Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e4372835-66b9-43e3-92ac-9ed154576c55.roa
File: e4372835-66b9-43e3-92ac-9ed154576c55.roa (raw, json)
Hash identifier: M+hnWQneMMRBEcFXh4jV4V9vxbuDHG4notXGIlle07k=
Subject key identifier: 82:6B:60:23:3E:41:73:D0:3E:58:87:31:46:C0:E7:B5:F8:3B:91:34
Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial: 0A97974CA562063B432F4AF3610A74FD4DB6A063
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e4372835-66b9-43e3-92ac-9ed154576c55.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 395681
IP address blocks: 216.127.191.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:97:97:4c:a5:62:06:3b:43:2f:4a:f3:61:0a:74:fd:4d:b6:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:b9:b4:ee:d4:07:a9:e9:e0:11:1c:d0:d2:
73:4b:08:a6:db:c5:fa:83:b6:c0:ef:df:24:50:fb:
2c:36:1d:40:59:fc:9e:1a:a1:69:29:01:34:23:c6:
f8:3a:b3:47:47:a6:83:db:ed:72:f4:b4:2b:3c:b0:
71:67:93:51:66:30:31:84:85:fa:f6:8f:0d:d8:62:
67:a2:10:e7:9a:b0:73:04:e8:00:89:34:c2:3d:60:
97:bf:67:aa:6c:1e:38:2c:43:e7:18:d7:e2:3c:74:
fa:75:9b:19:6a:8c:35:83:aa:75:2c:9f:1c:d3:0e:
5f:e1:95:7e:92:3c:b2:62:ca:f4:c9:0b:8b:df:3c:
19:b1:cb:20:07:37:db:a7:01:d1:df:e4:f7:1b:7c:
75:74:9e:f6:3e:cc:09:96:8f:28:bf:3b:73:01:a6:
c9:86:c7:22:66:52:77:44:4a:77:cf:39:48:db:83:
2f:9e:45:4a:1b:de:13:c2:45:b1:83:ca:96:8c:f3:
aa:68:d4:0e:94:0f:a3:d7:85:6f:2b:84:9e:d6:31:
09:cb:cf:2a:38:f7:cf:c2:43:fb:5b:98:78:67:06:
c9:85:3f:6f:68:e4:fb:39:63:dc:16:97:65:73:e0:
aa:f7:a1:6a:f6:02:d0:fe:86:ed:f9:7e:54:79:7e:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:60:23:3E:41:73:D0:3E:58:87:31:46:C0:E7:B5:F8:3B:91:34
X509v3 Authority Key Identifier:
keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/e4372835-66b9-43e3-92ac-9ed154576c55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.127.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:15:8f:00:36:ac:60:e2:1c:20:69:0e:3a:12:6c:43:01:71:
e6:13:c6:cd:00:d8:61:5c:25:e3:1b:e9:13:a6:5c:8f:c7:12:
fe:0e:86:57:d5:d8:10:6e:5a:7b:2e:25:88:03:d8:c0:35:6b:
a2:23:89:8f:d3:10:6e:35:a0:b8:c0:59:b7:c1:ce:54:1b:71:
4e:4e:68:2e:9e:ab:0d:c3:5d:2f:25:2a:d8:b7:01:85:ab:f0:
9a:fd:9b:d7:63:50:79:ec:f5:ac:06:20:5c:9d:a0:8d:07:ee:
77:bc:1e:3f:26:69:23:ad:4a:3a:e4:6d:99:80:da:49:d1:0e:
3c:a7:49:9f:68:ff:4d:a8:f4:8d:f7:e3:d4:69:5c:10:5d:3e:
e6:07:4f:3d:b4:dd:3f:cd:21:b0:e9:84:ef:5a:4e:31:28:6c:
11:d5:85:9d:6d:09:eb:99:84:5b:30:3f:a3:f7:dd:27:b7:f9:
ab:b1:e6:38:63:f4:8f:08:75:66:04:e7:b0:d7:2a:0a:92:e7:
d0:2f:1c:1a:cc:15:87:16:fa:37:84:d9:06:ce:e1:bb:e2:8f:
1f:52:ae:c9:cc:2b:58:44:5c:96:cb:1a:74:f0:10:96:45:e3:
36:92:69:19:f1:45:3a:3d:01:0f:96:d0:67:80:50:3c:b9:31:
72:0f:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:24 2025 by rpki-client