Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3233362e302f32342d3234203d3e203239383032.roa
File: 36362e3232352e3233362e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: 795c/H9R9z7tSWHNXVGW+9F72wVp7RfNp/S1pHUN4Po=
Subject key identifier: 0B:32:73:F1:75:FC:15:77:04:4E:C8:34:68:29:43:58:6A:8C:B0:D0
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 3950DE1F00DFA49F48814B9543C8B3078DF88236
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3233362e302f32342d3234203d3e203239383032.roa
Signing time: Wed 03 May 2023 07:41:43 +0000
ROA not before: Wed 03 May 2023 07:36:43 +0000
ROA not after: Wed 01 May 2024 07:41:43 +0000
asID: 29802
IP address blocks: 66.225.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:50:de:1f:00:df:a4:9f:48:81:4b:95:43:c8:b3:07:8d:f8:82:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 3 07:36:43 2023 GMT
Not After : May 1 07:41:43 2024 GMT
Subject: CN=0B3273F175FC1577044EC834682943586A8CB0D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:c1:61:4b:2e:46:17:36:24:19:d5:c2:3b:
be:0d:24:ae:46:0a:4d:96:ea:5b:0c:a0:5f:7f:9c:
80:96:89:3f:38:b1:31:d3:c1:6c:8e:ac:36:43:af:
8e:ec:b1:b7:7b:4b:0d:2f:f7:f3:65:0b:c6:f7:b4:
80:61:be:b3:a4:56:0e:50:f1:8e:ae:dd:64:8e:da:
50:3a:d6:b6:28:b0:5b:5c:06:7e:2b:88:40:ca:7f:
de:ec:20:b1:2b:e0:25:7f:d5:8f:52:b2:ec:d8:03:
69:ab:d1:e9:46:8c:24:2c:08:24:18:db:28:34:1c:
ae:ea:ad:2b:22:2a:5e:8d:c8:62:ec:3b:d0:f9:0d:
c6:d9:d9:a5:f2:ca:f2:79:61:ba:94:c4:d7:6e:bd:
2d:46:29:30:88:3f:54:9f:54:d2:ae:f4:8e:76:fc:
d9:9f:5c:45:50:d6:4d:b5:9b:a2:c8:cc:78:43:67:
a6:98:f6:b9:5a:ec:46:f7:5d:db:d9:4c:aa:ab:f7:
ba:5e:08:a6:2c:94:d5:24:9c:91:04:99:5f:2c:6d:
d0:a6:83:18:e9:37:54:04:fd:04:2e:f2:9f:39:78:
41:b7:08:70:be:82:63:30:79:d8:0f:93:a6:f7:09:
d2:8e:d8:bf:e3:81:f6:69:18:ba:a0:79:1a:fa:1a:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:73:F1:75:FC:15:77:04:4E:C8:34:68:29:43:58:6A:8C:B0:D0
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3233362e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2d:58:c1:34:f9:cc:9d:09:5c:c3:68:a4:40:ef:6c:ab:e2:
f8:bf:12:b5:8a:9f:27:f2:fb:e6:9a:f1:8e:0c:64:7f:36:f0:
ca:4e:d9:9f:8e:ac:b9:37:33:66:93:20:e8:6f:ce:da:2a:d3:
74:ee:14:d4:65:35:ae:27:39:39:6c:2c:96:6b:6a:dc:d4:12:
5a:b6:db:e9:eb:85:90:e7:37:1c:d4:06:3e:1f:3c:b7:f9:64:
c6:10:ad:ef:e1:e6:6a:99:8e:0b:0e:ba:69:26:6b:8f:d8:3a:
53:17:e9:bf:91:2b:d1:91:9d:17:cb:db:af:da:cf:e5:c5:0c:
92:52:31:c6:be:53:4d:98:42:99:6c:e4:ae:25:b6:3c:a3:a3:
82:3a:5a:70:be:c9:ee:96:dd:b5:fe:4b:ed:8f:7c:f2:7d:11:
e4:eb:71:0b:ac:1b:e0:23:c1:38:b6:1a:de:f0:dd:b9:f7:d9:
21:04:2e:97:68:bc:a9:b2:1b:02:05:82:1e:17:0b:bd:0b:65:
39:97:b4:1c:ed:dd:78:df:52:f3:6a:d5:32:be:f3:e8:ab:35:
cd:e3:27:05:d1:de:15:f2:c6:4f:43:1a:22:4c:55:73:f7:ea:
2b:bf:0d:8e:91:50:56:00:54:25:a7:86:47:23:e9:a7:8f:9c:
bd:22:dc:f7
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUOVDeHwDfpJ9IgUuVQ8izB434gjYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTAzMDczNjQzWhcNMjQwNTAxMDc0MTQz
WjAzMTEwLwYDVQQDEygwQjMyNzNGMTc1RkMxNTc3MDQ0RUM4MzQ2ODI5NDM1ODZB
OENCMEQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJnBYUsuRhc2
JBnVwju+DSSuRgpNlupbDKBff5yAlok/OLEx08Fsjqw2Q6+O7LG3e0sNL/fzZQvG
97SAYb6zpFYOUPGOrt1kjtpQOta2KLBbXAZ+K4hAyn/e7CCxK+Alf9WPUrLs2ANp
q9HpRowkLAgkGNsoNByu6q0rIipejchi7DvQ+Q3G2dml8sryeWG6lMTXbr0tRikw
iD9Un1TSrvSOdvzZn1xFUNZNtZuiyMx4Q2emmPa5WuxG913b2Uyqq/e6XgimLJTV
JJyRBJlfLG3QpoMY6TdUBP0ELvKfOXhBtwhwvoJjMHnYD5Om9wnSjti/44H2aRi6
oHka+hpMRwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAsyc/F1/BV3BE7INGgpQ1hq
jLDQMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzM2MzYyZTMyMzIzNTJlMzIzMzM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAELh7DANBgkqhkiG9w0BAQsF
AAOCAQEANS1YwTT5zJ0JXMNopEDvbKvi+L8StYqfJ/L75prxjgxkfzbwyk7Zn46s
uTczZpMg6G/O2irTdO4U1GU1ric5OWwslmtq3NQSWrbb6euFkOc3HNQGPh88t/lk
xhCt7+HmapmOCw66aSZrj9g6Uxfpv5Er0ZGdF8vbr9rP5cUMklIxxr5TTZhCmWzk
riW2PKOjgjpacL7J7pbdtf5L7Y988n0R5OtxC6wb4CPBOLYa3vDduffZIQQul2i8
qbIbAgWCHhcLvQtlOZe0HO3deN9S82rVMr7z6Ks1zeMnBdHeFfLGT0MaIkxVc/fq
K78NjpFQVgBUJaeGRyPpp4+cvSLc9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org