Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa
File: 3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa (raw, json)
Hash identifier: J6UuqSyZdrIrzGSuDw1wJW5bP6a3wrwivGPcrNGnjVU=
Subject key identifier: AC:DC:7F:46:89:95:46:2A:65:9D:FC:47:24:28:6A:2C:C4:C4:AA:F1
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 6488D26FC7F699D1F82566F56C4AE9B42F4EAF41
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa
Signing time: Tue 03 Jan 2023 02:07:02 +0000
ROA not before: Tue 03 Jan 2023 02:02:02 +0000
ROA not after: Tue 02 Jan 2024 02:07:02 +0000
asID: 138195
IP address blocks: 103.214.68.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:88:d2:6f:c7:f6:99:d1:f8:25:66:f5:6c:4a:e9:b4:2f:4e:af:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jan 3 02:02:02 2023 GMT
Not After : Jan 2 02:07:02 2024 GMT
Subject: CN=ACDC7F468995462A659DFC4724286A2CC4C4AAF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:a1:e9:20:9c:e6:89:3f:53:b3:02:b0:87:
3f:62:40:c6:34:68:86:17:b1:28:34:31:ef:de:9d:
20:7d:f8:81:e3:f8:6a:e6:cd:1e:63:ec:cd:4c:9e:
19:13:87:cd:68:bc:43:89:24:16:d9:63:e1:f8:72:
93:1b:78:5c:ee:32:b6:82:2c:26:32:c2:ab:2b:35:
4b:02:7b:96:f9:e8:84:2b:54:47:06:be:b1:da:51:
00:ee:49:42:d4:1a:98:2b:1e:20:4f:23:03:7d:5b:
e0:85:d9:07:63:c4:80:61:af:75:f3:b5:03:ba:2e:
3b:95:9d:b8:87:ca:12:4a:c9:c3:26:4a:cb:ee:f1:
91:7a:e2:08:c3:0b:0e:2a:51:73:c6:74:7a:e7:46:
52:73:e1:5d:f3:a8:fc:5f:bb:16:97:20:f2:b3:3f:
36:9b:49:6b:b2:0d:cd:fe:02:95:08:4f:f1:85:e5:
60:17:a4:7c:81:9c:e4:d7:9e:31:61:db:9a:9b:8c:
e1:48:bd:28:18:46:66:7f:87:f7:96:95:d8:63:3d:
95:19:59:6e:d6:55:3c:b6:26:4b:48:a0:d8:6c:ca:
5f:94:83:db:cc:19:c5:ce:4f:1f:3d:fa:23:0d:0b:
26:f3:84:f7:85:62:41:fe:48:86:a5:32:41:9c:ac:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DC:7F:46:89:95:46:2A:65:9D:FC:47:24:28:6A:2C:C4:C4:AA:F1
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.68.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0f:54:5e:cc:6c:40:db:98:ed:9b:79:38:e9:71:a0:5c:4a:
23:d4:bb:9b:df:50:d8:4c:af:ea:8f:54:49:45:b5:8c:29:56:
cb:e6:aa:aa:5f:8d:c9:3f:ef:9f:8e:22:a0:a0:36:c2:cb:53:
25:26:be:3b:59:cc:ef:71:fe:bf:fe:fc:64:8d:bc:d9:af:80:
83:a9:2d:9b:6e:2d:22:01:e2:f8:96:10:4b:0c:1d:0a:20:dc:
3f:99:a0:04:10:9f:a7:ba:2a:7b:21:2b:b8:c7:6c:da:64:29:
fc:ac:b5:42:8b:c3:52:71:4f:95:88:1f:e1:ed:ed:03:89:51:
c0:81:95:ba:ed:24:59:e2:80:a1:79:f0:05:33:0f:cd:f7:4d:
3b:d5:a7:53:dc:2b:0f:a6:40:2d:d4:e0:94:4e:bd:dd:5a:48:
36:57:a8:58:23:13:19:58:a6:74:2f:21:51:c8:28:44:4b:32:
c2:95:ca:9a:63:bf:96:46:5f:08:91:21:d6:f4:72:d8:23:0c:
72:24:c1:ca:ee:48:e5:85:4e:76:ff:14:75:48:e3:d9:79:c0:
77:e5:b6:cf:94:d2:39:af:ab:4c:07:b5:9d:f5:3e:28:98:40:
a5:5c:8b:52:63:36:32:32:6c:34:32:5f:51:59:7c:d8:e6:77:
b4:70:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:54 2025 by rpki-client