Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20383334.roa
File: 3139392e3230342e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: srkHLuZNTwYVyplbOeWjyfLyIBAQ8FVR20y2YeYaeY0=
Subject key identifier: 5F:39:16:49:AF:2D:6E:87:E7:58:CD:AA:FA:07:33:5B:85:B0:CB:22
Certificate issuer: /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial: 6C4CCE3F80A8C90B2BE5EB4EC7204A8ECF347EBA
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20383334.roa
Signing time: Sun 10 Sep 2023 00:00:06 +0000
ROA not before: Sat 09 Sep 2023 23:55:06 +0000
ROA not after: Sun 08 Sep 2024 00:00:06 +0000
asID: 834
IP address blocks: 199.204.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:4c:ce:3f:80:a8:c9:0b:2b:e5:eb:4e:c7:20:4a:8e:cf:34:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Validity
Not Before: Sep 9 23:55:06 2023 GMT
Not After : Sep 8 00:00:06 2024 GMT
Subject: CN=5F391649AF2D6E87E758CDAAFA07335B85B0CB22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:06:92:6a:0e:20:b5:27:65:58:88:3c:28:
46:d0:f1:5f:d1:a1:36:cf:91:dd:03:32:b2:5b:d2:
7c:32:8a:07:28:e9:07:16:13:a2:d1:db:2a:79:68:
55:51:23:ed:16:37:8f:56:a7:be:d2:9f:2e:86:ea:
2a:89:0d:78:eb:84:66:ed:85:13:e0:bf:ed:ae:c7:
0a:b8:b5:0d:44:af:96:62:e4:5d:e9:da:e4:a1:56:
73:d4:cb:38:99:c5:30:2c:eb:88:1b:60:2e:e2:a6:
39:0e:19:8a:c0:1a:a9:9f:61:e4:5f:28:6e:4e:c9:
14:25:fc:98:b9:b2:36:c6:35:1e:9e:41:82:4f:11:
02:29:4c:8c:26:0a:be:2f:c5:9e:47:10:3d:d5:d4:
14:f7:27:34:76:88:4c:55:cf:b0:59:25:c4:49:28:
47:1e:d8:a2:dc:23:bb:10:43:7a:9f:eb:b3:8d:85:
02:e9:e8:b2:e6:8f:4e:66:82:9a:f4:33:57:6f:a6:
d8:f4:0a:c4:3b:ea:b9:b9:9c:88:05:d7:e2:3e:f0:
6b:2f:06:a7:d9:db:3e:5d:3b:d0:aa:b4:a7:35:e4:
8c:6c:ed:68:d1:13:5f:79:c7:b8:c3:00:aa:d5:c7:
f7:72:cd:da:49:b1:06:ba:70:82:ac:af:82:82:04:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:39:16:49:AF:2D:6E:87:E7:58:CD:AA:FA:07:33:5B:85:B0:CB:22
X509v3 Authority Key Identifier:
keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.204.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:71:c0:fd:cf:9b:3b:62:45:95:83:81:38:8f:e1:83:58:41:
05:49:51:97:b8:9c:e7:8b:74:bb:c2:48:7e:d8:97:b9:b6:d4:
fc:30:fb:1a:87:ee:90:8f:b0:d5:bf:fa:9a:19:cf:56:08:d3:
10:1f:39:d3:df:72:90:78:ad:f3:3a:ca:92:df:57:03:0a:70:
bc:89:e9:cc:17:4d:35:78:1c:43:d1:a5:f6:b0:61:c6:75:eb:
a6:e4:2a:94:1f:27:e6:4d:75:f6:37:ea:be:f0:f0:f1:1b:28:
41:ff:88:47:18:f3:16:37:d1:76:70:d0:8b:c6:97:97:1c:04:
d0:67:b6:69:fc:02:69:cf:db:ed:b7:d0:d1:86:b5:a6:ba:2e:
cc:53:34:a6:b0:c0:04:1d:90:f1:ea:ec:32:83:ed:f3:52:dd:
9f:67:46:60:1b:75:91:a9:b7:02:d8:54:55:a9:fb:94:b6:7b:
f4:f1:10:97:d0:17:4e:58:70:3a:e8:92:b6:a4:22:64:9a:d4:
ef:91:e9:74:b9:68:aa:30:99:16:54:1d:76:b5:34:6f:da:81:
83:43:d4:fb:22:67:94:34:db:a5:36:95:50:d5:69:45:1f:43:
9c:7d:f9:09:e1:cc:b0:7f:27:c7:f8:f7:c1:4b:33:db:21:83:
86:99:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:46 2025 by rpki-client