Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e33322e36312e302f32342d3234203d3e2033353933.roa
File: 35302e33322e36312e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier: LbSqV9G9yUYg3Bi4wEbndD0dpbPsl+CfiLXAPoQxw8Y=
Subject key identifier: 5F:B6:FE:45:A3:D0:7F:07:8B:65:BD:53:3E:9B:D5:8B:4F:DF:81:8A
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 726167C07E5D93E10B48A9268819653E4EC72677
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e33322e36312e302f32342d3234203d3e2033353933.roa
Signing time: Tue 15 Aug 2023 03:56:58 +0000
ROA not before: Tue 15 Aug 2023 03:51:58 +0000
ROA not after: Tue 13 Aug 2024 03:56:58 +0000
asID: 3593
IP address blocks: 50.32.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:61:67:c0:7e:5d:93:e1:0b:48:a9:26:88:19:65:3e:4e:c7:26:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Aug 15 03:51:58 2023 GMT
Not After : Aug 13 03:56:58 2024 GMT
Subject: CN=5FB6FE45A3D07F078B65BD533E9BD58B4FDF818A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:01:ec:bf:e8:09:06:c8:23:2e:6d:3e:1d:
80:a1:49:70:4b:03:e3:c9:5c:be:a5:a9:6a:cd:33:
99:51:19:aa:f3:0d:4c:80:33:c3:5d:dc:37:43:58:
12:a5:ce:c4:87:27:07:ec:e1:d5:d3:42:f0:8a:ea:
d8:45:fc:98:26:4d:0c:ea:4f:7e:8d:e8:cf:a7:50:
1b:b0:7b:4b:45:b1:dc:21:2e:2b:a4:1c:c3:4a:f3:
4f:19:14:4b:79:9f:e3:ef:99:5c:2f:d2:02:dd:23:
22:be:ec:cc:5f:a7:de:04:2a:09:43:d4:16:bf:a6:
39:bb:f8:bb:9b:fd:95:bc:ee:e9:35:b6:1d:d9:71:
81:15:e0:96:a3:92:5b:19:e9:5d:07:15:44:98:0a:
62:cd:9d:41:29:77:0c:27:84:54:9c:4d:44:05:d0:
b1:29:ac:96:c6:bf:e9:42:8b:bd:4b:b9:84:b1:f6:
ee:79:42:25:3b:32:bc:91:71:07:d1:54:ab:25:6c:
c0:cc:2d:44:06:ed:ef:4c:e8:ae:82:50:ab:58:a4:
cb:03:a3:50:80:90:1f:c1:2f:b0:0a:58:e2:ab:d2:
74:c7:ce:0e:77:ff:e2:ac:22:66:18:a5:4e:5a:6c:
b5:4e:e8:40:2f:c0:d8:86:ea:ca:01:81:be:46:01:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B6:FE:45:A3:D0:7F:07:8B:65:BD:53:3E:9B:D5:8B:4F:DF:81:8A
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e33322e36312e302f32342d3234203d3e2033353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.32.61.0/24
Signature Algorithm: sha256WithRSAEncryption
be:17:c3:e6:7b:4b:6c:9a:9e:a9:72:83:26:9f:46:fd:97:dc:
76:ac:43:ed:6c:59:e6:d5:a5:71:13:c0:51:8c:8c:cc:7b:4c:
0a:66:04:ee:89:2c:98:b4:b2:b0:ac:4c:d4:3c:93:01:29:66:
5a:79:eb:6e:22:c0:58:dd:c4:4e:f9:ea:c7:28:d5:aa:1b:4d:
ac:1b:4f:08:f0:53:3d:06:29:41:65:cc:2d:c7:84:95:de:d6:
f9:8f:2c:e6:c6:0e:b5:80:fe:e1:57:d1:66:01:48:dd:f2:2d:
37:df:53:d0:16:48:3d:51:9f:12:c7:95:37:0f:f1:ae:8d:70:
c5:59:f3:29:53:b8:3e:72:65:f7:7d:ba:ee:03:ec:f4:63:d2:
eb:2b:48:09:6a:b7:f3:6e:80:56:44:46:dc:09:12:af:0b:5e:
70:16:76:5b:57:91:a8:ad:ab:58:c1:74:4c:b4:6c:a9:17:39:
0d:83:93:72:93:63:25:89:6b:c8:0e:a0:72:d5:ab:f6:09:7e:
f1:4c:67:ed:a0:f8:f2:63:5a:0d:f1:2b:a2:80:71:cb:35:63:
27:ba:e6:12:86:46:0f:dd:1f:5a:96:a2:bc:7d:2e:ca:9c:0d:
51:7c:c9:a0:40:c0:8e:88:b4:4a:9e:5a:96:82:e2:ee:39:cb:
84:84:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:24:44 2025 by rpki-client