Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa
File: 3130332e38342e3135332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: sudmsy91VZSJwL+7LCnEJ+o3H/jwlNfHDffKtivd950=
Subject key identifier: 05:17:00:36:2B:35:14:52:32:2C:F1:91:0C:B9:07:97:7B:6F:9C:EE
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 20F33BEEAA343BE9E35272B838B9F7FB5A6462B0
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa
Signing time: Mon 02 Sep 2024 23:13:12 +0000
ROA not before: Mon 02 Sep 2024 23:08:12 +0000
ROA not after: Mon 01 Sep 2025 23:13:12 +0000
asID: 36236
IP address blocks: 103.84.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f3:3b:ee:aa:34:3b:e9:e3:52:72:b8:38:b9:f7:fb:5a:64:62:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000
Validity
Not Before: Sep 2 23:08:12 2024 GMT
Not After : Sep 1 23:13:12 2025 GMT
Subject: CN=051700362B351452322CF1910CB907977B6F9CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:d7:a3:68:1f:7a:a4:04:11:ce:9d:50:cb:
61:92:aa:3b:48:71:7d:27:d4:a3:fe:b1:7f:34:19:
a8:b3:fb:b8:4c:71:f4:e8:1b:c2:57:77:15:ea:0d:
a5:b4:6f:d6:a4:38:d0:b0:77:ff:d8:bd:3b:c0:66:
9c:07:1f:22:87:46:20:57:e4:70:f0:38:8d:d7:33:
93:b1:3c:ab:c8:81:0f:29:36:38:a7:f8:b4:d7:fe:
a5:14:a4:d4:c2:be:1a:8d:5f:48:ac:02:4e:53:db:
48:b3:14:88:12:64:24:dd:fd:05:f5:6a:2e:23:5a:
7e:5d:37:77:3e:02:ed:1a:3b:8f:bf:c7:9a:bd:b1:
57:be:5b:16:65:5b:5f:0f:86:e6:a1:66:74:eb:16:
8a:40:7f:40:6a:10:d6:5e:ce:99:db:d9:dd:67:c5:
b7:52:48:70:ef:65:5d:d5:24:04:a0:9c:8c:d5:97:
43:dc:89:63:f6:68:c2:07:27:14:e4:6a:dc:93:4e:
1e:7f:78:ba:54:89:fd:35:e2:c6:f6:d9:09:34:dc:
56:45:96:a9:6b:df:04:13:ca:63:2c:92:8d:71:12:
ac:70:08:f0:a2:db:a6:86:42:1c:c7:55:69:80:03:
01:ec:50:c6:68:40:05:64:53:40:16:f3:5e:01:e8:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:17:00:36:2B:35:14:52:32:2C:F1:91:0C:B9:07:97:7B:6F:9C:EE
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:27:8a:9f:fb:01:83:32:68:8e:59:e2:ed:78:8b:23:c5:b1:
84:b0:48:45:f5:87:6a:a5:7d:47:2b:c0:0d:bc:a4:77:a2:41:
ff:5c:6e:2f:87:60:20:c2:16:82:61:11:f4:c4:aa:84:ca:e7:
5c:0b:1c:36:57:71:dc:60:5b:83:11:49:db:33:be:d7:af:45:
7a:73:31:84:5b:92:2c:fe:f9:6e:8f:7e:ea:b9:a0:31:2e:93:
05:e7:11:11:5f:76:f8:71:d7:28:5d:d3:67:cd:4d:2f:f4:23:
44:e8:c4:79:39:ef:b2:86:af:ad:51:83:e3:bf:aa:5e:e9:81:
0a:0f:43:28:5b:d4:f4:5b:bc:1a:e6:4d:e3:d7:bd:2f:56:57:
68:10:78:57:f7:18:df:1b:fa:60:90:ad:09:4d:17:3b:d4:0b:
62:08:3f:1d:c8:88:1d:f1:7b:c3:30:ba:68:a3:e4:46:41:67:
8c:e7:7b:59:c8:1c:5e:6e:65:86:c7:8f:65:24:8b:e2:19:00:
1e:01:06:41:da:79:37:47:7f:86:00:59:b1:ed:84:06:0f:9f:
22:fb:35:48:fc:03:0f:ae:be:56:0e:52:de:08:cc:f1:d6:0a:
87:ea:a2:b2:43:14:6f:19:e6:97:6e:28:e0:cd:6b:bc:ba:02:
5a:e9:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:23:59 2025 by rpki-client