Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204136.roa
File: AS204136.roa (raw, json)
Hash identifier: liW7LV8zcT0VHICPLCAFca643OYscqZtZnhB3yg8FF4=
Subject key identifier: D9:93:F1:E7:0A:40:9E:35:F1:9C:8C:03:E0:06:D7:98:1D:93:67:F1
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5A37DDEE91B7BEE99399504992984E4FFB8E5551
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204136.roa
Signing time: Fri 13 Dec 2024 02:56:30 +0000
ROA not before: Fri 13 Dec 2024 02:51:30 +0000
ROA not after: Fri 12 Dec 2025 02:56:30 +0000
asID: 204136
IP address blocks: 103.230.141.0/24 maxlen: 24
185.121.177.0/24 maxlen: 24
2a0a:6043::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:37:dd:ee:91:b7:be:e9:93:99:50:49:92:98:4e:4f:fb:8e:55:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:30 2024 GMT
Not After : Dec 12 02:56:30 2025 GMT
Subject: CN=D993F1E70A409E35F19C8C03E006D7981D9367F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:5e:d1:b1:03:b7:fd:4a:a4:e8:4c:7d:3a:
6f:1d:d6:c3:6e:39:49:b9:0d:7f:39:79:d8:80:54:
74:f0:03:93:0a:0c:dc:b5:68:89:79:8b:13:d2:37:
4c:b1:ef:e6:25:fe:5e:60:82:2e:f5:32:a3:83:cd:
33:b3:4c:1b:ff:c5:43:ac:6a:9c:a6:80:bc:98:17:
73:94:f6:d5:b5:ed:cf:af:04:76:e4:bf:f8:55:86:
aa:2a:48:2f:fc:ca:68:40:14:00:ba:df:53:60:6d:
0e:f4:2e:c6:4e:07:c5:11:a1:15:95:31:cf:df:c2:
1e:b6:8d:7a:ea:22:e5:bc:ca:ce:c6:e2:46:65:3b:
b3:99:48:76:fa:88:75:20:98:1b:98:8e:d8:6a:f0:
53:5f:b5:d9:35:36:61:1b:26:da:cc:cc:fa:ff:84:
7d:08:91:7a:58:f6:38:e5:00:e2:5b:9c:e2:1d:24:
bc:ff:95:07:a9:58:fa:ca:3d:03:4f:9c:f5:35:8a:
5f:56:6c:c4:ed:24:05:b4:c2:6a:f7:b4:97:8c:6d:
9c:4f:db:dc:e7:04:41:9f:a6:8d:50:3a:38:04:67:
6d:33:37:a7:df:46:1c:cf:60:99:81:fc:c6:5b:0e:
94:d0:82:9f:73:20:83:e6:3b:7b:0d:f8:4d:7d:44:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:93:F1:E7:0A:40:9E:35:F1:9C:8C:03:E0:06:D7:98:1D:93:67:F1
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.141.0/24
185.121.177.0/24
IPv6:
2a0a:6043::/32
Signature Algorithm: sha256WithRSAEncryption
4d:21:86:77:71:68:12:b3:8b:fe:cd:53:38:4b:41:99:61:6a:
fa:d9:28:83:b5:2d:13:fe:7f:22:4c:73:fd:2a:24:ee:3b:7c:
1a:9d:d8:ee:ad:fe:da:cf:30:06:c0:b9:65:0a:2b:a3:18:28:
fc:8f:4b:f7:b0:1c:9e:09:b2:19:22:24:f9:d4:db:fa:62:e1:
1c:ae:17:2c:c3:c9:eb:13:a8:0d:7b:75:06:6e:9a:05:8e:cc:
f7:3d:af:9e:1e:3a:93:95:4f:d6:72:77:24:b1:c4:d8:de:18:
d5:30:ab:99:45:0d:f5:d5:b4:c8:d2:b6:f9:52:5e:a5:2a:51:
20:67:5f:81:a4:d6:99:ba:e9:0b:46:02:ff:97:97:2f:76:b8:
d6:51:74:57:c4:5d:e8:19:29:b9:69:e8:dd:ff:e6:d9:e0:2b:
5d:07:04:83:f9:82:c6:0f:c8:9a:64:d4:88:c7:48:a2:7e:3b:
a4:b4:f2:1c:36:a4:23:db:53:3d:36:7e:c0:cc:7d:5f:7b:34:
00:04:cf:48:6a:c9:e3:46:4a:b9:66:b1:7c:bb:7d:55:24:92:
36:97:4b:2a:1a:0a:cc:80:00:54:1e:1e:b7:e8:3f:c7:4a:16:
e1:b1:89:a8:fb:d6:ea:7b:81:e8:9b:61:b6:82:e7:37:d9:bf:
59:50:25:64
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUWjfd7pG3vumTmVBJkphOT/uOVVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDEyMTMwMjUxMzBaFw0yNTEyMTIwMjU2MzBaMDMxMTAvBgNV
BAMTKEQ5OTNGMUU3MEE0MDlFMzVGMTlDOEMwM0UwMDZENzk4MUQ5MzY3RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ol7RsQO3/Uqk6Ex9Om8d1sNu
OUm5DX85ediAVHTwA5MKDNy1aIl5ixPSN0yx7+Yl/l5ggi71MqODzTOzTBv/xUOs
apymgLyYF3OU9tW17c+vBHbkv/hVhqoqSC/8ymhAFAC631NgbQ70LsZOB8URoRWV
Mc/fwh62jXrqIuW8ys7G4kZlO7OZSHb6iHUgmBuYjthq8FNftdk1NmEbJtrMzPr/
hH0IkXpY9jjlAOJbnOIdJLz/lQepWPrKPQNPnPU1il9WbMTtJAW0wmr3tJeMbZxP
29znBEGfpo1QOjgEZ20zN6ffRhzPYJmB/MZbDpTQgp9zIIPmO3sN+E19RPpDAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQU2ZPx5wpAnjXxnIwD4AbXmB2TZ/EwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA0MTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQAZ+aNAwQAuXmxMA0EAgACMAcDBQAqCmBDMA0GCSqG
SIb3DQEBCwUAA4IBAQBNIYZ3cWgSs4v+zVM4S0GZYWr62SiDtS0T/n8iTHP9KiTu
O3wandjurf7azzAGwLllCiujGCj8j0v3sByeCbIZIiT51Nv6YuEcrhcsw8nrE6gN
e3UGbpoFjsz3Pa+eHjqTlU/WcnckscTY3hjVMKuZRQ311bTI0rb5Ul6lKlEgZ1+B
pNaZuukLRgL/l5cvdrjWUXRXxF3oGSm5aejd/+bZ4CtdBwSD+YLGD8iaZNSIx0ii
fjuktPIcNqQj21M9Nn7AzH1fezQABM9IasnjRkq5ZrF8u31VJJI2l0sqGgrMgABU
Hh636D/HShbhsYmo+9bqe4Hom2G2guc32b9ZUCVk
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:24 2025 by rpki-client