Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/8f62cab5-9c79-4902-a826-7c845da2ea3c.roa
File: 8f62cab5-9c79-4902-a826-7c845da2ea3c.roa (raw, json)
Hash identifier: MXJoQ6QWH+eT/gJJW7cmYxIzFcRuuKTb6e8gWL/byIM=
Subject key identifier: 79:B6:A1:AF:EA:CF:7B:71:F8:F2:BF:FC:93:91:57:01:4D:8A:09:D9
Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial: 36BB06FF15D6BCCAC02A5DF0FCAC795E0E416294
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/8f62cab5-9c79-4902-a826-7c845da2ea3c.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 173.82.183.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:bb:06:ff:15:d6:bc:ca:c0:2a:5d:f0:fc:ac:79:5e:0e:41:62:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: serialNumber=308efb970a99a1dabb326e964955fcfd1bf08f04154ab6f15f042359e2d3e2e6, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:da:09:6a:20:78:46:78:06:7f:5a:b3:33:
b8:e3:bf:0d:43:ee:ff:9d:ad:fa:9b:90:2e:31:b8:
c1:14:22:75:73:d6:e7:cd:f8:0a:58:1c:e3:52:66:
ea:a1:22:59:95:f2:b2:dc:6d:7c:15:8a:9b:40:d8:
1c:10:8c:f0:47:ac:5d:29:b3:35:22:70:49:90:ef:
12:29:3a:40:46:9e:41:f8:53:a0:da:f1:25:c0:b1:
17:54:d3:a7:d0:9c:bb:47:57:9c:a6:34:b1:52:90:
43:c1:15:fb:c4:bd:53:6f:30:2d:11:39:2d:27:02:
e9:4a:c4:ac:6f:96:bc:ac:aa:eb:ca:f2:60:67:ec:
37:29:77:7a:74:4b:8e:89:36:cd:2f:30:bd:9c:1e:
d5:d4:06:ae:4a:e0:33:b1:da:1e:fc:ba:76:5f:1a:
11:de:a6:e7:99:4d:4b:04:e0:9b:d2:38:b2:b1:1c:
78:9b:f4:0b:f3:ca:ad:bc:d2:09:d8:2a:fc:90:0a:
dd:b1:0d:ea:56:a5:80:a7:eb:2f:8f:f1:83:5e:e3:
bb:92:37:45:ff:cc:fa:64:be:26:13:b2:7d:2e:b6:
de:a7:a7:4a:1f:ab:04:29:41:a6:e3:e0:d2:64:3f:
c5:db:1c:15:cc:55:8e:0b:d1:a6:62:c3:6c:e7:e3:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B6:A1:AF:EA:CF:7B:71:F8:F2:BF:FC:93:91:57:01:4D:8A:09:D9
X509v3 Authority Key Identifier:
keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/8f62cab5-9c79-4902-a826-7c845da2ea3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.183.0/24
Signature Algorithm: sha256WithRSAEncryption
67:42:d3:89:e6:f6:3b:0b:55:a2:09:4d:9a:69:bf:63:74:0d:
cf:40:d2:d3:00:ad:26:0b:84:6b:37:15:37:5e:f8:9f:c5:a3:
02:84:3c:04:65:e2:7a:a3:95:4f:7c:03:f0:60:4f:55:83:1d:
4c:f6:9a:2e:32:d0:af:67:ad:3a:10:bc:a6:b7:68:ba:04:67:
2e:e9:58:27:7f:96:9c:13:51:6a:50:47:b5:c9:18:cd:ec:d5:
97:fd:7c:7c:ce:1c:07:eb:87:00:23:0d:7f:79:33:d4:b2:be:
28:f7:d5:4f:1f:d1:d7:b9:ed:fa:f5:05:a7:e5:42:4a:56:6a:
97:0b:9d:01:fe:1e:12:ed:2c:8b:14:c8:f2:d8:5b:9d:8a:4d:
53:ca:42:45:40:e7:91:f5:a4:42:fa:74:53:cc:2d:01:44:fe:
37:03:78:93:03:db:b3:3e:97:00:ab:2b:d3:f4:52:68:7f:52:
b9:3e:14:fd:8e:25:85:61:b4:a7:29:e5:ba:07:3b:3b:fe:7f:
85:30:04:97:cf:a6:8a:c1:c4:4b:d7:ab:85:4b:ab:20:10:87:
14:58:84:7f:61:55:a5:2d:1a:b8:6c:aa:e2:38:05:5c:3e:7c:
ed:4d:85:0d:48:ef:04:85:04:b6:96:ad:42:a1:ca:f6:16:89:
5a:fb:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:20 2024 by rpki-client on console-fra.rpki-client.org