Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ce9687f5-c53e-42b3-895f-0c0fb6f5da07.roa
File: ce9687f5-c53e-42b3-895f-0c0fb6f5da07.roa (raw, json)
Hash identifier: xx16+yHCFMct3xLQ6yIe+wtPWhpO1zxMiu25YlAzcEw=
Subject key identifier: 3C:8F:2D:7A:29:9E:66:2D:0D:29:4D:69:47:C8:30:C8:BE:CA:C6:91
Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial: 51BF8A64CE77638E1E9A5C318CD956F02031E585
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ce9687f5-c53e-42b3-895f-0c0fb6f5da07.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 35916
IP address blocks: 173.82.183.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:bf:8a:64:ce:77:63:8e:1e:9a:5c:31:8c:d9:56:f0:20:31:e5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: serialNumber=5febb03fc9c7484bd2d514ffba1ae7f51949fa408324f397d3d2ff9119bdca8e, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:2c:a3:95:ff:9f:bd:ff:4a:8b:c2:bf:a1:
f5:f3:80:a1:dd:4b:b5:07:18:87:64:42:15:ca:7f:
ce:4f:d7:0d:f8:be:22:a4:db:f4:19:5b:66:a6:25:
a4:04:b1:21:4b:ec:ad:16:01:c8:98:a2:af:93:0a:
0e:cb:d5:e5:f3:0b:85:be:a8:13:24:93:87:49:2f:
72:6e:52:27:4f:b8:71:71:df:7b:5a:1d:58:f4:36:
0e:f0:4d:2e:9c:80:31:c6:e0:12:2f:77:a3:c0:25:
b7:52:dc:3b:9e:38:b9:bd:bc:40:eb:fd:48:42:10:
d5:40:e4:57:43:e7:2b:85:29:5a:ee:ad:8e:2a:6e:
ed:e5:42:97:63:d0:fc:78:34:62:b5:c5:59:b1:df:
55:3c:53:79:5c:23:b9:8f:7c:8f:fa:2f:28:5d:54:
a4:2e:9d:42:78:15:d4:ca:e0:2b:21:c7:1a:54:7c:
f8:28:9b:cc:3d:17:39:d9:52:5e:2d:52:d2:b1:f7:
ff:8e:c4:95:ba:3f:56:e7:e6:aa:ac:42:47:91:7e:
24:e5:ab:74:57:39:df:46:a4:36:70:bd:65:a0:b9:
c0:e8:e3:d1:68:5d:31:02:fb:16:a8:77:01:80:c0:
34:27:15:49:04:8c:75:33:77:32:9e:98:4e:d4:2a:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:2D:7A:29:9E:66:2D:0D:29:4D:69:47:C8:30:C8:BE:CA:C6:91
X509v3 Authority Key Identifier:
keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ce9687f5-c53e-42b3-895f-0c0fb6f5da07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.183.0/24
Signature Algorithm: sha256WithRSAEncryption
80:29:a1:4c:45:0b:09:72:6c:20:79:2c:38:00:0a:73:b2:a0:
3f:35:ac:71:c5:57:9e:62:f7:0c:b3:db:e8:39:60:38:d3:20:
c5:6c:55:b9:1e:25:b6:db:c9:14:40:02:cf:aa:5e:3d:42:22:
c5:9b:34:5d:c7:f6:70:9d:4e:14:50:ea:60:7c:b4:d8:57:8a:
d6:c1:c9:ac:f3:07:97:71:e2:61:9e:d4:ba:57:73:19:da:99:
2b:3a:86:32:32:a5:32:b6:25:3f:4a:47:42:fc:d9:e2:f4:eb:
e4:50:75:b5:80:d1:63:c0:4b:a1:77:aa:19:84:c1:c1:36:6a:
09:28:ef:57:4d:91:68:3a:53:3d:a0:76:48:04:98:58:f6:94:
73:fa:52:5e:21:21:9d:6c:93:d4:27:f3:d3:a8:d7:1e:12:c1:
43:51:af:ce:b7:e0:11:30:a8:8d:52:bf:ff:76:a7:f7:00:dc:
2d:3a:16:3d:05:04:aa:06:da:53:8b:33:31:bc:62:1a:e4:d1:
b0:a6:d1:b4:88:e1:df:61:1e:e1:d5:7f:4d:f8:c9:f4:db:ab:
de:74:70:20:77:ef:13:ff:e8:c2:67:5c:87:67:1e:b1:0e:25:
d6:eb:f7:9f:8f:81:33:e5:5f:97:6d:4c:3a:11:26:b3:56:d8:
f5:eb:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:52:02 2024 by rpki-client on console-ams.rpki-client.org