Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa
File: 3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: cXpcbUKqebMHsZVsCcK95raXzARMLH6EkpSQjgmvGSY=
Subject key identifier: 41:21:0C:A2:14:EA:5E:B9:30:AC:C9:FE:84:64:D7:FA:9B:46:16:AA
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 1EA04DDAB2F1245BAEB85E503B887EFA46ED0CD7
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa
Signing time: Tue 03 Jan 2023 02:07:02 +0000
ROA not before: Tue 03 Jan 2023 02:02:02 +0000
ROA not after: Tue 02 Jan 2024 02:07:02 +0000
asID: 206804
IP address blocks: 103.230.142.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a0:4d:da:b2:f1:24:5b:ae:b8:5e:50:3b:88:7e:fa:46:ed:0c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Jan 3 02:02:02 2023 GMT
Not After : Jan 2 02:07:02 2024 GMT
Subject: CN=41210CA214EA5EB930ACC9FE8464D7FA9B4616AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:2d:ab:69:ad:be:24:32:69:4b:d4:a3:28:
c9:56:ae:80:5e:d7:03:ea:0c:5d:56:3a:b2:ab:d2:
03:56:89:ef:50:ae:e1:6c:75:8a:9b:70:fe:00:b6:
4b:e6:00:df:12:37:30:86:b0:f3:26:62:f8:b7:eb:
e6:f4:63:51:4c:ac:0f:7d:6c:7e:26:0f:84:d3:b7:
e1:a2:b0:f0:4c:0d:d0:7d:cd:73:91:17:5c:04:cc:
79:64:f1:ce:0b:eb:81:18:fc:15:a8:32:27:50:20:
e1:67:09:12:d9:4c:e2:21:b1:ab:6b:39:51:ee:f9:
9d:bc:b8:48:bc:bd:cc:0e:1d:9a:27:a3:28:44:bf:
39:c8:52:88:58:a8:6d:a5:a2:d8:1b:4a:fd:01:d4:
fc:f1:f4:a1:c5:a6:68:7b:e5:3d:bb:a7:74:c0:0b:
7a:b9:19:5e:24:d6:88:a5:b4:a5:ee:bc:33:61:37:
a5:65:17:d7:70:94:e0:ab:10:aa:d3:b5:54:3c:bb:
33:8f:97:b1:e4:ba:da:57:70:90:84:53:1f:e1:f0:
b7:e3:fb:3e:ce:68:1c:eb:aa:f6:57:bd:f2:cc:4d:
ff:d4:38:8d:30:92:e9:f1:dd:0a:3b:fb:bd:a2:75:
a3:f5:ff:1e:c6:f6:d6:21:86:ad:1e:8a:20:e4:ab:
7c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:0C:A2:14:EA:5E:B9:30:AC:C9:FE:84:64:D7:FA:9B:46:16:AA
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fb:1d:16:c2:ba:77:54:a5:29:b8:de:75:6a:dd:a8:9a:d7:
91:ea:63:5d:0c:f2:8a:5a:1d:23:13:86:79:e0:39:24:e0:b9:
a2:17:01:98:4f:af:53:29:58:1b:03:14:87:fc:81:ef:77:ae:
9f:21:48:42:71:da:52:68:cd:f1:0f:6b:a7:fc:b2:9f:b2:6f:
20:a9:cd:b4:ce:8b:d1:5f:f2:80:58:6f:53:5e:1c:dd:06:d1:
39:52:07:19:36:f2:b3:6a:0b:3f:2b:5b:80:72:39:c3:99:1b:
11:4b:33:cd:64:b9:85:fc:d5:24:35:79:30:5d:56:0f:94:df:
cc:73:b4:6e:41:bb:14:0c:cb:1d:1c:ae:d3:5b:ec:0c:5f:d0:
ad:ad:83:9c:d9:8b:c4:dc:30:42:65:ee:28:1e:a0:8f:48:f7:
13:8b:c7:24:7c:e1:2e:e9:f7:29:7d:c7:e1:c7:e8:68:20:a6:
cb:1d:a6:fa:20:b7:a8:43:ab:88:b7:df:a0:1b:7b:ed:5a:f2:
42:42:72:19:ed:3e:66:23:70:af:fc:ab:8c:c1:28:32:e9:89:
99:58:20:8e:f0:91:a9:06:9d:f5:bb:8b:cb:83:41:88:cd:86:
a5:ea:7b:05:6e:81:51:63:96:04:a9:ee:fd:86:5e:5b:e3:ca:
d3:5f:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 19:45:06 2023 by rpki-client on console-ams.rpki-client.org