Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233322e302f32322d3232203d3e20323038343835.roa
File: 3230352e3233342e3233322e302f32322d3232203d3e20323038343835.roa (raw, json)
Hash identifier: mgy6qWsVKvOjydNkeo+LKYNGG8IQhAkLYK75w6z+crc=
Subject key identifier: 87:F6:03:68:24:3E:60:3C:F2:F2:0E:18:4B:47:71:6C:EF:D1:92:FE
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 64D6963B14D7C23A2CE293CAC6390CA4F400B082
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233322e302f32322d3232203d3e20323038343835.roa
Signing time: Sun 07 May 2023 18:47:56 +0000
ROA not before: Sun 07 May 2023 18:42:56 +0000
ROA not after: Sun 05 May 2024 18:47:56 +0000
asID: 208485
IP address blocks: 205.234.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d6:96:3b:14:d7:c2:3a:2c:e2:93:ca:c6:39:0c:a4:f4:00:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 7 18:42:56 2023 GMT
Not After : May 5 18:47:56 2024 GMT
Subject: CN=87F60368243E603CF2F20E184B47716CEFD192FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:e1:89:e4:95:92:ab:1d:27:b9:20:66:0f:
81:d9:42:b9:13:f9:5d:28:f9:62:d8:28:6f:e6:65:
e8:e6:05:33:db:47:cf:2c:d0:03:2f:cb:d0:8d:80:
e6:df:4c:88:19:86:6e:5b:f3:14:fa:2f:1d:01:9e:
e6:19:e1:06:09:e1:e3:f4:af:02:cc:d7:83:75:33:
9c:1f:a4:e0:48:b0:a3:65:3e:82:fd:10:f8:b2:c7:
ef:ad:c9:37:42:f2:41:e3:f9:e2:ac:cf:47:3f:8f:
aa:27:e7:78:84:d9:71:72:05:cd:71:e5:c9:65:0c:
9b:08:f8:66:09:9b:a9:e3:97:c3:38:5a:b2:83:35:
0e:c9:0d:5f:fe:fd:eb:06:19:96:cd:eb:ed:27:a8:
a4:5e:1e:90:e5:34:3d:28:17:06:0d:c4:30:3c:f3:
e4:21:0f:7e:cc:75:35:87:df:ce:34:26:20:93:04:
3b:d6:d4:b4:d9:72:98:e9:e5:c8:dc:79:58:d9:89:
40:8c:bd:db:44:c1:93:12:f9:01:fa:47:3b:c8:63:
eb:8d:b6:3f:c3:d9:2a:1d:9c:9f:7c:f9:56:da:cb:
a2:8b:35:84:53:a0:d6:a5:a0:a6:42:a1:f8:4c:30:
81:5b:11:a5:dc:da:66:48:72:c0:0e:03:f1:94:2a:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:03:68:24:3E:60:3C:F2:F2:0E:18:4B:47:71:6C:EF:D1:92:FE
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233322e302f32322d3232203d3e20323038343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:5f:59:69:79:ed:6c:13:30:95:74:4e:51:a4:23:0a:e3:e8:
63:5a:2e:07:40:9d:7a:12:61:c9:b3:43:83:4d:6a:63:b7:f6:
1a:d2:47:31:ac:d8:df:12:65:04:66:b5:a0:9c:87:27:e0:28:
8b:54:83:25:d1:0f:b2:d6:f0:4b:a2:79:5b:09:ab:c8:bb:46:
c4:fc:e6:a8:a2:fd:c4:c5:88:6c:da:c8:0b:36:ce:bf:99:70:
72:d3:ee:16:6a:75:30:b9:b0:01:b9:01:76:05:67:36:bf:8d:
10:96:45:a2:2d:83:f1:dd:87:37:f2:00:0e:24:a6:a4:d6:d6:
21:4a:17:61:d9:bf:b9:5a:cc:00:d6:8b:bb:25:ed:3f:37:a1:
82:32:fc:c8:61:42:a6:86:c1:30:ba:fc:8f:17:21:53:d6:19:
ca:05:08:e5:98:f4:03:3a:58:10:67:d4:80:2e:ef:45:78:fa:
22:13:a9:5c:dd:bb:ee:13:86:44:ef:c2:f4:44:60:24:95:4f:
33:5e:c5:fb:c5:03:4a:04:f4:6d:e7:71:e4:dd:4d:fa:f3:2e:
ea:c7:c2:73:aa:f8:d2:21:35:fa:3a:57:47:c5:74:35:d4:11:
e2:ae:2c:0f:3b:ff:fe:1c:98:70:62:e5:37:88:d1:45:b1:dd:
5c:41:df:62
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUZNaWOxTXwjos4pPKxjkMpPQAsIIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTA3MTg0MjU2WhcNMjQwNTA1MTg0NzU2
WjAzMTEwLwYDVQQDEyg4N0Y2MDM2ODI0M0U2MDNDRjJGMjBFMTg0QjQ3NzE2Q0VG
RDE5MkZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocnhieSVkqsd
J7kgZg+B2UK5E/ldKPli2Chv5mXo5gUz20fPLNADL8vQjYDm30yIGYZuW/MU+i8d
AZ7mGeEGCeHj9K8CzNeDdTOcH6TgSLCjZT6C/RD4ssfvrck3QvJB4/nirM9HP4+q
J+d4hNlxcgXNceXJZQybCPhmCZup45fDOFqygzUOyQ1f/v3rBhmWzevtJ6ikXh6Q
5TQ9KBcGDcQwPPPkIQ9+zHU1h9/ONCYgkwQ71tS02XKY6eXI3HlY2YlAjL3bRMGT
EvkB+kc7yGPrjbY/w9kqHZyffPlW2suiizWEU6DWpaCmQqH4TDCBWxGl3NpmSHLA
DgPxlCrpEQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIf2A2gkPmA88vIOGEtHcWzv
0ZL+MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzAzNTJlMzIzMzM0MmUzMjMzMzIyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzMjMwMzgzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALN6ugwDQYJKoZIhvcN
AQELBQADggEBAJ1fWWl57WwTMJV0TlGkIwrj6GNaLgdAnXoSYcmzQ4NNamO39hrS
RzGs2N8SZQRmtaCchyfgKItUgyXRD7LW8EuieVsJq8i7RsT85qii/cTFiGzayAs2
zr+ZcHLT7hZqdTC5sAG5AXYFZza/jRCWRaItg/HdhzfyAA4kpqTW1iFKF2HZv7la
zADWi7sl7T83oYIy/MhhQqaGwTC6/I8XIVPWGcoFCOWY9AM6WBBn1IAu70V4+iIT
qVzdu+4ThkTvwvREYCSVTzNexfvFA0oE9G3nceTdTfrzLurHwnOq+NIhNfo6V0fF
dDXUEeKuLA87//4cmHBi5TeI0UWx3VxB32I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org