Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e203439333932.roa
File: 3139392e34382e3234332e302f32342d3234203d3e203439333932.roa (raw, json)
Hash identifier: b8p9WKIw4YowB6NzSCH4n051hfGKXOYLQCg5S+7nCwE=
Subject key identifier: B6:3C:D8:F5:61:F0:46:14:A0:6E:7A:65:EE:9C:94:58:3B:37:39:85
Certificate issuer: /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial: 2909B04B9187908618580B06A1FB657A4AEDCE93
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e203439333932.roa
Signing time: Thu 06 Jul 2023 17:11:28 +0000
ROA not before: Thu 06 Jul 2023 17:06:28 +0000
ROA not after: Thu 04 Jul 2024 17:11:28 +0000
asID: 49392
IP address blocks: 199.48.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:09:b0:4b:91:87:90:86:18:58:0b:06:a1:fb:65:7a:4a:ed:ce:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Validity
Not Before: Jul 6 17:06:28 2023 GMT
Not After : Jul 4 17:11:28 2024 GMT
Subject: CN=B63CD8F561F04614A06E7A65EE9C94583B373985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:3e:ce:5a:6d:56:51:5b:18:bf:eb:64:5b:
2b:dc:1b:28:f8:57:69:00:fb:76:27:c6:ac:85:a5:
e7:a8:8d:84:97:17:f0:f2:92:db:40:a0:bf:ab:0f:
58:87:49:02:6e:85:9c:57:d1:df:b3:23:73:9c:cc:
92:1c:70:0d:b4:79:a0:b1:89:fa:43:8a:0c:b9:b4:
b3:c4:21:8a:5f:88:de:e4:74:3c:91:70:82:6f:1a:
92:c6:92:ed:dc:ea:ce:b9:3c:ed:48:3c:87:74:fe:
6f:78:9b:86:40:1f:02:e3:6a:f3:1a:ad:9f:61:c2:
cb:42:dc:75:79:f6:3d:ff:95:e7:88:f1:45:b1:be:
e5:7a:43:18:f2:b8:ae:97:17:3f:c0:aa:22:ab:67:
4b:97:d7:6c:40:f9:51:b2:03:be:68:ab:0f:63:3d:
7b:07:c7:4f:41:52:89:1c:43:fe:c3:82:42:b7:49:
f0:95:be:fe:22:a2:70:4f:31:71:c0:3b:a8:e3:0d:
57:a2:61:ba:85:b9:88:f3:28:c8:8a:bf:0d:55:b8:
f0:72:49:67:46:70:a9:7e:f4:d9:d2:24:52:49:61:
03:d5:12:34:2c:dd:af:44:15:28:3c:f3:ff:ad:86:
d9:36:85:eb:e4:2a:bd:e4:cf:a5:15:06:23:cd:e4:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:D8:F5:61:F0:46:14:A0:6E:7A:65:EE:9C:94:58:3B:37:39:85
X509v3 Authority Key Identifier:
keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e203439333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.48.243.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0d:4c:49:40:f1:c1:62:18:b1:cd:66:69:9a:87:5e:d6:18:
b0:d3:d8:1d:97:3d:2c:34:92:07:c3:d1:d2:1d:b5:96:33:b4:
0e:eb:67:51:c6:20:32:71:46:50:55:a6:1a:e5:bb:b2:1a:f5:
0d:19:61:18:b1:5d:3d:7e:45:a9:08:67:19:f0:7a:d7:fe:e2:
03:5c:58:10:32:c4:48:9e:0d:c7:8c:7e:e8:47:33:2f:c9:45:
92:c3:fb:d4:9b:83:75:09:13:37:91:5d:cf:2a:1f:ba:6f:89:
7c:9e:4b:f4:ba:05:00:27:71:46:9f:8c:58:85:9c:92:94:ff:
6f:64:39:39:e4:80:6a:d8:8f:0b:e3:31:a8:71:34:7c:0b:e9:
73:1b:a6:e1:55:63:68:92:33:1f:89:20:55:8b:5d:67:ae:08:
bc:04:5b:40:8e:68:64:6a:91:27:f2:9d:ed:85:26:be:e8:b4:
f9:49:e8:a1:4d:e9:fd:d2:ea:b7:34:bb:70:74:7c:b8:e5:42:
32:e0:10:fb:aa:c7:e6:2f:a8:90:24:c0:cb:60:a3:19:c4:cd:
49:fa:67:c0:80:21:c1:a0:17:c9:2e:60:a3:99:76:09:e1:60:
99:ec:2f:d8:f0:cb:68:6a:8f:3f:99:04:37:98:ee:50:14:00:
7f:70:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:17:12 2025 by rpki-client