Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0424ade-4337-4c2d-9dc9-1b524642b9d5.roa
File: b0424ade-4337-4c2d-9dc9-1b524642b9d5.roa (raw, json)
Hash identifier: +xej2XCBTSL3huq/f81ui1peGfJXrBBnmLoGvX3dj6c=
Subject key identifier: 0B:50:EA:B8:0F:68:30:5E:A7:3A:BE:C4:3B:DA:E8:3B:35:C2:B7:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4EE855D513893BD4E64093FFA8CF4E108F7B7D09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0424ade-4337-4c2d-9dc9-1b524642b9d5.roa
Signing time: Mon 13 Nov 2023 00:00:00 +0000
ROA not before: Mon 13 Nov 2023 00:00:00 +0000
ROA not after: Mon 18 Dec 2023 23:59:59 +0000
asID: 16509
IP address blocks: 216.221.160.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e8:55:d5:13:89:3b:d4:e6:40:93:ff:a8:cf:4e:10:8f:7b:7d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:00:00 2023 GMT
Not After : Dec 18 23:59:59 2023 GMT
Subject: serialNumber=4c3b9efa348d30cff342095e5f40c9104ac922d672622f75c5e760eebb2c1e22, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:bf:67:45:47:1d:87:54:c7:02:6e:d8:0d:03:
90:c8:cd:19:2d:9d:72:f9:7c:3d:4e:19:92:49:b8:
26:37:fe:e8:b5:7a:d1:35:a2:36:29:40:8d:4b:e4:
25:3b:1a:eb:6d:cd:fa:66:8e:b5:3e:99:31:86:46:
ad:49:ab:0d:59:76:83:1f:f9:65:2b:37:55:21:f4:
b3:53:c3:95:4e:52:e8:b2:89:c8:5b:ff:df:4d:e1:
36:f9:ad:86:8a:d2:06:86:36:e4:ad:2e:14:50:22:
59:90:26:d6:2e:c4:7c:df:bd:79:91:99:88:14:46:
7a:10:95:f8:ab:fd:cd:2b:14:6b:c8:ea:0d:02:7c:
f8:41:03:ec:30:cc:56:58:21:ae:5a:8b:84:70:97:
20:6b:6e:c7:06:2e:38:3c:3f:cc:fc:7a:7b:96:be:
d2:30:c2:b3:55:ff:90:93:a4:2a:fb:8e:3c:08:3b:
17:7e:11:e0:e3:50:91:ca:e8:7b:19:e3:3a:65:1d:
64:80:fa:08:0a:6e:21:b2:d9:81:98:91:b5:bd:91:
7b:e4:a5:c0:9d:7c:d9:a1:91:d9:c2:dd:00:60:11:
3c:7b:2a:59:71:ac:05:ad:37:4b:71:d3:c9:56:59:
36:78:97:cf:c0:e7:f3:d3:5d:3d:78:14:60:e0:a2:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:EA:B8:0F:68:30:5E:A7:3A:BE:C4:3B:DA:E8:3B:35:C2:B7:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0424ade-4337-4c2d-9dc9-1b524642b9d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.160.0/19
Signature Algorithm: sha256WithRSAEncryption
cc:3b:7b:e5:df:e9:7b:92:66:f4:a2:46:98:59:32:3b:98:cb:
41:d0:78:fe:ab:22:5a:a9:64:a6:93:65:b5:85:95:e7:8d:7f:
cc:8c:4a:e8:06:70:ba:2c:90:f4:d5:72:89:4b:4a:0e:b0:eb:
ba:75:01:ca:2d:28:c2:02:22:c6:50:2f:bb:82:80:b6:23:22:
9b:17:55:1e:01:a5:72:7b:1b:91:59:93:e3:3a:4f:51:8f:2d:
b4:ab:2f:51:89:da:ef:f0:61:88:ce:8c:91:c6:57:a9:dd:c9:
46:97:7a:7b:bc:1c:6a:8f:7b:86:92:e8:37:73:54:29:55:30:
65:eb:0c:e6:4b:29:4d:be:0a:a7:27:27:68:3c:4e:a6:9d:33:
53:d9:1b:6f:13:86:27:b1:5c:89:0f:ee:15:f6:c1:ec:d9:32:
0f:24:9c:a8:9a:e2:bd:3b:d2:c7:bf:8a:62:bb:0a:ce:73:e6:
56:20:77:b8:fa:d7:64:68:42:2b:b9:af:a8:c1:8a:d2:d9:cd:
ac:ed:c1:aa:1a:6d:2d:97:33:6f:c9:5b:af:1b:8b:fa:1b:56:
28:45:42:c8:46:b8:b6:be:6b:ad:12:78:e1:20:fc:65:b6:5e:
92:f5:15:f1:af:fb:67:b0:13:4c:85:bb:db:39:db:71:b2:d6:
06:b2:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:52 2024 by rpki-client on console-fra.rpki-client.org