Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32322d3234203d3e20313531383137.roa
File: 3130332e3230382e38342e302f32322d3234203d3e20313531383137.roa (raw, json)
Hash identifier: MjY6SC/b8YsxoAoqrFVGxDw3XKmvMoSkSbSoe/jQLT0=
Subject key identifier: A3:FE:5F:29:0F:BC:F7:F2:F8:D5:47:74:56:B2:A1:8A:5F:AE:BF:D1
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 65B01E5C9449606436ADA62ECC38737589BF300B
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32322d3234203d3e20313531383137.roa
Signing time: Sun 01 Dec 2024 20:46:05 +0000
ROA not before: Sun 01 Dec 2024 20:41:05 +0000
ROA not after: Sun 30 Nov 2025 20:46:05 +0000
asID: 151817
IP address blocks: 103.208.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b0:1e:5c:94:49:60:64:36:ad:a6:2e:cc:38:73:75:89:bf:30:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Dec 1 20:41:05 2024 GMT
Not After : Nov 30 20:46:05 2025 GMT
Subject: CN=A3FE5F290FBCF7F2F8D5477456B2A18A5FAEBFD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:7c:b1:6a:9c:47:df:51:6c:c6:c8:24:aa:
79:43:7e:22:4d:01:93:8b:f7:9e:72:dd:bb:99:d7:
fe:86:44:70:ad:93:0b:7d:9a:95:d5:78:b4:65:52:
12:4d:4a:dc:b1:da:34:90:96:bb:5d:88:1e:bf:10:
8d:fe:b2:29:6c:9d:a2:62:df:14:f3:e0:f8:a8:ab:
0d:79:50:88:0f:38:4e:30:19:2c:38:7c:ec:33:ba:
ce:26:96:77:8e:8f:ad:d4:17:a2:b7:58:a1:78:8a:
df:db:4d:64:b4:64:39:11:d1:66:73:37:d8:c3:6a:
ed:26:8d:4b:1a:52:44:16:1c:51:da:fd:d9:81:88:
0d:a2:82:d8:65:98:64:02:39:82:67:0c:bd:46:4f:
c3:da:07:91:c8:00:92:a6:28:f1:cc:cc:f9:d8:f4:
bf:1a:d9:6a:72:f2:8e:7a:8c:f1:c0:20:6a:d5:d5:
6e:d6:7c:cd:43:45:01:28:82:05:11:b1:11:99:dd:
85:1b:d6:4f:83:e4:b5:a3:49:43:d6:f4:d5:48:66:
71:86:ed:76:78:54:1c:fc:e9:84:13:93:f1:d5:e7:
01:7e:bb:62:ef:94:d8:8d:c8:59:be:0f:de:83:19:
41:07:ce:68:0b:29:16:39:5e:34:ba:93:ae:eb:cc:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FE:5F:29:0F:BC:F7:F2:F8:D5:47:74:56:B2:A1:8A:5F:AE:BF:D1
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32322d3234203d3e20313531383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.84.0/22
Signature Algorithm: sha256WithRSAEncryption
63:4b:7d:2f:69:61:28:37:74:76:cb:e9:05:30:62:f1:02:77:
71:a9:07:68:2d:e2:c4:46:42:03:5c:9d:9e:43:b7:da:1e:a9:
d1:b5:b8:46:c8:3e:a5:40:3b:bd:d1:50:66:c1:e6:46:6e:94:
bd:09:d9:52:0b:48:fc:28:9f:02:d8:65:fc:f9:2e:6a:60:80:
77:74:06:b2:ba:2e:b3:5a:87:e9:3d:1b:01:1d:a4:8b:ea:f9:
d5:34:e1:52:6a:cc:e5:20:ee:9d:5e:ce:dd:f5:54:11:e1:28:
84:7c:87:4e:04:5a:56:c1:ae:10:ed:58:b2:35:6e:bb:2b:2a:
8d:f8:08:30:bd:6a:b9:4c:4b:b3:45:f2:6c:82:82:f1:2f:f2:
ec:33:b0:94:b2:cb:a0:13:21:cf:aa:59:94:88:d3:20:12:4b:
b1:60:42:16:51:8e:9c:53:b3:f7:c2:53:a4:37:7f:02:8f:1d:
b0:50:14:dc:bc:33:a8:20:27:bf:43:c6:4f:3e:57:4d:1b:1f:
31:85:50:e4:e2:e1:61:e3:f1:e2:b5:be:3f:ba:90:ff:b7:89:
c1:df:cc:be:c5:d2:21:35:ac:c8:d6:c4:01:0f:9d:94:ff:32:
3f:a1:be:18:76:40:c8:71:0c:13:af:06:ed:11:81:b3:78:8c:
8d:96:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:57 2025 by rpki-client