Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31332e302f32342d3234203d3e20383334.roa
File: 3231362e3234362e31332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 61QSRP3TFwWHGn7b25rxgkahO111D6xXSJr67LLcCXA=
Subject key identifier: DA:68:04:18:D2:78:3A:68:F6:BB:93:0E:15:DE:17:B7:4A:39:2B:E0
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 50D5BEC05E555316A01A14B51420DB8996BF2546
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31332e302f32342d3234203d3e20383334.roa
Signing time: Thu 04 May 2023 19:00:04 +0000
ROA not before: Thu 04 May 2023 18:55:04 +0000
ROA not after: Thu 02 May 2024 19:00:04 +0000
asID: 834
IP address blocks: 216.246.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d5:be:c0:5e:55:53:16:a0:1a:14:b5:14:20:db:89:96:bf:25:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 4 18:55:04 2023 GMT
Not After : May 2 19:00:04 2024 GMT
Subject: CN=DA680418D2783A68F6BB930E15DE17B74A392BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:a0:2c:c3:00:5b:6a:3f:2c:3a:53:d8:e7:
12:0d:5a:48:5b:1f:58:88:b8:0d:00:54:96:d9:88:
20:c7:13:be:58:d1:36:2f:2a:dc:58:e7:ba:e7:2a:
26:3c:3f:2e:14:c0:2d:a8:e3:35:41:a9:8d:94:39:
36:fe:ed:6a:e2:4d:f6:d5:ad:da:91:ea:7b:46:5a:
66:58:c1:4d:b1:ef:19:51:19:d4:60:ac:45:da:db:
5e:90:09:35:3f:e9:d0:30:02:e2:45:92:2c:29:6a:
c9:5e:72:fc:fd:3b:db:42:ce:e4:b9:72:b8:13:30:
e6:24:f7:84:13:02:49:c5:7f:cb:e7:25:d8:c9:d6:
e2:62:00:34:0d:b7:62:5a:ef:09:0a:fb:c1:7c:1d:
be:9d:63:31:ca:c5:09:21:79:d6:6d:a4:af:79:0a:
48:03:5e:01:af:02:e2:2f:54:42:17:70:a1:ea:9b:
50:4f:53:7a:2d:41:2e:58:e8:73:a6:f1:c2:f0:27:
93:e2:01:91:7e:07:88:f1:a1:71:ee:91:9f:51:be:
e1:73:e4:2e:d2:fb:ea:d8:b7:ca:87:07:73:0c:fd:
cc:3c:ee:14:7f:e5:00:46:0c:c3:ac:e1:f9:1b:08:
e3:a4:c9:7f:e6:f6:4b:51:79:73:23:1e:f1:9d:ff:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:68:04:18:D2:78:3A:68:F6:BB:93:0E:15:DE:17:B7:4A:39:2B:E0
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.246.13.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:9e:21:f4:20:99:de:e3:18:b4:f6:06:3d:fe:81:3a:41:2f:
d7:82:23:6f:0d:cc:cf:aa:c7:76:54:52:dc:96:e3:a3:52:ef:
44:2b:21:40:8b:27:ff:3d:ea:7a:91:99:12:c6:6e:bf:e8:29:
37:e3:b5:05:20:65:75:92:a5:16:af:9a:8f:76:bc:fb:ef:b7:
84:ce:d6:6a:9c:04:f2:28:93:38:55:1a:a6:e9:68:45:a8:be:
6b:a0:0f:37:c5:b9:1a:f8:34:74:a7:05:ed:7c:e4:d7:93:24:
ff:2a:11:a7:74:00:7b:37:ee:2e:95:7a:1c:52:ba:d1:66:a0:
10:28:e4:ff:5a:b7:56:9c:d1:bc:d8:b2:07:14:c8:e1:b6:74:
71:75:b0:26:53:c6:3c:c5:45:c1:31:e5:47:b7:a5:78:3f:95:
0f:3f:a7:62:2a:ad:ad:51:3b:45:60:41:bd:5c:1c:47:1c:ef:
9a:d6:af:85:81:0b:ee:88:0d:d1:e7:0c:45:4a:17:6c:09:1a:
c2:bf:58:4e:96:2e:d5:c7:a1:ec:58:b0:52:af:4a:60:36:76:
be:a3:b7:f8:cf:34:cc:41:fc:75:f4:94:a0:0f:2f:f3:71:fc:
4a:20:5f:93:36:9d:b4:a2:b1:36:c1:ca:e7:ec:94:af:62:04:
16:cc:9a:ed
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUUNW+wF5VUxagGhS1FCDbiZa/JUYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTA0MTg1NTA0WhcNMjQwNTAyMTkwMDA0
WjAzMTEwLwYDVQQDEyhEQTY4MDQxOEQyNzgzQTY4RjZCQjkzMEUxNURFMTdCNzRB
MzkyQkUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRigLMMAW2o/
LDpT2OcSDVpIWx9YiLgNAFSW2YggxxO+WNE2LyrcWOe65yomPD8uFMAtqOM1QamN
lDk2/u1q4k321a3akep7RlpmWMFNse8ZURnUYKxF2ttekAk1P+nQMALiRZIsKWrJ
XnL8/TvbQs7kuXK4EzDmJPeEEwJJxX/L5yXYydbiYgA0DbdiWu8JCvvBfB2+nWMx
ysUJIXnWbaSveQpIA14BrwLiL1RCF3Ch6ptQT1N6LUEuWOhzpvHC8CeT4gGRfgeI
8aFx7pGfUb7hc+Qu0vvq2LfKhwdzDP3MPO4Uf+UARgzDrOH5GwjjpMl/5vZLUXlz
Ix7xnf+p0wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNpoBBjSeDpo9ruTDhXeF7dK
OSvgMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZl
N2ZkOGQzNjYwLzAvMzIzMTM2MmUzMjM0MzYyZTMxMzMyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY9g0wDQYJKoZIhvcNAQELBQADggEB
ANKeIfQgmd7jGLT2Bj3+gTpBL9eCI28NzM+qx3ZUUtyW46NS70QrIUCLJ/896nqR
mRLGbr/oKTfjtQUgZXWSpRavmo92vPvvt4TO1mqcBPIokzhVGqbpaEWovmugDzfF
uRr4NHSnBe185NeTJP8qEad0AHs37i6VehxSutFmoBAo5P9at1ac0bzYsgcUyOG2
dHF1sCZTxjzFRcEx5Ue3pXg/lQ8/p2Iqra1RO0VgQb1cHEcc75rWr4WBC+6IDdHn
DEVKF2wJGsK/WE6WLtXHoexYsFKvSmA2dr6jt/jPNMxB/HX0lKAPL/Nx/EogX5M2
nbSisTbByufslK9iBBbMmu0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org