Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a6666303a3a2f34382d3438203d3e203237343938.roa
File: 323630323a663836353a6666303a3a2f34382d3438203d3e203237343938.roa (raw, json)
Hash identifier: 99hMgWxsknNIvccYIn5QdUdxe1HqjtVLBmRVwGtNKB0=
Subject key identifier: 25:00:FE:40:42:B6:7D:29:56:C4:D6:C1:10:01:69:56:63:9B:99:5F
Certificate issuer: /CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Certificate serial: 68E61F806B9116AB3356BE9CDEA7890FB002CA57
Authority key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a6666303a3a2f34382d3438203d3e203237343938.roa
Signing time: Sat 16 Nov 2024 20:58:40 +0000
ROA not before: Sat 16 Nov 2024 20:53:40 +0000
ROA not after: Sat 15 Nov 2025 20:58:40 +0000
asID: 27498
IP address blocks: 2602:f865:ff0::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e6:1f:80:6b:91:16:ab:33:56:be:9c:de:a7:89:0f:b0:02:ca:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Validity
Not Before: Nov 16 20:53:40 2024 GMT
Not After : Nov 15 20:58:40 2025 GMT
Subject: CN=2500FE4042B67D2956C4D6C110016956639B995F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:26:7d:a5:1e:48:b6:77:17:ed:13:a1:39:
ad:32:e5:05:1c:4f:56:47:e4:c6:a1:9d:c0:04:35:
ec:3d:12:9a:32:b2:52:d0:40:df:c1:b9:14:dc:04:
27:c3:22:60:e0:cb:71:96:ea:72:55:3d:90:14:08:
02:a5:39:37:fa:4f:9e:e0:d8:e8:dd:c7:c4:0f:ce:
d8:d9:ed:1a:8e:71:90:9d:eb:db:36:50:ed:a6:96:
2b:19:1e:77:d0:f7:c0:2f:a5:4c:37:62:9f:88:2d:
d7:da:9f:5f:25:be:6b:4a:5f:92:fe:95:f3:30:49:
b7:ce:fc:e9:3f:98:8a:58:17:7d:38:fe:3c:29:37:
2a:5a:b3:55:ce:5f:2b:ed:f0:33:75:cd:03:f6:6c:
20:28:77:bd:2f:df:5b:7f:a8:e8:a9:46:7f:61:39:
67:40:2a:d5:07:f7:1d:d8:7b:57:57:da:7c:a3:4b:
d7:e0:b5:0f:86:59:84:15:81:47:0c:6a:43:69:53:
bb:3c:e1:41:70:9c:c8:39:34:57:c9:4a:03:89:b8:
cf:1c:d8:7a:4b:d0:76:f7:0e:c3:44:dd:40:92:39:
6f:fe:31:c2:ff:f8:87:c3:e7:6f:3a:12:dd:3a:89:
db:fd:41:ae:6b:07:d6:5e:a0:a4:ff:53:35:28:d2:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:00:FE:40:42:B6:7D:29:56:C4:D6:C1:10:01:69:56:63:9B:99:5F
X509v3 Authority Key Identifier:
keyid:59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a6666303a3a2f34382d3438203d3e203237343938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f865:ff0::/48
Signature Algorithm: sha256WithRSAEncryption
5d:bc:7e:0f:a7:12:eb:cc:a9:ec:45:ac:8b:e7:97:3b:f3:3e:
ca:54:ce:ad:38:c1:a6:f3:24:06:d9:36:51:10:d0:d7:ef:f7:
87:65:cc:b3:a2:1c:18:44:c4:99:86:dc:06:15:94:c3:1b:08:
09:20:01:5c:76:e1:a3:9f:97:08:40:8f:64:6f:8b:1f:3e:ba:
6e:db:41:e2:36:7e:c9:a5:e0:e2:ba:e6:4c:77:d7:9c:72:bd:
1e:7a:63:7a:75:52:6e:86:1c:32:c5:b4:73:0e:6a:a7:f6:77:
8e:19:ec:1c:94:3b:e8:99:45:4c:49:21:3e:1c:19:86:7c:f5:
29:19:16:c1:96:44:85:21:6c:d0:81:22:50:bd:23:5c:f0:60:
a6:92:b4:87:1b:99:3f:e5:25:b3:35:de:a6:44:08:83:54:a9:
43:06:63:06:cb:e8:d3:99:d1:01:d1:d5:1e:b1:e6:ef:2c:b7:
d7:b5:bc:78:66:76:2f:e9:d6:d0:38:ca:25:d8:d1:d6:90:44:
dd:33:46:7b:3a:23:54:e3:e9:10:00:fc:f8:ff:22:9a:2f:0c:
cc:6f:a9:8c:9d:14:bb:74:52:c6:72:cb:3b:45:5b:21:e7:cc:
21:00:e8:33:b2:ad:9d:b1:e2:39:30:06:ce:eb:d2:3c:9b:7d:
e3:1c:39:6a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUaOYfgGuRFqszVr6c3qeJD7ACylcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTgyMzhlYTBkNWVkNTliODQ1MDcwNDBiODBmYjNiYTdm
OWViYmRhNWZlMDVhZjE2NzIwHhcNMjQxMTE2MjA1MzQwWhcNMjUxMTE1MjA1ODQw
WjAzMTEwLwYDVQQDEygyNTAwRkU0MDQyQjY3RDI5NTZDNEQ2QzExMDAxNjk1NjYz
OUI5OTVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMImfaUeSLZ3
F+0ToTmtMuUFHE9WR+TGoZ3ABDXsPRKaMrJS0EDfwbkU3AQnwyJg4MtxlupyVT2Q
FAgCpTk3+k+e4Njo3cfED87Y2e0ajnGQnevbNlDtppYrGR530PfAL6VMN2KfiC3X
2p9fJb5rSl+S/pXzMEm3zvzpP5iKWBd9OP48KTcqWrNVzl8r7fAzdc0D9mwgKHe9
L99bf6joqUZ/YTlnQCrVB/cd2HtXV9p8o0vX4LUPhlmEFYFHDGpDaVO7POFBcJzI
OTRXyUoDibjPHNh6S9B29w7DRN1Akjlv/jHC//iHw+dvOhLdOonb/UGuawfWXqCk
/1M1KNI2AwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFCUA/kBCtn0pVsTWwRABaVZj
m5lfMB8GA1UdIwQYMBaAFFlkNHyvyYTGIRI8L15PQjc8YID6MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyODg0NjJjMzgwNGU2LzAv
NTk2NDM0N0NBRkM5ODRDNjIxMTIzQzJGNUU0RjQyMzczQzYwODBGQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkL2YwY2Y5ODZhLTJlYzktNGFhMi05ZTYxLTQzYTBlZmM0ZjJlYS9lODIz
OGVhMGQ1ZWQ1OWI4NDUwNzA0MGI4MGZiM2JhN2Y5ZWJiZGE1ZmUwNWFmMTY3Mi5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjg4
NDYyYzM4MDRlNi8wLzMyMzYzMDMyM2E2NjM4MzYzNTNhNjY2NjMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzNzM0MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+GUP8DANBgkq
hkiG9w0BAQsFAAOCAQEAXbx+D6cS68yp7EWsi+eXO/M+ylTOrTjBpvMkBtk2URDQ
1+/3h2XMs6IcGETEmYbcBhWUwxsICSABXHbho5+XCECPZG+LHz66bttB4jZ+yaXg
4rrmTHfXnHK9HnpjenVSboYcMsW0cw5qp/Z3jhnsHJQ76JlFTEkhPhwZhnz1KRkW
wZZEhSFs0IEiUL0jXPBgppK0hxuZP+UlszXepkQIg1SpQwZjBsvo05nRAdHVHrHm
7yy317W8eGZ2L+nW0DjKJdjR1pBE3TNGezojVOPpEAD8+P8imi8MzG+pjJ0Uu3RS
xnLLO0VbIefMIQDoM7KtnbHiOTAGzuvSPJt94xw5ag==
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:13:46 2025 by rpki-client