Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa
File: 3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: gLqWilKAR6NqGrkb9x2SEDa4p6jThEygqCfBgyM+mSU=
Subject key identifier: 38:06:05:DC:43:DC:EE:C7:D1:3E:9D:33:4B:58:8E:ED:5C:E9:F6:73
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 2866E400B774FBCB66E494C25D22FCAA11DAADBC
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa
Signing time: Tue 03 Jan 2023 02:07:02 +0000
ROA not before: Tue 03 Jan 2023 02:02:02 +0000
ROA not after: Tue 02 Jan 2024 02:07:02 +0000
asID: 61138
IP address blocks: 103.230.140.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:66:e4:00:b7:74:fb:cb:66:e4:94:c2:5d:22:fc:aa:11:da:ad:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Jan 3 02:02:02 2023 GMT
Not After : Jan 2 02:07:02 2024 GMT
Subject: CN=380605DC43DCEEC7D13E9D334B588EED5CE9F673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:e6:f2:f2:4a:f9:eb:21:e3:f9:fb:77:b7:
70:a1:15:47:ab:e3:37:24:66:24:aa:f3:ac:c4:4e:
1c:82:73:13:26:81:1f:09:21:f6:78:fd:a1:18:4b:
02:c5:73:3f:ef:a0:3a:98:5b:a1:29:66:8b:93:80:
fe:15:20:2c:10:78:94:02:52:5f:b6:86:99:4a:ec:
4f:87:4b:9a:3f:2a:7c:3a:63:70:b1:9d:e0:5f:35:
a8:ae:ed:b9:59:ca:6f:94:49:a5:fa:6d:9f:d3:62:
81:7e:8b:38:9b:8b:d5:14:11:59:ad:ea:3c:6c:3a:
f9:a1:f6:da:84:f9:ff:5b:20:c5:e1:95:65:bb:b1:
78:cb:63:21:91:60:f7:63:9b:a0:39:13:ac:6a:81:
40:8e:14:71:8d:ab:52:30:bb:6e:dd:c4:22:02:98:
10:1c:bf:da:bf:0a:af:5f:57:94:87:4f:dc:ab:8a:
88:36:c3:42:f6:9d:06:65:eb:c1:ca:9b:89:78:98:
c5:e6:d5:b7:02:5a:24:f7:53:c0:8f:61:d9:81:cd:
cd:b7:e3:e4:77:3e:9a:cf:36:ea:78:b7:64:4f:fa:
fa:30:88:2f:07:ff:e5:e2:03:e0:70:c2:fb:e0:c3:
b9:79:b9:fb:4f:c3:9d:16:6b:1e:60:e5:69:71:a4:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:06:05:DC:43:DC:EE:C7:D1:3E:9D:33:4B:58:8E:ED:5C:E9:F6:73
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:df:00:51:2d:1e:89:de:e1:ff:a4:66:70:2c:bb:6a:45:c6:
fc:c5:dc:7d:94:b4:83:23:85:9e:de:43:b9:06:db:00:bb:f7:
74:b9:b0:09:59:77:53:90:4c:a4:c9:c0:d8:22:76:d0:fc:a8:
f7:3e:b8:90:7e:a8:bb:60:77:81:02:50:71:44:9e:79:ca:41:
12:a3:45:18:8d:6c:12:21:c9:0c:24:a1:9c:b7:8e:f5:b6:50:
f7:38:f3:05:11:e2:49:a8:7a:c4:79:a1:11:cf:f0:e3:fb:39:
ac:b3:d3:e2:0b:cf:0a:7c:73:cb:7b:41:6a:76:48:f0:a6:d4:
6d:57:12:54:ba:18:48:ad:81:f5:85:f5:05:ed:a0:37:23:fd:
06:f4:98:49:a5:97:f6:49:0d:08:e4:5a:b0:93:42:47:1b:ba:
da:b4:9b:e8:10:ba:bd:68:19:37:12:e8:5a:79:47:d8:da:cd:
de:81:48:b7:4d:0c:b2:17:9a:f7:7b:8c:95:ff:d7:01:2d:aa:
5d:0d:a0:2e:f5:95:bc:b2:ea:1e:85:ed:e2:ab:5c:70:fa:d7:
87:bc:cf:94:47:bc:3e:8a:33:e9:9b:74:1c:80:6a:eb:e6:fa:
69:af:9d:ba:3d:88:d8:a9:d7:81:9e:10:3d:8e:b8:b3:cc:d8:
f1:52:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org