Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31332e302f32342d3234203d3e203631313338.roa
File: 3231362e3234362e31332e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: QALlTJy9PxrvtuuNJBAW/l3JHaxej0S2elcLK9Ak9r4=
Subject key identifier: 22:AD:C3:59:BA:62:48:50:0B:BB:AC:36:90:E3:16:C8:7E:A9:04:3D
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 0CFA46C86201989004E4326901121D2D3DEAB125
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31332e302f32342d3234203d3e203631313338.roa
Signing time: Fri 07 Apr 2023 05:58:09 +0000
ROA not before: Fri 07 Apr 2023 05:53:09 +0000
ROA not after: Fri 05 Apr 2024 05:58:09 +0000
asID: 61138
IP address blocks: 216.246.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:fa:46:c8:62:01:98:90:04:e4:32:69:01:12:1d:2d:3d:ea:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 7 05:53:09 2023 GMT
Not After : Apr 5 05:58:09 2024 GMT
Subject: CN=22ADC359BA6248500BBBAC3690E316C87EA9043D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:d2:3f:3a:73:ad:d9:6a:7d:32:9a:49:b5:
fa:a3:da:03:a4:cb:79:af:22:18:de:aa:52:74:db:
7d:fc:19:4e:7a:38:d1:03:f8:c1:0f:65:aa:1f:eb:
fa:91:75:45:1c:b1:6d:77:72:43:85:0a:f6:ee:83:
a8:4f:2f:01:f1:6b:2c:ee:46:2e:41:6e:cc:02:d5:
8e:51:1a:65:e9:6d:04:f5:8c:47:79:b3:5f:f4:eb:
00:d9:d8:b4:0b:cc:ca:fd:84:b6:8a:49:bf:e9:93:
99:b1:eb:7c:84:fe:70:b4:37:1b:a0:c5:d0:0d:b2:
bd:ef:63:08:a5:c7:49:f4:95:2a:51:e2:96:73:09:
c3:6d:56:44:c3:52:f5:7f:b0:e0:7d:2f:65:5d:af:
5e:c6:1d:aa:12:d1:a5:bc:a0:da:a1:09:3a:19:e9:
95:17:70:24:1c:1f:a6:a3:bf:29:28:3c:45:77:75:
a2:17:0a:00:41:9f:ba:ce:d1:de:aa:4d:7d:d4:0a:
bf:c8:2b:0f:3b:d2:25:92:b9:da:b2:8b:54:d1:14:
8f:51:cf:f4:a8:84:b5:cb:77:b5:47:6b:2c:8c:c4:
08:a7:20:2d:36:99:dc:af:6e:37:c4:44:b0:23:fb:
98:d8:6d:08:b7:2e:9b:f6:da:1c:59:94:e4:c5:9f:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AD:C3:59:BA:62:48:50:0B:BB:AC:36:90:E3:16:C8:7E:A9:04:3D
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31332e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.246.13.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c9:64:d7:89:99:e7:91:1f:37:2d:dc:bf:1f:f0:26:a2:cd:
32:56:3d:52:2e:03:b5:ed:2b:96:8b:e1:58:86:df:c1:97:b7:
08:e1:ac:fc:4a:ff:38:84:5a:17:d0:1e:e4:9b:a3:11:40:81:
dc:8c:72:76:2b:a8:38:1e:21:e0:c7:2c:4a:65:9a:66:38:12:
31:d2:2b:bf:f7:2f:5f:83:82:80:ec:37:74:f2:ce:b6:4d:5c:
11:3f:74:25:6d:72:05:03:4a:cd:15:8a:a9:55:8d:9c:e7:a2:
ec:2d:19:a8:23:40:b7:17:99:3e:b7:3e:6e:20:6c:e5:26:5a:
db:ac:d0:93:12:8a:a8:bb:d0:86:0b:9a:17:86:ba:fe:a2:83:
19:e9:cc:f8:ec:f9:58:df:97:2e:fb:0a:7b:11:40:f8:90:b6:
5d:75:23:c6:ad:45:05:52:df:97:d3:be:e9:75:d9:3b:dc:bf:
af:f6:b2:4b:90:4d:0b:85:8b:a1:96:ff:a5:e5:64:d1:6c:80:
dd:52:27:14:6a:1c:97:8d:36:f4:dd:6e:78:ff:04:b9:9b:88:
56:f9:13:2e:04:5c:40:e4:cd:eb:f8:0f:52:01:94:e7:80:3c:
59:22:f8:cd:ef:d9:fd:a8:a2:dc:ab:75:9f:e6:31:a2:3b:71:
57:0e:9d:d8
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUDPpGyGIBmJAE5DJpARIdLT3qsSUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNDA3MDU1MzA5WhcNMjQwNDA1MDU1ODA5
WjAzMTEwLwYDVQQDEygyMkFEQzM1OUJBNjI0ODUwMEJCQkFDMzY5MEUzMTZDODdF
QTkwNDNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS/SPzpzrdlq
fTKaSbX6o9oDpMt5ryIY3qpSdNt9/BlOejjRA/jBD2WqH+v6kXVFHLFtd3JDhQr2
7oOoTy8B8Wss7kYuQW7MAtWOURpl6W0E9YxHebNf9OsA2di0C8zK/YS2ikm/6ZOZ
set8hP5wtDcboMXQDbK972MIpcdJ9JUqUeKWcwnDbVZEw1L1f7DgfS9lXa9exh2q
EtGlvKDaoQk6GemVF3AkHB+mo78pKDxFd3WiFwoAQZ+6ztHeqk191Aq/yCsPO9Il
krnasotU0RSPUc/0qIS1y3e1R2ssjMQIpyAtNpncr243xESwI/uY2G0Ity6b9toc
WZTkxZ8zHwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCKtw1m6YkhQC7usNpDjFsh+
qQQ9MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzMTMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj2DTANBgkqhkiG9w0BAQsF
AAOCAQEANclk14mZ55EfNy3cvx/wJqLNMlY9Ui4Dte0rlovhWIbfwZe3COGs/Er/
OIRaF9Ae5JujEUCB3IxydiuoOB4h4McsSmWaZjgSMdIrv/cvX4OCgOw3dPLOtk1c
ET90JW1yBQNKzRWKqVWNnOei7C0ZqCNAtxeZPrc+biBs5SZa26zQkxKKqLvQhgua
F4a6/qKDGenM+Oz5WN+XLvsKexFA+JC2XXUjxq1FBVLfl9O+6XXZO9y/r/ayS5BN
C4WLoZb/peVk0WyA3VInFGocl4029N1ueP8EuZuIVvkTLgRcQOTN6/gPUgGU54A8
WSL4ze/Z/aii3Kt1n+YxojtxVw6d2A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org