Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
File: 3130332e36382e3130382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: F6/A8X0bwdTuQhkBPj8Rg2BKVJB7vnu46apG2DA0gc0=
Subject key identifier: 8A:20:4B:23:CF:D8:E3:FB:BF:D8:40:F3:A4:C7:8B:C7:FA:88:58:67
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 010601B535BF872582EF5E3B90167FDD823ACFE7
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
Signing time: Tue 05 Nov 2024 03:40:11 +0000
ROA not before: Tue 05 Nov 2024 03:35:11 +0000
ROA not after: Tue 04 Nov 2025 03:40:11 +0000
asID: 61138
IP address blocks: 103.68.108.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:06:01:b5:35:bf:87:25:82:ef:5e:3b:90:16:7f:dd:82:3a:cf:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Nov 5 03:35:11 2024 GMT
Not After : Nov 4 03:40:11 2025 GMT
Subject: CN=8A204B23CFD8E3FBBFD840F3A4C78BC7FA885867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:9f:c6:21:c8:9a:c5:65:7f:48:24:36:f8:
bc:9b:d8:90:b0:d5:b1:34:68:ea:21:8e:96:89:f3:
71:0f:a0:91:57:3d:33:16:ae:9b:7c:38:1d:ed:99:
df:83:af:2a:65:c2:60:54:23:be:66:ae:e9:78:0c:
00:27:1c:d9:9a:20:31:80:70:f6:6e:d4:47:91:d6:
dc:2b:a1:fa:9a:84:b9:83:65:f4:ee:ce:c5:d5:68:
a5:39:00:2a:c2:01:55:e0:6c:39:dc:d9:4f:d9:91:
53:aa:13:86:61:11:c8:9c:ec:2b:67:e6:b2:ce:f1:
ef:e4:b7:93:84:30:42:46:f6:1f:41:ca:0d:55:0f:
f5:86:88:d0:86:5c:63:5f:91:67:78:f2:fb:ae:d2:
81:d6:d5:f8:cd:6d:84:02:1a:89:00:f2:ea:2f:d6:
16:ed:50:c2:0b:9c:40:17:69:e5:30:d8:62:8d:2f:
2c:b1:07:17:bb:f1:0d:d8:76:b0:ec:f4:86:fc:b3:
f2:9e:f9:e7:62:cd:36:86:9d:0e:68:e9:94:0c:64:
3f:49:c2:77:b3:ee:39:90:26:81:73:a7:56:4d:c9:
bf:31:11:e9:16:a5:bf:82:37:b2:e4:32:7d:69:80:
50:37:8c:fc:c2:cb:cc:30:09:29:24:50:db:d9:a6:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:20:4B:23:CF:D8:E3:FB:BF:D8:40:F3:A4:C7:8B:C7:FA:88:58:67
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9b:4e:0a:04:e2:bb:19:e4:e3:36:68:4f:d2:c4:2a:3c:4a:
bc:3f:78:2c:44:af:8e:fa:da:c2:7a:4a:7d:88:f9:fc:6a:b9:
a3:c5:bf:0e:c0:7e:1a:f9:0f:6f:e4:67:9b:51:93:c1:87:fd:
99:57:d1:95:73:a0:b5:a6:77:11:c3:1b:9e:53:4c:5e:d5:0f:
a4:ca:7a:c1:2a:9d:7f:1e:51:cf:d0:32:02:86:d9:f7:00:29:
98:85:3b:fc:aa:c3:b8:8b:f1:77:8e:03:73:b6:5f:31:d0:d6:
f4:f9:22:e1:b4:e3:7a:ab:f8:e7:89:21:fc:4d:97:2b:b6:5f:
15:fe:bf:c7:7d:f8:b5:e8:9a:1b:b9:d6:66:50:da:67:37:3b:
2c:c6:44:a7:77:58:4e:4d:19:50:76:d1:1a:db:25:01:2c:a6:
5a:54:2e:80:16:f9:c5:84:8e:46:58:f1:b1:a8:07:64:b0:a7:
98:37:8e:86:02:9c:e9:ea:83:50:73:2c:59:da:12:c8:65:6c:
f1:d4:fd:24:11:4b:2d:e0:2f:40:d8:96:83:b0:a0:1d:02:b7:
5a:95:3c:a7:67:8a:70:25:7a:f5:b7:4b:84:ad:2e:3b:4e:87:
6f:34:79:8a:cb:aa:35:d1:3f:57:20:59:4f:e9:9b:dc:b3:13:
ad:ac:33:f2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAQYBtTW/hyWC7147kBZ/3YI6z+cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTI0MTEwNTAzMzUxMVoX
DTI1MTEwNDAzNDAxMVowMzExMC8GA1UEAxMoOEEyMDRCMjNDRkQ4RTNGQkJGRDg0
MEYzQTRDNzhCQzdGQTg4NTg2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL8Cn8YhyJrFZX9IJDb4vJvYkLDVsTRo6iGOlonzcQ+gkVc9Mxaum3w4He2Z
34OvKmXCYFQjvmau6XgMACcc2ZogMYBw9m7UR5HW3Cuh+pqEuYNl9O7OxdVopTkA
KsIBVeBsOdzZT9mRU6oThmERyJzsK2fmss7x7+S3k4QwQkb2H0HKDVUP9YaI0IZc
Y1+RZ3jy+67SgdbV+M1thAIaiQDy6i/WFu1QwgucQBdp5TDYYo0vLLEHF7vxDdh2
sOz0hvyz8p7552LNNoadDmjplAxkP0nCd7PuOZAmgXOnVk3JvzER6Ralv4I3suQy
fWmAUDeM/MLLzDAJKSRQ29mm4ccCAwEAAaOCAjwwggI4MB0GA1UdDgQWBBSKIEsj
z9jj+7/YQPOkx4vH+ohYZzAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzYzODJlMzEzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzYzMTMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdEbDANBgkqhkiG9w0BAQsFAAOCAQEAH5tO
CgTiuxnk4zZoT9LEKjxKvD94LESvjvrawnpKfYj5/Gq5o8W/DsB+GvkPb+Rnm1GT
wYf9mVfRlXOgtaZ3EcMbnlNMXtUPpMp6wSqdfx5Rz9AyAobZ9wApmIU7/KrDuIvx
d44Dc7ZfMdDW9Pki4bTjeqv454kh/E2XK7ZfFf6/x334teiaG7nWZlDaZzc7LMZE
p3dYTk0ZUHbRGtslASymWlQugBb5xYSORljxsagHZLCnmDeOhgKc6eqDUHMsWdoS
yGVs8dT9JBFLLeAvQNiWg7CgHQK3WpU8p2eKcCV69bdLhK0uO06HbzR5isuqNdE/
VyBZT+mb3LMTrawz8g==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:23 2025 by rpki-client