Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31372e302f32342d3234203d3e20323034383433.roa
File: 3231362e3234362e31372e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: 7FoABrUnGStk9AJOV2W74iV0p/gz0oB5TCe5Fd9WHJc=
Subject key identifier: 48:5B:99:FA:72:62:1C:DB:8B:49:FD:F4:50:B0:94:96:AD:38:46:38
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 30EAB917F1B32787E1901DAACB72494283406621
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31372e302f32342d3234203d3e20323034383433.roa
Signing time: Sat 13 May 2023 16:18:29 +0000
ROA not before: Sat 13 May 2023 16:13:29 +0000
ROA not after: Sat 11 May 2024 16:18:29 +0000
asID: 204843
IP address blocks: 216.246.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ea:b9:17:f1:b3:27:87:e1:90:1d:aa:cb:72:49:42:83:40:66:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 13 16:13:29 2023 GMT
Not After : May 11 16:18:29 2024 GMT
Subject: CN=485B99FA72621CDB8B49FDF450B09496AD384638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:e5:5c:e2:a0:b7:10:a4:9f:ea:13:9a:0d:
dc:70:a7:73:42:99:6a:aa:ba:41:33:fb:b0:89:52:
d3:45:4e:19:41:df:cf:a2:f5:9c:e3:e0:ea:ff:5b:
21:b7:a4:f2:ed:d8:8f:56:4e:d3:38:21:77:5e:52:
36:ff:5e:1e:25:8a:7c:5f:9d:ae:3c:11:e1:00:84:
85:dc:0a:98:1e:bc:e4:9e:6d:c3:16:9b:f9:9b:11:
06:06:65:50:a5:c5:a0:a3:c3:5b:68:f8:50:c9:ab:
52:38:dd:e8:91:11:63:af:dc:d2:a5:60:20:7a:80:
5e:ae:c7:47:14:21:68:a9:1e:0b:c9:bb:b7:4b:60:
23:23:89:28:d0:51:de:b0:21:f9:10:84:cc:67:a5:
c6:fb:d2:d2:83:83:34:c5:f6:7e:c1:c1:13:43:04:
a5:a3:62:3f:8d:75:4f:2e:91:55:09:a7:19:3c:8e:
5e:42:9e:63:1b:28:22:c7:35:9e:83:93:71:3b:b8:
82:6b:fc:23:92:ea:38:58:35:83:17:8b:14:62:a4:
fe:75:4c:3c:d6:03:a2:18:cb:4e:4a:37:fe:64:2e:
50:4b:f3:e5:f7:bb:3f:92:b9:b7:0e:ad:24:1e:27:
11:32:e8:b9:1f:c1:6e:af:07:67:1f:3b:b3:27:21:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5B:99:FA:72:62:1C:DB:8B:49:FD:F4:50:B0:94:96:AD:38:46:38
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e31372e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.246.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ce:84:8f:1d:f6:bc:54:42:d8:35:b9:85:8a:f1:29:87:56:
e5:4a:a9:ed:52:7a:45:35:d3:b1:df:9b:20:42:d0:56:ba:c2:
be:75:21:41:d2:5a:44:0e:cb:01:ac:4a:90:a1:f0:d2:82:db:
82:35:84:f7:fc:85:ba:21:56:fd:25:12:2d:4f:9d:01:3a:ff:
06:a5:e5:5a:2e:41:93:5d:02:6d:d3:af:70:ce:21:a0:da:09:
a7:75:56:a0:32:3b:5b:9d:a0:f5:e9:89:ef:b2:18:f9:62:10:
18:cf:a4:5c:16:0a:80:9c:a4:4e:73:87:73:45:0e:8c:c0:e1:
53:30:1b:c5:28:9a:16:5b:e6:dd:af:7f:18:8b:36:9a:e9:6d:
06:38:de:65:f3:9d:b5:f0:d7:a9:46:d9:46:c5:12:de:89:b1:
18:be:8a:61:64:cb:f8:56:1e:0f:bd:c0:69:0d:86:c6:09:38:
f5:93:38:2f:31:d8:47:b3:63:cd:03:f2:21:a5:10:fd:45:f2:
40:be:4f:1c:78:d4:62:29:b5:27:0b:53:0e:7c:34:d9:7c:02:
ed:29:8b:8b:65:44:9d:57:ca:27:76:fe:63:38:37:28:cb:19:
49:80:38:c8:80:05:3c:3e:84:e8:64:54:57:ea:08:cb:fe:f3:
d8:8b:7d:91
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUMOq5F/GzJ4fhkB2qy3JJQoNAZiEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTEzMTYxMzI5WhcNMjQwNTExMTYxODI5
WjAzMTEwLwYDVQQDEyg0ODVCOTlGQTcyNjIxQ0RCOEI0OUZERjQ1MEIwOTQ5NkFE
Mzg0NjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+zlXOKgtxCk
n+oTmg3ccKdzQplqqrpBM/uwiVLTRU4ZQd/PovWc4+Dq/1sht6Ty7diPVk7TOCF3
XlI2/14eJYp8X52uPBHhAISF3AqYHrzknm3DFpv5mxEGBmVQpcWgo8NbaPhQyatS
ON3okRFjr9zSpWAgeoBersdHFCFoqR4Lybu3S2AjI4ko0FHesCH5EITMZ6XG+9LS
g4M0xfZ+wcETQwSlo2I/jXVPLpFVCacZPI5eQp5jGygixzWeg5NxO7iCa/wjkuo4
WDWDF4sUYqT+dUw81gOiGMtOSjf+ZC5QS/Pl97s/krm3Dq0kHicRMui5H8Furwdn
HzuzJyHPfwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFEhbmfpyYhzbi0n99FCwlJat
OEY4MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzMTM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDM0MzgzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PYRMA0GCSqGSIb3DQEB
CwUAA4IBAQAPzoSPHfa8VELYNbmFivEph1blSqntUnpFNdOx35sgQtBWusK+dSFB
0lpEDssBrEqQofDSgtuCNYT3/IW6IVb9JRItT50BOv8GpeVaLkGTXQJt069wziGg
2gmndVagMjtbnaD16Ynvshj5YhAYz6RcFgqAnKROc4dzRQ6MwOFTMBvFKJoWW+bd
r38Yizaa6W0GON5l85218NepRtlGxRLeibEYvophZMv4Vh4PvcBpDYbGCTj1kzgv
MdhHs2PNA/IhpRD9RfJAvk8ceNRiKbUnC1MOfDTZfALtKYuLZUSdV8ondv5jODco
yxlJgDjIgAU8PoToZFRX6gjL/vPYi32R
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org