Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e31392e302f32342d3234203d3e2033353933.roa
File: 37342e34332e31392e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier: O3DwqWqSmoQ9b98OdyIMw7FGZzoJTRo4rOgLKTkFTVU=
Subject key identifier: EA:76:36:22:B7:D1:78:9B:06:FB:FC:CD:9C:FD:2F:AA:88:5E:28:FA
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 284CA402DBE5CC71F561B0A19DA638179D30C17F
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e31392e302f32342d3234203d3e2033353933.roa
Signing time: Thu 26 Oct 2023 04:24:33 +0000
ROA not before: Thu 26 Oct 2023 04:19:33 +0000
ROA not after: Thu 24 Oct 2024 04:24:33 +0000
asID: 3593
IP address blocks: 74.43.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4c:a4:02:db:e5:cc:71:f5:61:b0:a1:9d:a6:38:17:9d:30:c1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Oct 26 04:19:33 2023 GMT
Not After : Oct 24 04:24:33 2024 GMT
Subject: CN=EA763622B7D1789B06FBFCCD9CFD2FAA885E28FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:51:df:64:1e:b9:2d:0f:74:48:9b:8b:6f:
1a:82:bf:65:cd:78:49:e6:f6:6e:e4:4a:02:af:73:
12:76:21:73:3c:46:2e:a3:38:8d:84:aa:bb:ba:6d:
af:68:52:37:a4:88:48:c5:36:5b:f0:00:c5:7c:c3:
2f:cd:5d:6f:ae:6b:65:41:b6:a4:ed:81:d0:f2:97:
50:57:5f:29:18:21:d8:25:24:e6:dd:d5:d9:c5:92:
6e:e0:3d:0e:de:4a:19:0a:25:d9:72:ec:1a:d9:40:
00:b5:df:22:af:3e:fb:28:ab:99:84:84:ea:3c:a2:
7e:a5:db:48:d2:c2:5b:23:83:87:16:9f:d7:8b:38:
99:e6:b5:f0:61:16:f3:64:76:7d:95:cb:0c:e7:00:
b2:5d:23:18:de:fe:2a:2d:49:cf:a3:a5:d5:69:ea:
37:9a:f8:91:a9:d0:6d:dd:2a:a4:c2:f3:2b:70:36:
22:ce:76:e9:21:16:24:3d:72:07:1a:6a:4a:03:b6:
f6:25:89:37:ae:89:e1:0b:ef:dc:2b:a3:74:8d:ce:
28:54:89:c4:b9:ea:34:bb:81:7d:50:ef:2b:1c:82:
68:e2:d4:21:d6:57:78:b4:3c:51:94:cf:65:3b:0c:
71:d6:1e:43:23:63:49:1b:84:ce:f1:d0:56:77:d8:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:36:22:B7:D1:78:9B:06:FB:FC:CD:9C:FD:2F:AA:88:5E:28:FA
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e31392e302f32342d3234203d3e2033353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.43.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:df:48:2d:e7:86:77:e3:cb:ed:79:5b:e0:d9:d8:a1:d2:3f:
fc:12:35:57:36:48:ad:fb:b1:d8:da:b7:a4:e9:ea:ed:d1:19:
c2:2b:44:e6:f4:79:12:f8:8c:1f:15:7c:23:7a:b1:20:52:2a:
8e:fd:fa:42:82:ef:3a:87:1d:1d:99:ac:56:45:dc:e5:67:2c:
df:d8:f5:96:4b:b8:1f:85:71:12:50:69:a8:54:1d:f4:f8:a7:
d6:dc:e0:dd:39:4c:b6:14:39:8c:49:c0:9c:3b:d9:0c:19:2e:
0f:e2:b3:84:a0:cd:4e:b4:5b:8b:ec:63:9e:31:af:c5:9c:06:
87:f6:13:f3:d4:13:1b:89:97:3b:e8:99:f4:0c:e6:50:04:50:
d0:49:a4:7a:3c:fd:4a:e5:59:91:cc:13:5c:23:af:99:7b:c3:
dc:b0:c5:0f:32:b0:d1:11:74:53:aa:58:37:70:88:fa:cb:7d:
80:05:d1:72:e2:f8:b4:14:29:b2:8a:29:bd:36:d7:fe:59:32:
53:85:99:fd:06:51:79:77:79:d2:30:ac:7a:eb:b9:3b:b8:33:
6e:a1:55:5d:b6:c4:7c:17:cf:c7:28:b3:e9:ae:89:e9:56:34:
4f:91:d7:64:15:09:83:55:6f:9b:23:1d:c6:93:4e:5b:04:9b:
0e:f7:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:18:00 2025 by rpki-client