Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa
File: 3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa (raw, json)
Hash identifier: mOxd/th0cutQpx7AheyrQgghmv9Oqt7hs8BDk6sQMTI=
Subject key identifier: 8A:52:48:B5:09:31:14:3A:FA:38:CC:11:3E:2D:19:98:C3:91:41:9D
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 63A5FE77A0C1602F81096CBBCD670FCD57E88F49
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa
Signing time: Tue 03 Jan 2023 02:07:02 +0000
ROA not before: Tue 03 Jan 2023 02:02:02 +0000
ROA not after: Tue 02 Jan 2024 02:07:02 +0000
asID: 204136
IP address blocks: 103.230.141.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a5:fe:77:a0:c1:60:2f:81:09:6c:bb:cd:67:0f:cd:57:e8:8f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jan 3 02:02:02 2023 GMT
Not After : Jan 2 02:07:02 2024 GMT
Subject: CN=8A5248B50931143AFA38CC113E2D1998C391419D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:e6:38:1d:3c:37:74:eb:af:0a:a0:d9:fc:
35:37:c2:5b:29:ee:b3:c2:5f:9f:e0:27:47:c1:24:
7b:f2:86:fc:43:41:5a:9e:45:98:13:c9:79:71:24:
7e:40:03:15:f4:43:54:e1:a4:23:44:95:34:f3:0a:
3c:eb:fa:56:9e:97:96:97:aa:47:09:67:df:fa:cb:
0a:c3:96:45:33:c9:6d:e0:03:1a:3e:af:6d:ad:1c:
73:06:c4:81:4e:d0:8d:47:62:67:a7:85:db:7e:ed:
01:39:5c:ff:0a:87:59:1a:de:10:15:89:62:7c:05:
4b:41:25:77:86:1b:fe:05:61:d3:4b:28:fb:7d:6c:
49:36:13:7a:51:4f:dc:3a:63:b2:c2:db:05:b4:1a:
23:38:5b:b4:0f:1d:cb:be:31:c5:7a:6a:b8:a2:c1:
5e:1d:77:16:cf:7b:32:ff:f2:61:7c:62:44:4f:6d:
88:5a:03:3d:bc:fa:42:e2:d7:e5:49:62:5c:ea:b7:
ae:a6:6f:78:1b:4a:a3:ae:40:35:3e:e3:c0:0d:3f:
7e:53:0c:56:83:46:c2:5c:62:04:c9:f6:ac:32:44:
95:80:c6:6b:c7:71:71:b0:5e:d4:cc:a2:ad:b3:37:
81:ee:5a:28:01:8d:40:3e:fd:c8:42:91:c6:93:d0:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:52:48:B5:09:31:14:3A:FA:38:CC:11:3E:2D:19:98:C3:91:41:9D
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.141.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7b:2c:5e:f6:56:dc:91:98:c1:08:a0:3d:9e:94:57:b2:4a:
9a:da:3d:f6:37:20:b8:df:a8:75:35:8f:4b:c2:67:ef:0f:21:
55:82:27:9e:33:1c:cf:09:89:d1:a3:a9:65:c0:b6:83:39:42:
15:99:6f:f5:6a:2c:0f:a3:77:57:0a:c1:c7:37:17:69:69:4a:
44:ba:1f:b3:48:c6:fa:15:27:f9:a0:5c:d5:26:da:3f:6a:6f:
99:ec:4f:7d:4c:2b:fe:18:2c:43:69:ec:6e:62:73:92:35:68:
bf:b2:8d:68:c3:a9:29:32:bc:80:be:9e:06:9b:8c:c7:e4:b1:
c0:b4:ed:53:46:f5:f6:9b:59:5f:b9:c8:02:ba:6d:2f:bb:2f:
64:07:21:c0:24:2e:7b:91:41:6a:63:d4:e9:66:35:cb:98:59:
0b:34:6c:a2:b4:b3:46:c2:e8:d1:3a:6d:be:11:70:48:04:9e:
92:1d:50:98:ba:91:71:ea:b4:56:c4:a8:ed:88:c2:dd:ea:9a:
df:f3:69:fa:ba:3d:63:59:c3:bf:3a:83:01:1f:ba:43:51:65:
d0:6d:7a:44:e3:56:71:75:67:b5:74:ef:de:ff:ae:eb:f8:80:
c0:2b:51:55:ad:f9:90:a5:4d:d9:90:9f:5e:05:b0:60:84:65:
04:fb:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:42 2025 by rpki-client