Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e20383334.roa
File: 3139322e3130392e3132352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DHbW9+WU26kHg1YzQWrZHeV/srklTqFLiqHN/FrXReU=
Subject key identifier: 1E:AE:91:AD:59:FC:02:60:3B:2D:A6:C2:82:A1:D0:CF:8D:13:1E:39
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 5DA1944D19044069AAC1F73F34C7477C20DC325E
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 May 2024 08:12:26 +0000
ROA not before: Tue 21 May 2024 08:07:26 +0000
ROA not after: Tue 20 May 2025 08:12:26 +0000
asID: 834
IP address blocks: 192.109.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a1:94:4d:19:04:40:69:aa:c1:f7:3f:34:c7:47:7c:20:dc:32:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: May 21 08:07:26 2024 GMT
Not After : May 20 08:12:26 2025 GMT
Subject: CN=1EAE91AD59FC02603B2DA6C282A1D0CF8D131E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:0d:b8:36:e0:57:dd:47:b7:7b:d7:18:fd:
c9:f3:9d:4d:27:10:7b:30:c8:e3:6d:72:e2:2c:e6:
be:91:81:88:05:91:76:63:3c:f3:74:9a:d7:01:bb:
4a:0f:c5:b6:44:69:7d:a1:d1:88:87:b6:ee:25:27:
85:a1:43:63:47:8a:5b:af:d6:86:1a:b0:5b:da:ea:
26:08:8a:80:ca:aa:e7:28:c3:a4:3c:54:18:f3:3a:
4b:13:d0:2a:a6:20:ba:59:ef:b5:53:0e:a5:f3:cd:
29:df:3c:1c:6c:81:f4:33:45:de:19:92:31:3a:6f:
60:a1:4e:e7:69:92:cb:0e:45:6d:44:0c:b2:68:f3:
e2:42:08:f9:50:bc:74:8a:ef:d8:7f:4c:39:e5:7c:
f4:69:7f:6f:86:c8:ed:8f:16:bb:a6:53:a8:ec:24:
52:20:72:22:ef:02:a3:20:d6:c2:7c:61:bd:04:24:
e0:64:d8:12:64:4e:91:e6:b0:9e:77:f5:92:bd:53:
26:13:b2:17:2d:e8:52:e3:58:3c:7c:2e:e2:7b:ed:
5e:6c:a1:cc:62:78:c2:90:22:49:81:ed:fa:37:d8:
b4:4b:eb:a2:00:1b:85:6e:14:a2:d9:5b:76:24:84:
d4:59:39:05:81:7f:71:38:15:b6:5a:3d:71:94:8a:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:91:AD:59:FC:02:60:3B:2D:A6:C2:82:A1:D0:CF:8D:13:1E:39
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0b:65:8e:d4:79:dd:61:8f:b8:61:f3:41:df:07:15:e2:89:
36:f2:31:fd:95:25:a6:d1:3a:6c:58:ae:a4:16:5b:9d:08:07:
4d:b8:22:ed:73:03:f2:2e:74:04:f9:c8:a6:20:bb:8b:25:c7:
f8:c9:93:44:21:a5:b1:e5:ac:4b:3a:5c:1a:12:aa:5a:dd:50:
fd:2f:ad:e5:4c:db:3e:98:be:0c:13:30:fa:de:2a:ec:44:a2:
06:4a:6e:0a:af:be:8b:a4:98:27:e2:58:0a:bd:c1:1c:54:05:
2d:1e:bf:91:46:af:ae:cf:dc:ea:e8:28:88:ba:99:1b:59:99:
d1:f7:5e:f9:0e:5f:71:ab:a7:16:97:66:fd:78:fb:09:53:27:
52:5a:42:41:99:be:f8:b3:79:96:12:17:16:75:3c:82:56:d6:
42:f9:13:5a:c0:7a:46:fb:4a:9f:2b:e3:14:fe:1a:43:0e:5c:
4a:9a:39:a2:e8:db:94:25:58:ef:16:33:16:85:f8:43:68:69:
81:47:de:cd:f4:78:a0:2b:6b:09:a7:aa:e6:2e:79:b2:d3:6f:
04:93:7c:53:69:cc:36:b7:fe:d7:d7:e4:ca:8a:35:c6:a2:7a:
45:0b:e6:ed:62:92:dc:af:6a:5c:fc:f5:5b:c0:86:51:78:b2:
2f:68:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:39:28 2025 by rpki-client