Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa
File: 3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa (raw, json)
Hash identifier: cBj/lV9ykHpDve0SlOunAjOv63W6lQnE0JSnuuq0t44=
Subject key identifier: 0F:96:51:36:DA:6B:F9:C2:74:5E:1F:A6:85:1D:48:48:41:27:7B:04
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 427826F580FE6E6B49CB9BC02B1E2C360E033B11
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa
Signing time: Mon 02 Sep 2024 23:13:13 +0000
ROA not before: Mon 02 Sep 2024 23:08:13 +0000
ROA not after: Mon 01 Sep 2025 23:13:13 +0000
asID: 36236
IP address blocks: 103.254.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:78:26:f5:80:fe:6e:6b:49:cb:9b:c0:2b:1e:2c:36:0e:03:3b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Sep 2 23:08:13 2024 GMT
Not After : Sep 1 23:13:13 2025 GMT
Subject: CN=0F965136DA6BF9C2745E1FA6851D484841277B04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:7e:17:98:05:e4:86:39:99:ab:d2:75:05:
5b:9f:3d:50:dd:e7:bb:68:1a:ce:8f:34:82:6c:82:
f1:46:e0:3a:8b:c4:9d:24:64:6f:22:46:db:18:a2:
f8:b4:9f:2c:1a:67:d7:fb:cb:69:60:17:6d:98:c1:
b7:81:d7:dd:70:04:4a:c6:7e:d7:3d:a3:86:d4:d2:
7b:fa:55:74:be:ae:fd:53:5e:5b:9e:d9:45:a4:30:
e0:82:09:97:e6:99:fd:f9:d5:61:87:7a:30:3f:ab:
4f:39:1b:6f:d8:f8:1b:6c:49:73:14:b6:f6:ef:92:
19:79:1b:9e:09:ee:f2:5b:fa:f2:26:dd:fc:5a:83:
6a:dc:ec:3b:87:d9:e8:32:1c:ac:48:44:a5:09:3b:
47:b7:7b:22:b8:bb:33:9a:52:b9:73:4b:73:17:55:
28:48:ae:16:2c:d2:ae:b5:e0:d2:d1:6a:3f:52:5f:
45:c0:27:45:9c:ba:8a:ae:a0:b2:c9:03:98:82:dd:
27:61:df:59:99:12:d5:f5:76:a3:f6:63:52:c6:28:
e1:8e:41:4a:cc:29:46:d3:e0:0c:16:1e:52:37:2b:
a3:fb:f7:50:e0:4b:80:96:05:d8:28:b2:4e:c4:63:
4b:2d:65:68:7c:53:c6:0b:06:af:27:af:df:7b:8c:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:51:36:DA:6B:F9:C2:74:5E:1F:A6:85:1D:48:48:41:27:7B:04
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.160.0/22
Signature Algorithm: sha256WithRSAEncryption
16:01:97:6d:c1:e4:32:87:15:ee:34:43:26:fa:53:1d:22:be:
b4:b1:79:af:a3:bb:d0:fb:66:bb:7e:24:20:75:ac:f6:0f:3e:
09:78:13:d0:a3:b6:e0:d6:e2:06:2d:a6:80:0c:31:75:d2:76:
1c:17:c4:4c:91:43:ef:46:04:e9:92:ee:eb:4f:1c:77:c6:d3:
fd:a8:0a:b5:94:f9:71:f8:ea:a5:bf:83:d7:d2:a8:fe:b3:b3:
48:c4:97:1c:05:e4:0e:ed:fa:e0:e5:88:cb:94:e8:fa:11:30:
ef:b1:2e:92:87:26:37:64:6d:0a:6d:d3:98:c9:78:d9:a7:70:
af:90:87:f7:c4:d4:41:08:7d:a0:42:69:aa:bb:5c:a6:8b:35:
2a:bb:57:1c:38:7b:d2:f0:77:3a:87:3b:e4:72:4b:ad:3f:c3:
ff:73:be:1e:b6:b7:20:4c:60:4b:03:fc:01:a1:1a:ec:5d:f8:
10:5f:5d:54:bb:fb:9e:3c:d0:77:7e:15:42:8e:d4:d7:96:a7:
e1:74:bd:f7:52:29:ec:39:55:bd:40:a3:d4:d5:d7:cc:10:0c:
3d:aa:ea:5f:be:c5:a1:de:c0:9a:ae:0c:bc:58:4d:20:d2:f7:
4c:06:c9:3b:13:9c:4e:68:d1:7d:71:e0:58:47:21:56:18:38:
c0:7b:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:55:46 2025 by rpki-client