Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38312e302f32342d3234203d3e20313336353537.roa
File: 3134342e34382e38312e302f32342d3234203d3e20313336353537.roa (raw, json)
Hash identifier: hGy8SVOnDvioT7vqrxEvpXXF/XANDe15/KSedt/ZfFs=
Subject key identifier: EE:90:6B:60:87:67:B3:8D:07:75:80:EC:CD:3D:B8:71:D8:72:69:C9
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 3F6E05D914812F09C0736C233AB10486CEC2718E
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38312e302f32342d3234203d3e20313336353537.roa
Signing time: Mon 29 May 2023 13:43:51 +0000
ROA not before: Mon 29 May 2023 13:38:51 +0000
ROA not after: Mon 27 May 2024 13:43:51 +0000
asID: 136557
IP address blocks: 144.48.81.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6e:05:d9:14:81:2f:09:c0:73:6c:23:3a:b1:04:86:ce:c2:71:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: May 29 13:38:51 2023 GMT
Not After : May 27 13:43:51 2024 GMT
Subject: CN=EE906B608767B38D077580ECCD3DB871D87269C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:5b:c6:82:2d:1a:a7:57:cf:c5:01:c7:03:
89:99:c9:a6:d5:c0:27:3a:0d:24:59:c1:b3:3c:57:
bc:1b:0f:f1:f9:19:3e:85:66:b3:03:a7:0c:d2:57:
65:f8:cd:1a:db:2a:18:8a:9d:d1:7f:92:00:94:1e:
bf:60:3a:54:ed:b9:4c:48:83:f0:de:30:d2:51:ff:
ef:b4:19:fd:06:5d:a6:67:da:56:81:88:73:ed:b4:
03:d5:a6:99:e9:40:2b:f9:5e:ba:3e:c7:f4:e3:fd:
4b:51:7e:f3:7e:8d:1a:47:da:b3:50:89:16:c3:1e:
db:12:45:b7:dc:99:b2:89:64:9b:d7:f8:45:58:9d:
87:7f:1c:45:47:2f:12:10:ba:b0:6c:0e:4b:39:95:
5d:17:48:1f:88:9d:9a:e5:17:aa:3f:0d:bb:15:ef:
42:4d:de:55:1a:25:4f:7e:03:b3:3a:66:bc:76:50:
93:9c:50:93:17:f5:a0:e2:9e:e8:a7:e7:a7:1b:0b:
b1:cc:63:68:7f:67:e2:47:4a:36:55:fe:2b:c1:19:
96:8d:93:4d:c4:b0:7e:2f:91:ae:99:29:cf:ab:a9:
fd:31:b6:1e:f6:c8:bb:66:75:39:3e:11:35:72:63:
55:e6:dc:82:18:ef:5e:4a:6b:77:10:f4:43:a3:8a:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:90:6B:60:87:67:B3:8D:07:75:80:EC:CD:3D:B8:71:D8:72:69:C9
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3134342e34382e38312e302f32342d3234203d3e20313336353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.81.0/24
Signature Algorithm: sha256WithRSAEncryption
85:30:66:eb:44:41:f8:24:9e:44:17:2c:88:fc:9e:f1:26:c6:
42:ad:22:89:a2:47:47:c4:85:0b:a4:c1:3e:d4:e2:aa:44:9b:
de:70:e6:0d:42:74:9d:06:12:17:44:74:9c:03:e4:2f:a4:5e:
63:df:08:45:9e:2f:f6:d4:c7:4f:0f:a2:54:96:73:db:56:34:
5f:69:65:c9:11:52:2d:e5:94:82:44:e3:10:c2:47:a7:a3:f6:
3c:6d:c9:35:85:22:49:c9:c7:af:c8:95:9f:47:83:bb:79:57:
f3:78:d3:ce:81:a9:fb:01:03:e7:6b:d3:eb:33:ad:20:4c:da:
78:a7:df:5a:5e:c9:cf:5a:ef:bf:a0:ef:df:95:08:c5:9c:ee:
9f:f9:12:fc:27:36:06:a1:c5:a9:77:59:b8:09:a3:26:a2:d3:
c6:2e:1c:74:f6:7f:5f:fa:9e:80:74:fe:c9:28:60:65:ec:aa:
a7:0b:83:36:6c:ef:44:68:5e:0b:7d:9b:38:ca:c5:2d:1d:f0:
29:19:07:85:27:13:6a:66:1a:55:b7:9a:79:c4:13:f3:43:ae:
fc:67:95:1d:61:92:ad:da:71:fb:6e:ef:28:96:31:39:ee:9d:
c4:a6:a6:5c:3c:ff:58:4b:56:04:81:81:fd:e7:f7:da:46:4c:
0b:74:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:58:09 2025 by rpki-client