Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38302e302f32342d3234203d3e203438323636.roa
File: 3134342e34382e38302e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: BCTkWsF45Hl9HjqfPD7foVm1Xn/O2BfYc+Jn9gMArEY=
Subject key identifier: E4:0A:3D:72:66:8D:AA:B7:BC:6F:91:7D:F3:3D:15:6A:5E:E8:20:56
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 3E2FC7CE92622A43B39E810AC99822E9B9C80CF0
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38302e302f32342d3234203d3e203438323636.roa
Signing time: Tue 03 Jan 2023 02:07:02 +0000
ROA not before: Tue 03 Jan 2023 02:02:02 +0000
ROA not after: Tue 02 Jan 2024 02:07:02 +0000
asID: 48266
IP address blocks: 144.48.80.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:2f:c7:ce:92:62:2a:43:b3:9e:81:0a:c9:98:22:e9:b9:c8:0c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jan 3 02:02:02 2023 GMT
Not After : Jan 2 02:07:02 2024 GMT
Subject: CN=E40A3D72668DAAB7BC6F917DF33D156A5EE82056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:2e:7a:c9:fa:ba:e6:ed:3e:ae:1b:63:68:
e9:0f:ff:b1:1a:a0:34:3d:67:bb:51:f8:f5:76:85:
f4:67:9a:cc:60:fb:84:fc:6f:81:98:00:83:7b:62:
58:b3:6d:af:9f:08:76:b2:64:da:14:bb:a4:9a:ca:
25:1f:d3:c6:10:7c:40:9b:fe:42:98:86:ba:c6:fe:
f7:53:ea:34:ed:23:f7:3b:70:c2:e0:58:43:00:fa:
93:15:4e:ae:b4:0a:12:1c:9f:00:a4:56:83:c4:cc:
82:e7:f0:6c:95:0c:fd:7f:26:29:37:17:08:43:13:
73:71:2e:80:1e:23:9b:6a:fd:51:a9:6c:96:d4:5c:
5b:c9:72:50:15:9c:ce:69:0f:e2:c3:36:93:50:61:
dd:ad:52:9c:2c:1c:a7:cf:05:72:af:53:22:6e:6d:
22:0c:91:25:38:7f:5c:9e:0f:50:09:2c:4e:06:5e:
75:3b:d5:82:d6:d1:fe:db:a8:60:fb:3a:1f:fa:18:
fd:f7:ea:20:0a:89:8b:a4:36:d3:ae:18:e5:e9:02:
14:d5:36:f7:b9:ab:7f:b3:b0:ee:a8:ad:21:6c:37:
d5:9e:ae:6f:dd:b3:cd:12:67:08:41:23:96:8e:87:
c9:34:06:8d:15:93:fa:21:6c:5d:4d:2d:6d:57:2e:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0A:3D:72:66:8D:AA:B7:BC:6F:91:7D:F3:3D:15:6A:5E:E8:20:56
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38302e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.80.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:90:4e:1d:a2:8f:c1:bf:ba:ff:20:19:c9:f3:63:c8:5b:32:
27:c5:95:90:eb:56:34:cf:c5:41:97:59:a4:51:11:a4:1e:98:
16:28:37:cc:00:3e:62:34:72:ae:8b:7b:0d:3d:08:ca:b4:c6:
1c:ce:03:26:bc:c1:bb:3c:b8:b8:a0:12:ce:88:41:ac:c0:17:
94:de:32:c9:fc:24:44:6d:f2:62:fe:f8:c6:a7:10:39:af:01:
84:e7:91:5d:93:74:60:94:d9:c9:49:cf:3d:18:df:8d:b0:df:
0e:33:b4:c6:28:58:9c:16:22:b4:5b:3c:1d:49:e5:f7:8b:3a:
81:26:4e:cc:d5:8a:fa:05:c4:8b:ff:17:23:50:8e:cf:dc:46:
b7:4c:40:18:0e:94:55:88:08:f6:e0:30:f8:e2:98:0f:11:c9:
80:7e:6e:93:a5:17:a4:59:2b:77:c0:9e:25:ee:87:f6:c3:3c:
ff:33:87:45:4f:a8:77:0f:80:51:3a:69:39:e4:c1:b8:ed:57:
d7:ea:df:bb:95:1b:cf:14:11:ea:ae:a2:fc:ea:63:c9:c8:24:
bf:26:82:d5:cd:88:2f:67:7e:d0:df:7a:68:05:c0:d1:61:d5:
f8:55:84:c0:d8:5c:01:c0:d0:33:b2:93:e9:d9:db:a3:1c:95:
59:73:4e:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPi/HzpJiKkOznoEKyZgi6bnIDPAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTIzMDEwMzAyMDIwMloX
DTI0MDEwMjAyMDcwMlowMzExMC8GA1UEAxMoRTQwQTNENzI2NjhEQUFCN0JDNkY5
MTdERjMzRDE1NkE1RUU4MjA1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM+ALnrJ+rrm7T6uG2No6Q//sRqgND1nu1H49XaF9GeazGD7hPxvgZgAg3ti
WLNtr58IdrJk2hS7pJrKJR/TxhB8QJv+QpiGusb+91PqNO0j9ztwwuBYQwD6kxVO
rrQKEhyfAKRWg8TMgufwbJUM/X8mKTcXCEMTc3EugB4jm2r9UalsltRcW8lyUBWc
zmkP4sM2k1Bh3a1SnCwcp88Fcq9TIm5tIgyRJTh/XJ4PUAksTgZedTvVgtbR/tuo
YPs6H/oY/ffqIAqJi6Q2064Y5ekCFNU297mrf7Ow7qitIWw31Z6ub92zzRJnCEEj
lo6HyTQGjRWT+iFsXU0tbVcudxUCAwEAAaOCAjowggI2MB0GA1UdDgQWBBTkCj1y
Zo2qt7xvkX3zPRVqXuggVjAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzQzNDJlMzQzODJlMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0
MzgzMjM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACQMFAwDQYJKoZIhvcNAQELBQADggEBAMCQTh2i
j8G/uv8gGcnzY8hbMifFlZDrVjTPxUGXWaRREaQemBYoN8wAPmI0cq6Lew09CMq0
xhzOAya8wbs8uLigEs6IQazAF5TeMsn8JERt8mL++ManEDmvAYTnkV2TdGCU2clJ
zz0Y342w3w4ztMYoWJwWIrRbPB1J5feLOoEmTszVivoFxIv/FyNQjs/cRrdMQBgO
lFWICPbgMPjimA8RyYB+bpOlF6RZK3fAniXuh/bDPP8zh0VPqHcPgFE6aTnkwbjt
V9fq37uVG88UEequovzqY8nIJL8mgtXNiC9nftDfemgFwNFh1fhVhMDYXAHA0DOy
k+nZ26MclVlzTkg=
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:05 2025 by rpki-client