Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3263613a3a2f34382d3438203d3e203631313338.roa
File: 323430343a336438303a3263613a3a2f34382d3438203d3e203631313338.roa (raw, json)
Hash identifier: O8ISo5g2LctxMA2JauEKJ4gUGRlcADAashhE8yFw9V4=
Subject key identifier: 9E:09:2D:4C:6D:DE:27:F5:24:9C:37:8A:B2:8C:7C:6C:99:88:32:DF
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 25B21056DFC13C70CC455ECC464B12C9E687D126
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3263613a3a2f34382d3438203d3e203631313338.roa
Signing time: Sun 24 Nov 2024 03:23:19 +0000
ROA not before: Sun 24 Nov 2024 03:18:19 +0000
ROA not after: Sun 23 Nov 2025 03:23:19 +0000
asID: 61138
IP address blocks: 2404:3d80:2ca::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b2:10:56:df:c1:3c:70:cc:45:5e:cc:46:4b:12:c9:e6:87:d1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Nov 24 03:18:19 2024 GMT
Not After : Nov 23 03:23:19 2025 GMT
Subject: CN=9E092D4C6DDE27F5249C378AB28C7C6C998832DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:8f:a4:f4:a3:4b:60:79:da:0a:7b:eb:4b:
45:24:33:84:27:d8:97:ab:62:5a:d8:fa:5b:57:46:
64:a2:f9:4a:41:0e:58:c4:a1:33:6a:25:1e:77:fb:
36:28:c5:05:81:a6:86:82:1c:62:1a:e3:04:e5:76:
b0:9c:db:c4:80:a6:8a:e6:e9:9d:ec:98:ce:2c:7e:
a8:23:60:a5:16:d6:2e:32:98:8e:45:fe:23:eb:a8:
32:2c:21:34:55:81:3d:c8:cd:47:87:e3:e3:3d:ad:
c3:93:89:80:1d:2f:77:82:29:2c:85:4a:10:84:07:
f0:ed:77:78:ab:45:28:40:e4:bc:b7:98:a8:01:6b:
4c:e5:aa:35:51:f0:2b:9a:a7:f1:4b:1e:06:cd:09:
74:09:35:b0:d3:e4:86:9d:0a:a4:31:61:dd:e9:b4:
7e:d4:84:82:3b:9d:25:5d:1b:f9:00:8d:82:3a:27:
63:02:99:27:c3:3c:33:0a:66:a9:68:0a:d9:97:09:
1c:ef:e4:04:44:a3:d6:c8:ad:2e:35:6e:a9:ee:b3:
c0:3d:30:76:01:6b:45:8e:2a:02:e7:97:ba:66:fe:
76:36:22:51:40:85:f3:b3:26:44:8a:03:0a:ac:a4:
47:42:af:47:ce:2e:74:75:98:3b:cf:b8:8b:2e:ca:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:2D:4C:6D:DE:27:F5:24:9C:37:8A:B2:8C:7C:6C:99:88:32:DF
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3263613a3a2f34382d3438203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:3d80:2ca::/48
Signature Algorithm: sha256WithRSAEncryption
84:ac:f3:ec:c6:d6:19:69:2a:2e:ac:9a:1f:93:e0:7f:1d:d1:
16:34:5e:14:d9:94:60:52:23:33:da:9e:28:8e:ac:65:15:6e:
d9:a4:62:5b:3a:74:fb:90:19:80:7e:42:17:ee:a2:14:e1:dd:
8c:72:75:ef:ec:76:07:36:12:60:5c:e0:f2:55:31:de:37:66:
ee:6c:6d:e0:87:62:38:93:90:09:d7:20:6a:98:4c:8b:4a:87:
6f:de:7d:1e:51:42:f6:a1:70:41:42:7a:16:2a:b1:2c:0d:3f:
0b:04:ed:c1:69:7f:27:e9:f5:a5:6d:8e:d5:a8:13:3c:5d:05:
b9:7e:77:46:e2:17:a7:f1:20:4c:5e:23:99:4e:b6:79:5f:3b:
96:17:9f:aa:57:07:81:30:df:f9:d5:df:fd:5a:f0:7b:c2:5c:
2a:e8:32:51:50:a2:7b:2f:3d:1c:cd:91:1a:7c:60:d1:55:d3:
c4:b8:d8:04:6c:6c:60:3c:91:f9:2d:84:fd:73:6e:76:a2:ee:
f5:2f:3f:e3:99:ee:94:e5:50:b5:b6:e3:d2:a9:3d:d2:af:3e:
ba:f2:fa:d6:16:3f:e1:84:31:17:80:5d:ee:71:4b:b1:bf:d7:
58:cf:01:d3:27:72:2d:71:43:78:be:19:64:b4:15:27:5b:c2:
b4:33:b3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:04 2025 by rpki-client