c7:39:4c:24:64:8f:ca:08:b1:f1:4f:
7f:6f:f7:0a:aa:1d:50:0b:ba:ba:ac:44:70:15:a3:63:1a:1b:
7c:6e:10:e1:05:37:33:22:6b:3e:ba:5a:55:64:2b:14:b6:24:
9b:2a:10:f0:6b:8a:1c:28:a1:d5:11:51:83:6e:a6:45:f0:59:
84:4a:c4:67:81:0f:58:da:7c:c0:c1:ff:ac:8a:9e:3a:f4:4b:
8b:f1:e9:7c:56:3d:7a:a9:f0:9d:04:d9:b9:44:f6:30:e4:a4:
6f:1f:a8:1f:88:30:f7:7d:74:f1:ef:92:53:35:6f:2f:80:94:
2f:c7:ee:08:e3:aa:63:ee:64:0f:69:fa:30:a4:9c:d3:37:14:
a4:d3:f5:9d:33:3f:11:3b:4e:c9:bb:b1:82:a3:da:ad:aa:e9:
8a:2d:2a:7c:28:3e:f4:af:54:5f:87:64:69:ae:8b:3f:9b:a7:
dc:a2:eb:12:27:6b:3c:e5:11:26:50:77:e3:f7:88:de:36:c8:
47:82:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org