Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134302e302f32342d3234203d3e203233343730.roa
File: 3130332e3233302e3134302e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: HjxPwi7tutYi4/yqDhfTyKqMrgP7QWvww9dPZu2+/Ps=
Subject key identifier: E4:00:04:A1:F5:33:B2:8E:E5:FA:17:94:4C:E9:81:6B:7C:5A:C9:4E
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 166BC7B9E0654B0F9576D27CFEEDE893EDBD6D21
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134302e302f32342d3234203d3e203233343730.roa
Signing time: Tue 03 Jan 2023 02:07:01 +0000
ROA not before: Tue 03 Jan 2023 02:02:01 +0000
ROA not after: Tue 02 Jan 2024 02:07:01 +0000
asID: 23470
IP address blocks: 103.230.140.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6b:c7:b9:e0:65:4b:0f:95:76:d2:7c:fe:ed:e8:93:ed:bd:6d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Jan 3 02:02:01 2023 GMT
Not After : Jan 2 02:07:01 2024 GMT
Subject: CN=E40004A1F533B28EE5FA17944CE9816B7C5AC94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:6e:02:06:4a:7a:2a:2a:bc:44:75:20:bf:
db:05:70:d8:39:22:c1:1e:b8:75:76:40:17:af:1c:
99:07:b9:8f:1d:1c:bb:44:7f:67:a2:fe:a3:eb:5c:
b4:b0:50:64:a8:eb:c8:98:b2:cd:6d:9b:86:76:0a:
0b:a2:e8:98:92:f4:fd:66:4d:d1:2d:65:96:92:2b:
09:40:98:3c:d6:ce:38:3d:88:3e:2f:4d:82:9f:8a:
0e:28:0d:ba:e8:a5:4f:55:ea:c2:b6:74:d6:ee:e8:
13:3b:43:70:a3:75:26:a0:d2:a6:01:20:8d:0e:1b:
ad:ae:55:78:cf:0a:4a:6f:18:be:d5:80:fd:04:90:
86:51:fe:67:0a:fc:eb:dd:4b:50:c7:82:2f:53:1e:
87:c5:23:95:cb:75:86:b0:b2:5f:8a:9b:9b:97:31:
91:99:2d:a5:7a:4d:26:6a:e5:7a:6b:65:74:a3:55:
5d:24:90:c6:65:b8:d9:f3:39:4f:9c:57:c3:a6:92:
f4:b1:d7:bf:0b:fb:ad:38:f5:c9:c4:67:c5:bf:da:
99:35:0f:c0:8a:bc:76:66:0c:00:51:9d:8f:c7:ca:
a4:d2:92:1b:5b:6d:28:7e:32:a4:e1:2f:4f:46:12:
c7:59:1a:df:29:27:26:2d:69:cc:31:b1:91:75:a6:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:00:04:A1:F5:33:B2:8E:E5:FA:17:94:4C:E9:81:6B:7C:5A:C9:4E
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134302e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.140.0/24
Signature Algorithm: sha256WithRSAEncryption
75:26:43:c2:bf:fa:2c:47:4c:d0:1e:71:f9:e4:86:cf:59:79:
e6:4c:e7:6d:06:d3:a1:44:64:43:90:f2:fd:b3:20:5e:f6:3d:
d7:32:96:1f:01:79:96:ef:78:eb:d9:26:53:b0:cb:10:90:36:
dc:56:c3:b7:da:eb:af:e7:fe:fc:48:75:e5:21:47:f6:96:bc:
a1:89:16:46:4a:4c:3e:49:fb:11:c9:af:ef:f5:72:9d:57:98:
21:fd:22:36:df:09:f4:e6:3a:cf:95:2f:f0:cd:93:a7:d7:d3:
01:a4:f5:c7:f3:b7:68:56:6c:7e:a9:d4:e4:5c:02:ef:c3:46:
32:3b:f6:73:3e:1d:6d:dc:14:19:2d:d9:9a:25:a1:46:a8:30:
e9:c4:f2:34:df:19:63:10:10:03:98:95:8a:51:33:02:77:ad:
b5:89:06:90:fd:55:ec:2f:13:db:33:8f:44:86:e0:b5:ef:b0:
b0:8b:dc:e3:9e:de:87:51:37:67:2b:1e:48:ac:ff:00:f4:f9:
ea:6c:e8:c4:e9:a8:60:b2:c2:01:74:34:3e:a2:50:9b:8e:0c:
1a:d1:5d:99:9a:e5:3a:10:3c:e0:d1:c8:ad:18:f8:af:b8:2e:
e1:3a:9a:24:f0:f1:e5:9f:a2:61:50:a6:de:b3:8c:ba:7f:d2:
d9:bc:c8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org