
Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer: RFC 3779 resource not subset of parent's resources
Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.avsisp.com/repo/AVSISP/2/AS23507.asa
File: AS23507.asa (raw, json)
Hash identifier: v/RWbdTT7nyOVk/zonhrJK5jXGXmKVfUU+sBs7PHTig=
Subject key identifier: D3:95:82:83:D1:8B:FC:D2:C6:EF:D9:26:3D:FD:59:D5:8B:58:60:25
Certificate issuer: /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Certificate serial: 0F8946039A6008F1ED2614F179DB97B8B7F6614F
Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/2/AS23507.asa
Signing time: Wed 31 Dec 2025 10:12:04 +0000
ASPA not before: Wed 31 Dec 2025 10:07:04 +0000
ASPA not after: Wed 30 Dec 2026 10:12:04 +0000
Customer ASID: 23507
Providers: AS: 1002
AS: 20473
AS: 204044
AS: 205941
AS: 210464
AS: 213669
AS: 213683
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:89:46:03:9a:60:08:f1:ed:26:14:f1:79:db:97:b8:b7:f6:61:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Validity
Not Before: Dec 31 10:07:04 2025 GMT
Not After : Dec 30 10:12:04 2026 GMT
Subject: CN=D3958283D18BFCD2C6EFD9263DFD59D58B586025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:ca:9f:5c:eb:b7:07:b7:8a:09:ef:6d:23:
9b:1b:fb:a1:44:bb:38:fa:f4:5e:ef:2e:29:0e:4a:
a7:e9:92:86:90:19:b8:da:f7:c5:92:b3:be:94:db:
3f:fa:b0:cc:74:50:c3:e4:2a:1b:22:f7:ba:2f:5a:
e0:1d:fb:b2:72:74:60:db:b2:2c:12:1b:e4:10:6a:
e0:19:da:e0:47:8b:01:f6:49:3b:0d:04:3b:44:b7:
e2:b4:12:a0:40:ec:40:66:d3:55:4b:d8:30:d3:01:
1a:ea:3b:6c:50:40:ac:35:b8:53:4d:0b:ce:4a:34:
10:03:6c:0c:48:27:8b:1c:e2:77:ea:36:c6:fb:35:
e7:0d:19:92:6f:dd:58:ee:91:0e:8f:6d:b0:26:b2:
5e:d0:58:12:74:9e:65:f5:c8:01:59:04:37:60:e9:
ec:81:f0:bc:8b:cd:4a:54:79:ba:e2:cb:c4:0a:0e:
10:c6:74:6f:00:fe:3a:57:39:01:d4:96:82:f5:6c:
c9:e7:ac:27:14:e0:f2:d9:8f:63:73:01:7d:01:67:
3c:43:40:53:bc:e8:5c:cd:e0:e2:32:6f:bd:e5:f5:
04:83:24:c8:67:2e:c8:c7:9d:28:8d:c2:e0:ca:0f:
7e:08:74:72:d3:31:8e:47:34:cf:97:5d:4c:f8:65:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:95:82:83:D1:8B:FC:D2:C6:EF:D9:26:3D:FD:59:D5:8B:58:60:25
X509v3 Authority Key Identifier:
keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/AS23507.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23507
Signature Algorithm: sha256WithRSAEncryption
82:63:50:a5:7c:27:bc:f2:bf:91:32:19:b8:ca:3f:41:84:a6:
fc:d4:e5:bf:20:d2:a6:a8:25:a2:16:f0:eb:43:91:49:b5:f6:
2a:21:bc:fa:63:a8:c6:00:82:21:3c:6d:8f:a8:4a:e5:c6:ce:
01:aa:cd:23:21:e8:cf:74:d7:ce:36:09:97:d5:f2:96:d1:9d:
42:df:ae:ee:c5:18:7e:c2:90:f5:6e:a9:2b:69:69:3f:33:94:
d1:6f:a4:be:61:d5:3a:14:b8:d4:3b:07:45:08:55:37:41:bf:
04:04:46:9b:f8:bd:7e:a8:e8:a2:e2:dd:f1:a7:6c:c2:65:9a:
bb:13:c1:21:f4:90:3d:74:fd:77:9b:b4:fe:a2:dd:6b:8e:7a:
0a:48:a1:6f:4d:3b:b0:cf:e0:6a:1d:80:4d:17:43:b5:39:af:
0f:c7:79:84:6d:ba:0a:9f:16:aa:67:fd:e5:f6:21:d1:b3:89:
31:32:00:4d:e2:11:ed:4f:72:dc:05:dc:5f:1c:ca:1d:57:7f:
8d:f7:56:e4:48:17:c2:db:bb:6b:15:8d:86:5a:16:6b:07:12:
29:a9:df:fa:1c:b3:ca:1a:33:bb:0e:6e:7a:d2:3b:e5:c6:e7:
69:eb:51:4d:bd:5f:a9:d4:5d:a6:ae:08:d9:1b:be:6e:16:fb:
06:6f:29:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:32:06 2026 by rpki-client