Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
File: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (raw, json)
Hash identifier: paVpjoCGXR+zEHNCcgnnd+cMUnGsI5HyU8w64DlcpBk=
Subject key identifier: 76:47:56:20:E6:3D:ED:A4:B4:12:8D:E9:98:A3:A4:97:9F:67:FD:94
Certificate issuer: /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial: 6183D3C372B831823F324E9002F10947970F39E8
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
Signing time: Fri 16 Aug 2024 07:16:37 +0000
ROA not before: Fri 16 Aug 2024 07:11:37 +0000
ROA not after: Fri 15 Aug 2025 07:16:37 +0000
asID: 983
IP address blocks: 103.248.228.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:83:d3:c3:72:b8:31:82:3f:32:4e:90:02:f1:09:47:97:0f:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91130000000
Validity
Not Before: Aug 16 07:11:37 2024 GMT
Not After : Aug 15 07:16:37 2025 GMT
Subject: CN=76475620E63DEDA4B4128DE998A3A4979F67FD94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:4a:ab:97:96:85:31:09:f4:83:8b:e5:3f:
f4:b5:67:ea:d0:ec:85:a9:8a:96:f6:90:8e:1a:24:
72:7b:a7:23:b9:09:c4:fb:14:d2:d4:05:16:a5:d5:
ef:5f:e6:3c:07:35:22:8d:39:21:1f:52:5b:9b:a9:
ec:95:65:b0:8d:be:d7:79:e5:9e:e1:28:87:55:56:
4b:20:b8:0b:7d:b3:fd:14:0b:24:5a:7b:4e:1a:d2:
e1:85:99:77:9a:6e:df:1c:74:6d:c6:03:30:99:f5:
f6:5c:c4:83:b0:52:4b:b1:5c:e8:02:16:19:ec:b5:
6c:c6:50:5d:85:76:89:03:71:2b:b9:b7:8b:72:e9:
b4:57:ea:b0:b4:a4:15:03:36:d8:8f:92:28:1d:1d:
e4:61:ea:cc:f8:05:99:73:20:ba:4e:20:c9:b9:2a:
29:dc:e8:d4:c5:b3:72:a3:89:3d:1c:c4:ec:ec:56:
7d:ca:9e:53:80:53:a8:7d:ce:6d:88:11:32:dd:31:
0f:6a:2c:75:0d:07:f0:be:ba:7b:6d:a6:ca:0a:51:
46:d4:00:8f:72:22:4f:04:43:4e:24:12:ed:88:be:
8e:2d:36:f9:c0:66:e1:40:71:dd:2a:c5:61:2d:1e:
2d:20:e0:27:44:84:51:eb:91:11:fa:ec:83:9e:b4:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:47:56:20:E6:3D:ED:A4:B4:12:8D:E9:98:A3:A4:97:9F:67:FD:94
X509v3 Authority Key Identifier:
keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.228.0/23
Signature Algorithm: sha256WithRSAEncryption
78:aa:58:8f:9b:65:f6:2e:a0:94:09:10:5a:c1:79:bc:5d:06:
d2:97:ff:1c:b9:c7:a3:6b:4b:ca:52:a0:72:e1:06:17:15:4b:
56:99:60:f7:83:3d:2a:d3:fd:22:c2:5d:aa:10:60:88:45:0e:
96:e2:ef:77:b6:fb:db:68:a5:5c:2e:36:46:a1:5a:43:f2:e9:
33:b6:ad:43:dd:89:22:ff:2a:57:56:e6:ff:37:aa:f7:48:74:
eb:f6:ea:62:1b:eb:e7:b3:31:8b:ab:5b:31:e7:ab:6e:77:aa:
5a:47:ef:0f:18:05:2d:84:c4:36:ef:6e:fa:48:bf:23:9c:70:
68:4d:8b:6b:9e:3b:d8:89:cc:92:cb:4f:bb:4f:4c:75:fd:ff:
60:4d:5a:10:94:ab:32:a4:7a:5d:fc:1f:0e:c4:45:b0:73:ee:
a7:62:c2:dc:3b:af:bb:f5:dd:0c:c7:dd:e5:96:b2:06:35:4a:
3a:b6:1b:46:84:ec:ff:90:36:de:bc:aa:6c:8c:13:cf:ee:b6:
d2:fc:64:f2:6f:7a:dd:d4:34:33:79:b1:76:b8:e6:cd:33:91:
45:dd:f1:e4:11:ac:b6:fb:9e:af:04:58:a9:b6:7c:44:73:60:
3c:74:7d:6c:57:d2:47:28:e1:fa:f2:cd:c9:3e:60:6f:bc:6b:
84:32:b0:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYYPTw3K4MYI/Mk6QAvEJR5cPOegwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTMwMDAwMDAwMTEwLwYDVQQFEyg5MTE4RTVBNkJF
NUU4MkFFNTBBOUJGQTA3MTk3NUY2NkVDNTkxNzBGMB4XDTI0MDgxNjA3MTEzN1oX
DTI1MDgxNTA3MTYzN1owMzExMC8GA1UEAxMoNzY0NzU2MjBFNjNERURBNEI0MTI4
REU5OThBM0E0OTc5RjY3RkQ5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMA1SquXloUxCfSDi+U/9LVn6tDshamKlvaQjhokcnunI7kJxPsU0tQFFqXV
71/mPAc1Io05IR9SW5up7JVlsI2+13nlnuEoh1VWSyC4C32z/RQLJFp7ThrS4YWZ
d5pu3xx0bcYDMJn19lzEg7BSS7Fc6AIWGey1bMZQXYV2iQNxK7m3i3LptFfqsLSk
FQM22I+SKB0d5GHqzPgFmXMguk4gybkqKdzo1MWzcqOJPRzE7OxWfcqeU4BTqH3O
bYgRMt0xD2osdQ0H8L66e22mygpRRtQAj3IiTwRDTiQS7Yi+ji02+cBm4UBx3SrF
YS0eLSDgJ0SEUeuREfrsg560ChUCAwEAAaOCAjowggI2MB0GA1UdDgQWBBR2R1Yg
5j3tpLQSjemYo6SXn2f9lDAfBgNVHSMEGDAWgBSRGOWmvl6CrlCpv6Bxl19m7FkX
DzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5
ZjJmYjI3MGNhOC8zLzkxMThFNUE2QkU1RTgyQUU1MEE5QkZBMDcxOTc1RjY2RUM1
OTE3MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2tSamxwcjVlZ3E1UXFiLWdjWmRmWnV4WkZ3OC5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5ZjJmYjI3MGNh
OC8zLzMxMzAzMzJlMzIzNDM4MmUzMjMyMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNl
MjAzOTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAFn+OQwDQYJKoZIhvcNAQELBQADggEBAHiqWI+b
ZfYuoJQJEFrBebxdBtKX/xy5x6NrS8pSoHLhBhcVS1aZYPeDPSrT/SLCXaoQYIhF
Dpbi73e2+9topVwuNkahWkPy6TO2rUPdiSL/KldW5v83qvdIdOv26mIb6+ezMYur
WzHnq253qlpH7w8YBS2ExDbvbvpIvyOccGhNi2ueO9iJzJLLT7tPTHX9/2BNWhCU
qzKkel38Hw7ERbBz7qdiwtw7r7v13QzH3eWWsgY1Sjq2G0aE7P+QNt68qmyME8/u
ttL8ZPJvet3UNDN5sXa45s0zkUXd8eQRrLb7nq8EWKm2fERzYDx0fWxX0kco4fry
zck+YG+8a4QysAY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:48:00 2025 by rpki-client