Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e20383334.roa
File: 3139392e3230342e3136312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Nkw11wHPWr4aWjhWlzCfzcqFxWf5NOEgYRHtPMDjzlw=
Subject key identifier: 04:05:55:66:E1:2F:72:D1:A8:58:7E:DE:FB:63:FE:1B:E7:6F:3B:9D
Certificate issuer: /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial: 32ED3D14E8E8C29DB13BF0CEA3102635BA37616A
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e20383334.roa
Signing time: Mon 31 Jul 2023 14:00:03 +0000
ROA not before: Mon 31 Jul 2023 13:55:03 +0000
ROA not after: Mon 29 Jul 2024 14:00:03 +0000
asID: 834
IP address blocks: 199.204.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ed:3d:14:e8:e8:c2:9d:b1:3b:f0:ce:a3:10:26:35:ba:37:61:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Validity
Not Before: Jul 31 13:55:03 2023 GMT
Not After : Jul 29 14:00:03 2024 GMT
Subject: CN=04055566E12F72D1A8587EDEFB63FE1BE76F3B9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:42:f7:2e:87:8e:e1:79:87:f9:65:75:68:
92:58:4c:05:19:d7:b6:b6:41:a6:8e:1d:90:26:76:
cb:19:87:1c:da:66:ff:e1:d4:64:fa:10:59:65:93:
76:51:ca:48:45:ed:63:71:1b:7b:65:74:30:0e:51:
69:f0:42:bd:bd:13:2f:a5:76:52:7b:8c:a1:f4:fc:
01:12:b1:42:57:40:09:63:e1:b6:c5:a0:24:af:c2:
05:56:25:fe:e6:59:06:63:2b:bd:64:de:fa:9f:cf:
8e:dc:5b:51:d7:48:35:bd:69:82:55:d9:de:b5:ce:
e5:e9:21:1c:b3:f9:9c:30:4a:fa:bc:27:11:f7:f9:
1a:ae:be:f7:14:38:81:02:10:c8:c8:e8:01:d4:59:
12:ec:e6:6f:e7:2c:5f:95:df:51:5d:96:2f:f3:a9:
e7:af:58:e0:8d:1f:fa:25:d8:6d:9a:4b:f9:7c:d9:
ce:3f:d3:73:91:b5:60:44:16:1c:1c:61:f9:ed:08:
fc:d6:bf:54:ec:74:50:a5:75:11:d6:3b:4d:90:6c:
e4:5a:18:69:89:1f:f2:82:74:87:f9:18:a4:c9:18:
36:7d:d6:ca:2d:f1:49:cd:d6:26:18:a7:99:1a:9d:
3e:5c:a3:02:b3:bd:9b:85:1d:de:41:f3:6e:a1:18:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:05:55:66:E1:2F:72:D1:A8:58:7E:DE:FB:63:FE:1B:E7:6F:3B:9D
X509v3 Authority Key Identifier:
keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.204.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d3:0e:34:29:67:b7:0d:9a:ea:c7:ed:10:69:83:77:f7:68:
6a:2f:53:37:ba:b2:61:67:c1:40:26:35:f0:72:da:f4:3e:3f:
fd:85:49:6f:6a:5a:a6:30:98:1b:48:4d:c4:bc:23:c9:e4:45:
59:dd:59:b3:51:a9:00:f6:83:c7:06:f3:42:85:2c:5b:5f:83:
1a:e6:dc:b1:e9:61:12:47:0a:43:fd:38:a9:3d:cf:70:07:8c:
ff:5d:b1:49:93:65:e3:4d:a6:92:d8:75:41:29:37:3d:06:fc:
31:ae:54:6d:e9:8f:2f:3b:f0:ed:70:1f:2e:71:b6:36:f9:5f:
15:3b:13:83:41:56:53:c6:0b:cb:e4:46:04:3a:e4:ac:02:3c:
9e:83:e1:58:8b:1b:de:91:bb:0a:a5:00:a5:4d:f7:81:c0:70:
f7:39:77:cc:2a:c4:c1:5c:e7:70:34:1a:46:ae:56:a4:a6:30:
bc:55:f6:f9:e3:2d:f2:9d:29:b8:f8:75:14:9d:0b:33:da:a8:
a2:8e:17:85:90:76:66:23:e8:a6:df:72:c7:1e:43:af:91:6c:
87:8c:bd:ce:6b:27:2d:15:3d:d8:82:4f:2b:e9:cb:59:6c:1e:
eb:31:3b:09:96:b2:a1:cd:4b:81:5f:00:f2:5b:36:d4:68:00:
12:1f:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:21 2025 by rpki-client