Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20343030393435.roa
File: 3130332e3234342e3232362e302f32342d3234203d3e20343030393435.roa (raw, json)
Hash identifier: IqengKTEHLV2+wBE3b2CfKDq9YPBGO9iOTM39TWiWdQ=
Subject key identifier: 4D:4E:03:07:64:3D:48:18:3F:7B:D5:C2:B0:16:6E:74:0D:AF:C7:E2
Certificate issuer: /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial: 6EE42B5DD35D76B59E7300D702FC638A35A78AE1
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20343030393435.roa
Signing time: Fri 31 Jan 2025 18:18:37 +0000
ROA not before: Fri 31 Jan 2025 18:13:37 +0000
ROA not after: Fri 30 Jan 2026 18:18:37 +0000
asID: 400945
IP address blocks: 103.244.226.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e4:2b:5d:d3:5d:76:b5:9e:73:00:d7:02:fc:63:8a:35:a7:8a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C1E0000
Validity
Not Before: Jan 31 18:13:37 2025 GMT
Not After : Jan 30 18:18:37 2026 GMT
Subject: CN=4D4E0307643D48183F7BD5C2B0166E740DAFC7E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5b:14:65:f5:a7:7b:93:5f:3c:94:ac:cb:0b:
68:ff:f8:e6:51:38:1b:3e:e1:5d:40:4a:b7:da:8a:
34:31:7b:60:c3:21:93:d6:e1:67:8a:d2:26:d0:fe:
c7:88:73:62:ef:99:ca:ad:d4:3b:f9:f7:be:aa:15:
0e:da:64:7d:76:c3:23:14:26:21:f9:ee:c6:e7:51:
e0:76:20:bb:c2:ed:4c:a7:15:bf:f6:93:a1:47:ad:
6a:f7:4a:de:58:e9:f3:49:93:27:0d:a5:55:1c:ee:
36:aa:dc:56:cd:58:15:3d:7e:f7:c6:f0:ca:89:33:
4e:e3:79:7b:c5:74:02:c4:b1:9b:d5:48:ea:51:80:
42:5e:55:6b:5c:5e:2d:6e:b4:8f:ab:45:47:50:fc:
b4:35:f0:f8:52:0d:74:3e:12:2b:49:79:97:36:96:
4b:e1:4d:e9:cf:cb:7b:47:68:dd:a1:0e:93:ee:56:
fe:a5:91:b9:44:a4:4c:ff:cf:3a:50:80:a9:54:5e:
d6:43:fe:2a:95:86:f8:ef:90:77:1c:ef:cb:92:cf:
7d:4a:54:7c:4d:ca:a1:55:c6:b0:d0:76:eb:2e:2a:
cf:ba:1f:9e:cd:e9:e2:7f:f2:13:9c:25:38:77:7d:
a0:d8:c4:3f:a8:82:10:41:6c:7b:34:31:65:6e:96:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:03:07:64:3D:48:18:3F:7B:D5:C2:B0:16:6E:74:0D:AF:C7:E2
X509v3 Authority Key Identifier:
keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20343030393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:39:33:59:f3:30:a8:46:25:44:c6:78:8c:ce:a3:db:20:76:
fa:5c:5a:2a:1b:54:64:a4:22:de:55:4d:fd:99:6f:83:ae:b3:
95:1f:e8:66:7e:00:90:91:96:d7:0b:40:a8:6e:c6:e3:1e:f0:
65:de:20:b4:95:8a:9c:fb:86:6b:5c:2c:40:39:f5:13:20:fb:
cf:01:9b:33:4e:8e:66:f2:be:0e:c4:cb:fc:6d:44:d8:8d:79:
23:cb:7c:89:d0:19:83:3d:03:aa:48:0b:a4:b7:61:d2:4d:39:
61:5e:81:71:fc:07:5a:c5:49:21:fa:f1:2c:8a:0d:09:0a:31:
9d:60:f5:42:45:c2:87:cc:4d:96:d2:47:3f:91:16:e4:b0:4b:
82:50:6d:a2:7f:58:05:13:e5:66:26:43:33:20:a2:a7:97:60:
ce:df:ac:ec:62:a4:85:4b:0f:1f:96:f5:42:97:35:b4:78:68:
50:e5:b1:f1:84:33:f5:5c:22:37:43:94:ba:82:09:b2:bb:5c:
37:07:5c:d4:04:dc:f3:33:ce:e0:8b:14:1e:25:21:ea:52:db:
0b:fc:29:c5:a0:03:37:b2:23:63:64:0b:ff:9a:52:b0:0a:b3:
2c:4d:16:71:83:fc:d0:b6:ce:16:86:90:40:c6:97:8e:34:f0:
e3:f9:88:49
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUbuQrXdNddrWecwDXAvxjijWniuEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg5RTk3OEUwRjc3
RTYxQkFFQ0QwMzkxQjA3MzRENjJDNzJBODEzOUZCMB4XDTI1MDEzMTE4MTMzN1oX
DTI2MDEzMDE4MTgzN1owMzExMC8GA1UEAxMoNEQ0RTAzMDc2NDNENDgxODNGN0JE
NUMyQjAxNjZFNzQwREFGQzdFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANhbFGX1p3uTXzyUrMsLaP/45lE4Gz7hXUBKt9qKNDF7YMMhk9bhZ4rSJtD+
x4hzYu+Zyq3UO/n3vqoVDtpkfXbDIxQmIfnuxudR4HYgu8LtTKcVv/aToUetavdK
3ljp80mTJw2lVRzuNqrcVs1YFT1+98bwyokzTuN5e8V0AsSxm9VI6lGAQl5Va1xe
LW60j6tFR1D8tDXw+FINdD4SK0l5lzaWS+FN6c/Le0do3aEOk+5W/qWRuUSkTP/P
OlCAqVRe1kP+KpWG+O+Qdxzvy5LPfUpUfE3KoVXGsNB26y4qz7ofns3p4n/yE5wl
OHd9oNjEP6iCEEFsezQxZW6W/lMCAwEAAaOCAkAwggI8MB0GA1UdDgQWBBRNTgMH
ZD1IGD971cKwFm50Da/H4jAfBgNVHSMEGDAWgBSel44Pd+Ybrs0DkbBzTWLHKoE5
+zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC80LzlFOTc4RTBGNzdFNjFCQUVDRDAzOTFCMDczNEQ2MkM3MkE4
MTM5RkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL25wZU9EM2ZtRzY3TkE1R3djMDFpeHlxQk9mcy5jZXIwgaYGCCsG
AQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC80LzMxMzAzMzJlMzIzNDM0MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzNDMwMzAzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn9OIwDQYJKoZIhvcNAQELBQADggEB
AEs5M1nzMKhGJUTGeIzOo9sgdvpcWiobVGSkIt5VTf2Zb4Ous5Uf6GZ+AJCRltcL
QKhuxuMe8GXeILSVipz7hmtcLEA59RMg+88BmzNOjmbyvg7Ey/xtRNiNeSPLfInQ
GYM9A6pIC6S3YdJNOWFegXH8B1rFSSH68SyKDQkKMZ1g9UJFwofMTZbSRz+RFuSw
S4JQbaJ/WAUT5WYmQzMgoqeXYM7frOxipIVLDx+W9UKXNbR4aFDlsfGEM/VcIjdD
lLqCCbK7XDcHXNQE3PMzzuCLFB4lIepS2wv8KcWgAzeyI2NkC/+aUrAKsyxNFnGD
/NC2zhaGkEDGl4408OP5iEk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 05:57:37 2025 by rpki-client