![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3232342e302f32342d3234203d3e203336323137.roa
File: 3135372e35332e3232342e302f32342d3234203d3e203336323137.roa (raw, json)
Hash identifier: 73cxVEm8o+dofl/gAhOFmzasXqJ7hEUQZabhQOGrDUA=
Subject key identifier: 91:79:7D:0C:BB:37:B1:46:69:AC:35:46:ED:AA:77:1E:B5:7F:5D:73
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 20C578967DB55414816B539F14089416D6A6AE5F
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3232342e302f32342d3234203d3e203336323137.roa
Signing time: Thu 20 Oct 2022 18:05:18 +0000
ROA not before: Thu 20 Oct 2022 18:00:18 +0000
ROA not after: Thu 19 Oct 2023 18:05:18 +0000
asID: 36217
IP address blocks: 157.53.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c5:78:96:7d:b5:54:14:81:6b:53:9f:14:08:94:16:d6:a6:ae:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Oct 20 18:00:18 2022 GMT
Not After : Oct 19 18:05:18 2023 GMT
Subject: CN=91797D0CBB37B14669AC3546EDAA771EB57F5D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:7a:a5:dd:4e:90:8c:ba:e0:18:ac:2d:9d:
e3:6f:c2:9d:ec:7e:26:86:b8:ce:11:91:d0:8b:52:
1f:f6:c7:c2:77:f2:e2:9c:db:f7:67:d5:40:e1:6b:
a5:3b:76:bf:79:99:b0:05:2a:b5:48:ae:4d:6c:d7:
13:74:20:26:63:2b:32:81:30:25:26:d6:85:09:50:
29:ce:58:df:53:4c:7f:65:cb:21:19:40:ad:fc:b6:
f2:c8:d8:ca:f2:3c:40:1e:34:36:49:3e:db:cd:93:
6b:3a:13:17:98:b7:96:72:7f:bd:ee:a3:3c:03:53:
46:c2:d6:53:51:53:ad:1f:38:2f:3a:33:c1:55:d1:
f0:71:1a:a7:f6:1a:5d:a4:d4:2e:1c:37:d4:bd:ea:
d7:79:63:24:5b:b0:25:fc:c8:d7:76:9d:9a:68:85:
3a:6a:e4:15:55:03:a9:f4:23:38:36:a7:08:47:47:
8c:93:11:71:d4:4d:c1:b6:c7:5e:6e:89:5d:67:18:
08:15:9b:fb:a8:81:32:c7:5e:7f:c3:b0:cb:82:f7:
3b:38:bd:9d:a7:37:cd:63:84:83:e6:75:02:89:58:
cb:b7:d7:1d:f4:ef:25:97:5f:73:fd:0d:c3:43:34:
c1:ae:8d:72:23:db:f7:1b:91:97:29:77:0b:83:f9:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:79:7D:0C:BB:37:B1:46:69:AC:35:46:ED:AA:77:1E:B5:7F:5D:73
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3232342e302f32342d3234203d3e203336323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.53.224.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f0:75:aa:de:c6:36:cb:36:94:74:df:9e:e2:0d:7a:23:1c:
8f:3a:96:74:8b:87:47:4e:73:70:06:a4:4f:03:1f:96:0b:75:
9c:46:23:a4:87:e3:05:aa:cd:bc:76:e0:5d:75:89:07:63:cc:
5c:9e:ca:00:4e:d4:3a:7f:cd:32:b4:9c:26:77:6a:cc:3b:4b:
2c:a2:58:35:5a:fe:4d:99:3f:70:a3:63:99:89:25:d5:b9:2c:
d7:0d:99:4c:5d:e9:b0:07:40:2c:91:d4:cc:8b:84:43:bc:36:
1f:5b:b9:07:56:3c:b0:25:e9:3a:67:ba:8c:5e:3d:ad:97:86:
7d:cc:e6:72:15:1f:9d:a0:b0:e0:0f:fa:14:89:dc:8a:b3:dd:
db:ee:90:23:db:79:56:ed:73:38:d7:89:4e:c8:c2:bc:0b:f4:
88:3f:fe:75:e5:b3:ce:ce:8c:7b:98:f6:8f:7b:5a:3d:83:b9:
9d:bd:35:f8:82:30:fd:66:01:89:04:51:06:21:06:22:3d:91:
80:50:41:4b:00:22:3d:7b:c4:d8:fd:54:f6:22:65:81:b0:cd:
78:ad:82:2b:50:4c:af:e1:48:bc:f2:6a:bf:65:4e:12:29:55:
bf:9d:ae:c4:17:11:90:b7:6f:4a:35:47:16:93:f1:1f:82:83:
f4:56:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:02 2025 by rpki-client