Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232362e302f32332d3233203d3e20323131353835.roa
File: 36362e3232352e3232362e302f32332d3233203d3e20323131353835.roa (raw, json)
Hash identifier: 8FGxVfAASgd3yQVIQ5ysHOI6RBgMS/FROslAcpQUhi4=
Subject key identifier: EE:53:F8:E9:38:C9:07:A0:92:D7:AB:66:F0:F7:BD:ED:E9:C5:FE:D6
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 209AC023FA780C058FBFD739534B6B6B3E87A60C
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232362e302f32332d3233203d3e20323131353835.roa
Signing time: Sun 07 May 2023 17:27:09 +0000
ROA not before: Sun 07 May 2023 17:22:09 +0000
ROA not after: Sun 05 May 2024 17:27:09 +0000
asID: 211585
IP address blocks: 66.225.226.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9a:c0:23:fa:78:0c:05:8f:bf:d7:39:53:4b:6b:6b:3e:87:a6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 7 17:22:09 2023 GMT
Not After : May 5 17:27:09 2024 GMT
Subject: CN=EE53F8E938C907A092D7AB66F0F7BDEDE9C5FED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:59:1a:c8:b3:e9:a9:3b:96:76:65:41:6e:
66:ef:b6:fc:eb:37:50:d1:e8:44:88:ca:ed:e7:fc:
a7:08:82:fb:f0:c1:0e:84:5b:18:ad:95:a8:dd:50:
2a:04:11:b5:71:b2:a3:7c:a8:80:c5:20:45:49:a3:
ef:93:5a:b5:75:7a:a7:d8:a1:4f:46:44:78:68:19:
96:cc:4c:1c:79:a2:31:ee:e1:8a:af:27:e3:fc:00:
e3:e1:d8:88:d6:4d:6e:02:30:b2:75:d1:06:b7:25:
10:76:cf:55:7d:cc:ee:75:4b:d8:78:ff:8e:9f:1a:
d8:fe:d6:6f:a5:08:f2:1b:52:fc:38:0c:14:e4:89:
da:ab:7b:b0:09:a7:33:5f:b4:d7:c0:18:a3:ec:a6:
ff:a6:b4:d7:e7:53:a1:5c:84:58:0c:32:e1:9a:9f:
66:8a:3e:75:a8:53:e2:55:db:d7:d7:76:e0:df:04:
ae:45:32:26:8c:5a:18:6a:25:d1:45:b0:f7:31:d0:
4f:72:2f:c0:6b:62:3b:fe:f7:f2:9a:8e:48:a9:52:
b9:9c:f8:ae:6b:b7:10:bd:21:5e:ca:bc:ac:9d:de:
fe:c4:bf:39:68:84:a4:ff:e2:e7:1a:4f:0e:13:dd:
83:49:cb:e4:4e:7e:d2:a3:17:01:df:4e:12:00:04:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:53:F8:E9:38:C9:07:A0:92:D7:AB:66:F0:F7:BD:ED:E9:C5:FE:D6
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232362e302f32332d3233203d3e20323131353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.226.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:f6:b1:0d:26:25:8a:53:2a:40:89:13:37:12:6d:20:5a:c4:
eb:f1:ab:d9:26:6e:eb:99:ca:23:d8:71:68:5c:db:be:67:dc:
f9:e0:08:f2:50:29:5d:59:25:ad:70:8a:8b:48:c8:fc:1d:ad:
6b:45:68:55:8c:86:53:b0:5c:9c:e4:83:04:de:0e:05:b0:fc:
bb:4d:3b:9a:90:ec:06:99:91:39:27:d3:a1:30:f0:91:fe:49:
b7:4f:17:dc:17:b4:e7:e3:10:ee:d7:3a:d4:29:f3:a5:af:15:
bd:a2:6e:5c:52:20:58:3f:55:2a:0e:0a:1c:61:98:1b:d8:37:
46:c5:d2:86:94:92:d2:b7:bb:73:96:9a:13:e5:5a:90:6f:3c:
95:fd:9b:d4:ee:cd:a3:ff:01:b0:03:a6:67:8a:ae:1c:ff:67:
c6:01:dc:01:56:98:1c:07:68:ba:fc:43:36:1e:c9:a3:1a:d2:
1c:a7:1f:6d:80:f1:00:54:71:ee:aa:eb:d9:45:01:e3:96:70:
6f:38:0d:16:0e:ac:1c:e9:27:c9:37:d6:73:c7:85:bc:64:00:
8f:51:7f:ca:22:a9:cd:db:99:72:3b:07:9d:e3:68:93:52:57:
9e:42:03:a1:d6:94:2c:ea:ce:1c:2e:5a:a1:19:63:95:8d:6f:
f7:65:68:ed
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUIJrAI/p4DAWPv9c5U0traz6HpgwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTA3MTcyMjA5WhcNMjQwNTA1MTcyNzA5
WjAzMTEwLwYDVQQDEyhFRTUzRjhFOTM4QzkwN0EwOTJEN0FCNjZGMEY3QkRFREU5
QzVGRUQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt61ZGsiz6ak7
lnZlQW5m77b86zdQ0ehEiMrt5/ynCIL78MEOhFsYrZWo3VAqBBG1cbKjfKiAxSBF
SaPvk1q1dXqn2KFPRkR4aBmWzEwceaIx7uGKryfj/ADj4diI1k1uAjCyddEGtyUQ
ds9VfczudUvYeP+OnxrY/tZvpQjyG1L8OAwU5Inaq3uwCaczX7TXwBij7Kb/prTX
51OhXIRYDDLhmp9mij51qFPiVdvX13bg3wSuRTImjFoYaiXRRbD3MdBPci/Aa2I7
/vfymo5IqVK5nPiua7cQvSFeyrysnd7+xL85aISk/+LnGk8OE92DScvkTn7SoxcB
304SAAT/WQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFO5T+Ok4yQegkterZvD3ve3p
xf7WMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzM2MzYyZTMyMzIzNTJlMzIzMjM2MmUzMDJmMzIzMzJkMzIz
MzIwM2QzZTIwMzIzMTMxMzUzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQuHiMA0GCSqGSIb3DQEB
CwUAA4IBAQAc9rENJiWKUypAiRM3Em0gWsTr8avZJm7rmcoj2HFoXNu+Z9z54Ajy
UCldWSWtcIqLSMj8Ha1rRWhVjIZTsFyc5IME3g4FsPy7TTuakOwGmZE5J9OhMPCR
/km3TxfcF7Tn4xDu1zrUKfOlrxW9om5cUiBYP1UqDgocYZgb2DdGxdKGlJLSt7tz
lpoT5VqQbzyV/ZvU7s2j/wGwA6Zniq4c/2fGAdwBVpgcB2i6/EM2HsmjGtIcpx9t
gPEAVHHuquvZRQHjlnBvOA0WDqwc6SfJN9Zzx4W8ZACPUX/KIqnN25lyOwed42iT
UleeQgOh1pQs6s4cLlqhGWOVjW/3ZWjt
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org