Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313531363432.roa
File: 3130332e3234342e3232362e302f32342d3234203d3e20313531363432.roa (raw, json)
Hash identifier: lHiLhfNkWNz21noJ9P/kQwNRwSa/oX15wNDuWKc7eTE=
Subject key identifier: EE:00:46:ED:5E:B2:9A:70:55:8A:BB:CF:FB:6C:CF:22:D6:81:00:E2
Certificate issuer: /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial: 5334F434E5015CB39D214E8632E203394D9F5EAC
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313531363432.roa
Signing time: Fri 31 Jan 2025 00:12:33 +0000
ROA not before: Fri 31 Jan 2025 00:07:33 +0000
ROA not after: Fri 30 Jan 2026 00:12:33 +0000
asID: 151642
IP address blocks: 103.244.226.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:34:f4:34:e5:01:5c:b3:9d:21:4e:86:32:e2:03:39:4d:9f:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C1E0000
Validity
Not Before: Jan 31 00:07:33 2025 GMT
Not After : Jan 30 00:12:33 2026 GMT
Subject: CN=EE0046ED5EB29A70558ABBCFFB6CCF22D68100E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:cd:f4:4f:3d:dc:73:ac:41:dd:bd:45:97:
20:74:3c:6c:39:9c:87:27:bb:1e:99:ce:14:e0:eb:
d4:45:5a:4f:49:1c:7d:9b:4f:7e:0c:24:96:cb:a4:
d8:30:60:7e:9e:c1:de:88:b1:59:fb:1e:c1:a9:6d:
c2:cc:c1:34:af:ba:cb:73:f8:7b:ed:a2:1c:dd:03:
d3:98:c5:51:f4:37:03:44:93:a7:de:69:0d:12:e8:
0b:c6:42:77:72:bd:a4:f9:bd:fd:97:f9:0c:1d:1a:
72:46:2a:35:f5:da:39:f9:b5:2d:da:a1:e5:2b:66:
b1:0e:3e:4e:23:c2:07:39:e0:02:e9:3f:9d:17:00:
c5:43:6f:fb:fd:4c:28:b1:be:89:dd:27:eb:ab:55:
cf:bc:6a:fa:fe:97:14:29:30:84:d0:3c:19:82:a1:
65:94:a9:5e:67:eb:c9:01:88:cd:e8:14:44:2d:69:
82:3d:42:65:78:dc:09:6b:ce:fd:39:79:79:f2:bc:
84:57:70:b9:98:72:09:b5:e0:72:be:eb:40:e7:d4:
3c:55:26:18:90:70:a1:be:fa:80:81:ef:7b:fa:4b:
21:61:f0:e8:03:f7:86:df:f0:ad:1b:f2:e0:76:d0:
97:1f:4c:f7:99:c6:69:df:f9:a9:80:31:35:ba:2e:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:46:ED:5E:B2:9A:70:55:8A:BB:CF:FB:6C:CF:22:D6:81:00:E2
X509v3 Authority Key Identifier:
keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313531363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.226.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4d:ea:73:3f:ba:5d:ef:09:23:95:b2:8f:4d:d3:15:98:26:
b8:ed:d1:d1:f4:a7:f8:8b:7f:fa:83:6b:dd:cd:c9:b7:49:54:
6c:66:e5:b8:5f:1f:af:74:cd:26:32:d2:2e:56:1e:65:73:85:
b4:70:cf:79:01:7e:7c:2f:45:b7:01:83:35:b8:58:31:94:61:
0e:f1:26:f1:84:ae:7d:e6:44:89:ce:4e:4e:8a:12:d9:3d:98:
df:9d:45:a1:23:ec:54:7c:82:02:69:79:09:25:09:e3:27:49:
90:42:05:32:18:98:a2:a6:9e:0b:7c:00:3d:7f:66:1b:95:bd:
c7:f7:8f:0e:61:d5:9a:65:27:ba:2a:84:b0:26:87:af:86:f6:
e9:fb:a9:31:6e:28:1c:19:d7:57:ac:eb:2f:30:c9:ed:89:c7:
72:b8:bf:67:04:e7:20:bc:4c:85:f8:20:16:fd:e9:92:7c:02:
16:0e:79:b8:d1:f0:f8:7b:c0:33:77:ee:cb:72:2f:f8:09:d3:
61:c0:80:54:26:3f:c2:e4:5d:29:e1:6b:bd:49:fc:40:15:fb:
13:d2:63:09:1a:f7:ab:55:5b:52:0a:4b:c5:ac:c1:5e:1f:c5:
92:b0:79:bc:91:16:80:7e:76:4e:41:5b:ca:26:b7:e4:fb:37:
eb:88:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:48 2025 by rpki-client