Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e33392e33332e302f32342d3234203d3e2035363530.roa
File: 37342e33392e33332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: CYiAlhziK8BMg7s6UPzHkw6IN2LBgcx6BFl++juayaI=
Subject key identifier: 1D:03:C3:CA:06:2A:FE:4A:2B:37:E7:AA:4A:51:6C:80:48:00:8F:0F
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 09931D425226CFE1CAEE64A7D17F269757B57F9F
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e33392e33332e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:35:14 +0000
ROA not before: Thu 02 Nov 2023 11:30:14 +0000
ROA not after: Thu 31 Oct 2024 11:35:14 +0000
asID: 5650
IP address blocks: 74.39.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:93:1d:42:52:26:cf:e1:ca:ee:64:a7:d1:7f:26:97:57:b5:7f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Nov 2 11:30:14 2023 GMT
Not After : Oct 31 11:35:14 2024 GMT
Subject: CN=1D03C3CA062AFE4A2B37E7AA4A516C8048008F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:f0:ed:b5:26:3c:2a:3a:1c:1c:c9:d7:d6:
f6:db:2a:46:19:ca:41:9c:d6:5b:1c:d5:0b:30:e7:
8f:a6:90:c2:b0:90:70:da:b9:28:99:43:0e:96:97:
ac:c5:a6:59:90:8e:d7:d4:78:2d:bd:d1:0f:70:d9:
0f:11:53:5a:77:9c:89:69:dc:f1:3f:6c:e2:3b:7b:
0a:fa:48:dd:f7:bb:35:fc:cb:b0:66:52:80:b2:6f:
fb:7b:8a:8a:5a:2d:67:19:9b:60:cd:77:d6:00:8e:
91:1f:02:4c:b8:d0:8a:76:bc:00:08:28:56:5e:d5:
37:a9:00:b2:50:4d:0d:fc:61:6b:1a:32:ed:be:13:
f9:57:c4:f0:9f:ff:dd:76:f4:e6:1a:15:33:09:fa:
5e:80:94:90:54:ab:d2:71:cd:e8:83:cd:9f:ed:ad:
9d:f7:51:b8:38:c7:af:d5:fb:0d:a7:2d:d2:b0:74:
04:ad:b9:21:ed:ab:72:cc:db:53:87:81:34:cd:c2:
c9:4a:a0:a7:d5:c9:aa:13:ec:7d:c1:bb:67:09:d4:
70:44:4f:9c:6c:fb:62:9d:0f:5c:26:62:73:85:c7:
1d:87:b8:d2:93:e9:42:d8:f4:ff:e2:61:d5:65:82:
02:14:90:70:96:54:e2:fc:cb:41:3e:8b:19:62:e2:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:C3:CA:06:2A:FE:4A:2B:37:E7:AA:4A:51:6C:80:48:00:8F:0F
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e33392e33332e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.39.33.0/24
Signature Algorithm: sha256WithRSAEncryption
43:06:7d:46:d8:1e:91:8c:58:43:55:19:ce:f2:bc:c5:dd:be:
5f:2f:5c:f8:df:05:6e:1f:c6:f9:c4:21:35:9a:6f:1c:b6:15:
0e:46:f0:f0:ce:45:cc:12:b2:ff:0b:d5:5a:87:8a:f6:0d:9a:
4e:c6:f1:5e:bc:bc:3b:b4:96:c6:4b:d3:1e:f4:36:a8:67:50:
60:8d:27:0b:40:fc:e9:15:a4:bc:cc:86:fa:4d:03:a8:f6:87:
53:f0:a1:7b:d6:de:b5:5e:96:40:1f:8e:ac:c5:12:2b:89:9d:
90:80:67:aa:2e:71:43:b4:08:ae:4d:ca:32:f6:c3:ae:ea:9f:
a9:25:1c:9f:50:d8:32:4c:48:a8:1e:d2:75:82:e4:5e:cd:bb:
ee:12:b8:90:2d:2e:ab:c5:9a:4b:76:d4:6b:c8:db:52:ff:e2:
b8:43:b1:a7:b0:25:b3:d9:95:38:e8:67:6f:f6:83:2f:d9:be:
d5:ac:57:a2:3a:35:1f:65:e7:27:0d:4b:ef:f9:b8:ef:8e:ce:
60:30:86:24:7f:47:e7:ae:74:a5:55:59:3a:44:4a:77:c2:31:
11:cc:4b:67:fe:40:2e:39:ae:be:6d:6f:2f:10:49:08:56:6c:
82:36:c5:32:87:06:53:b8:bf:0e:7f:87:8c:ca:9c:e2:b1:69:
be:fd:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:51:43 2025 by rpki-client