Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: lWK3A/3IA7F6A2NC72Hx+ztIUahufGaRIRMt4me6FZE=
Subject key identifier: B4:C7:91:A7:F0:F9:7D:74:EF:EF:DD:7B:5C:71:FB:D2:75:A1:00:13
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 27E68413FE947F83424D146614FCBBB03CB34337
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS0.roa
Signing time: Tue 03 Jan 2023 15:30:25 +0000
ROA not before: Tue 03 Jan 2023 15:25:25 +0000
ROA not after: Tue 02 Jan 2024 15:30:25 +0000
asID: 0
IP address blocks: 140.99.2.0/24 maxlen: 24
140.99.3.0/24 maxlen: 24
140.99.4.0/24 maxlen: 24
140.99.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e6:84:13:fe:94:7f:83:42:4d:14:66:14:fc:bb:b0:3c:b3:43:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jan 3 15:25:25 2023 GMT
Not After : Jan 2 15:30:25 2024 GMT
Subject: CN=B4C791A7F0F97D74EFEFDD7B5C71FBD275A10013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:3c:d5:66:98:cf:7d:8b:70:e3:d6:83:a8:
7a:43:83:9d:66:24:71:7b:97:10:66:14:25:c1:d9:
d8:32:ec:bb:e3:f9:14:80:a0:eb:ab:24:92:92:53:
d9:ce:0d:08:1d:db:96:ff:57:fd:88:c1:94:b3:e8:
59:3f:a5:ff:1f:08:c0:f5:d7:24:fb:7a:41:18:d8:
b7:5e:9c:3a:85:7a:4a:74:35:95:01:b8:a7:55:a1:
ad:9d:24:f4:e4:a9:b2:1a:55:6d:21:af:59:a0:54:
b0:8f:07:67:a6:ed:e3:57:44:d8:5d:df:33:01:ab:
75:8d:61:d5:bb:34:89:8f:21:1c:d8:b6:ae:0a:45:
96:10:f5:3d:72:34:37:fa:29:4f:48:7b:4e:a6:72:
53:e4:af:18:b4:e8:a4:b5:f1:b1:d8:85:93:df:a6:
56:27:18:fa:3b:7a:88:d3:2a:a4:36:f0:4f:83:be:
64:bb:4e:22:01:86:ed:4a:67:65:8e:04:5a:00:74:
da:85:3e:98:ff:03:dc:42:37:04:93:4f:b3:92:d7:
eb:51:70:35:0e:75:31:1f:df:c5:81:b9:6d:86:fb:
db:54:8c:31:27:4e:dc:cf:fa:94:f0:f9:fe:b5:7f:
fc:c3:2d:f6:1b:db:72:e5:69:6a:d7:9b:0b:57:83:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:91:A7:F0:F9:7D:74:EF:EF:DD:7B:5C:71:FB:D2:75:A1:00:13
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.2.0-140.99.4.255
140.99.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:26:1b:0d:34:8f:cb:1c:f0:81:b1:20:0a:69:33:dc:81:7c:
b3:4c:16:a6:f6:0e:ce:7e:cf:d0:7f:c6:43:07:b6:93:74:84:
1e:ac:71:70:0b:43:a5:2c:b1:f5:aa:11:5c:40:94:60:1c:bf:
79:f5:88:76:70:3c:60:ca:c0:e0:28:f4:93:c2:50:2a:06:68:
53:51:4b:83:72:cd:c0:7e:1c:03:c5:62:e5:78:0d:63:1f:e1:
0c:17:ac:44:ff:78:25:92:7d:b4:15:4b:f0:7b:e3:8f:58:42:
42:18:32:bd:2b:6e:90:a0:61:33:80:e4:ef:7c:9e:d5:09:bc:
24:8c:93:a7:35:f9:f3:9d:37:8c:c2:88:c1:bd:fd:8c:af:e2:
41:ad:64:b5:27:3d:bc:c1:38:0b:bf:20:71:ea:3a:b0:a2:52:
16:af:1b:06:09:5d:ca:88:29:01:22:63:ff:e3:f2:ca:f2:b9:
e3:92:8e:ff:9a:ae:4e:f2:b2:7e:b3:be:34:48:9e:66:bb:84:
d4:08:85:65:8b:1a:8e:9a:f5:56:67:1d:e7:2d:2a:c5:07:e4:
6a:a4:64:b1:3a:f9:e9:88:3e:dc:df:00:cd:02:92:c8:2c:b2:
8e:f9:f1:1f:e2:be:e5:b8:ca:fb:23:83:c5:23:8b:0c:54:44:
ad:b4:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:28 2025 by rpki-client