Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135352e302f32342d3234203d3e20313339363630.roa
File: 3135372e3235342e3135352e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier: cfeQp/jAJdx+TN2g///GkIuFafF6j6beg9EzPFYwyTk=
Subject key identifier: 4C:8F:9F:1F:6A:0D:E9:27:A6:F5:51:2B:3C:78:08:11:E7:CE:4C:41
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 67AAE094850B1692E88A3B733D566E91B53BB1C2
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135352e302f32342d3234203d3e20313339363630.roa
Signing time: Thu 09 Feb 2023 06:03:33 +0000
ROA not before: Thu 09 Feb 2023 05:58:33 +0000
ROA not after: Thu 08 Feb 2024 06:03:33 +0000
asID: 139660
IP address blocks: 157.254.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:aa:e0:94:85:0b:16:92:e8:8a:3b:73:3d:56:6e:91:b5:3b:b1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Feb 9 05:58:33 2023 GMT
Not After : Feb 8 06:03:33 2024 GMT
Subject: CN=4C8F9F1F6A0DE927A6F5512B3C780811E7CE4C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:84:58:b7:37:f9:96:43:9d:6f:a6:fa:e6:
b5:95:66:ac:96:27:74:c8:38:83:65:07:ed:10:8a:
f8:c0:e5:84:20:3f:85:3a:bd:09:2e:d6:72:2a:73:
b7:a3:95:7b:e2:52:0e:84:e5:75:3a:fd:49:c2:f5:
46:aa:dc:c0:de:32:23:ab:c8:86:52:04:88:bd:c8:
d6:90:b0:19:0a:7e:62:52:06:95:94:f3:fe:bc:8f:
f8:3e:d7:90:9f:cc:22:75:ba:ff:26:9f:ec:b1:20:
dd:85:87:1c:c9:07:2d:f2:74:cb:70:ef:f6:5d:6e:
fd:e0:dd:81:f8:da:91:50:f3:35:5d:5a:fe:27:1c:
11:31:55:1c:4f:42:2b:2f:1f:68:3a:40:8f:73:0c:
7e:cf:71:7f:12:2d:a0:cd:19:e1:75:37:8c:ee:f1:
65:c7:d3:aa:0e:99:32:85:59:20:c3:42:65:8c:62:
56:08:d7:d1:e2:ac:b6:96:de:33:6e:59:de:5c:80:
59:56:1b:80:1a:23:4f:9e:60:be:64:4f:70:2f:3e:
e0:a1:a8:da:cd:f8:d8:3c:f5:ed:08:50:10:a9:21:
05:e0:0b:26:f6:97:a5:71:6f:62:5a:fe:1e:7a:e5:
11:a0:58:fb:bc:82:c8:7e:a8:ba:6f:5f:3e:b2:a4:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:9F:1F:6A:0D:E9:27:A6:F5:51:2B:3C:78:08:11:E7:CE:4C:41
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135352e302f32342d3234203d3e20313339363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ba:a7:f1:5b:1c:e5:99:64:81:ca:69:eb:15:a2:6b:49:96:
54:9a:65:ae:91:d7:a5:de:05:d6:88:b6:be:67:ee:bd:c4:86:
7e:9a:3b:8f:50:1d:b1:d1:db:5a:60:cf:25:fb:72:fd:f5:91:
1b:89:4d:03:1f:fd:0c:18:30:2a:c1:91:24:5e:f0:bc:32:a5:
ff:8d:f2:1f:36:8d:c6:dd:4e:db:fb:31:8f:f5:a7:fa:58:ae:
5e:44:a2:61:24:3f:8e:85:83:7d:f1:06:49:9d:05:d4:4a:33:
30:9b:91:d5:eb:8d:9d:a9:4c:8f:3f:ba:5e:09:bd:31:44:84:
1a:a6:5e:e9:27:09:32:71:8a:e7:92:0d:59:13:ab:d5:4f:c5:
11:9a:f8:76:ff:27:8d:6b:08:8c:3f:0e:4a:e7:83:8e:33:26:
4b:57:7a:82:dd:db:64:60:78:ec:cb:ff:45:16:36:3c:2c:e7:
af:f6:d7:a8:0d:a0:a2:31:07:c6:68:2a:07:53:74:9b:81:36:
ba:2f:24:0d:89:9f:ee:fe:91:e9:60:63:67:78:86:bb:a8:34:
ed:a8:2b:1c:d6:63:35:09:cc:a6:c0:cf:06:24:2e:5d:5a:15:
5e:78:0f:fb:ac:71:cf:e1:50:69:3f:61:cd:a2:6a:ae:70:1d:
fd:9c:6d:4c
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUZ6rglIULFpLoijtzPVZukbU7scIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwMjA5MDU1ODMzWhcNMjQwMjA4MDYwMzMz
WjAzMTEwLwYDVQQDEyg0QzhGOUYxRjZBMERFOTI3QTZGNTUxMkIzQzc4MDgxMUU3
Q0U0QzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46aEWLc3+ZZD
nW+m+ua1lWaslid0yDiDZQftEIr4wOWEID+FOr0JLtZyKnO3o5V74lIOhOV1Ov1J
wvVGqtzA3jIjq8iGUgSIvcjWkLAZCn5iUgaVlPP+vI/4PteQn8widbr/Jp/ssSDd
hYccyQct8nTLcO/2XW794N2B+NqRUPM1XVr+JxwRMVUcT0IrLx9oOkCPcwx+z3F/
Ei2gzRnhdTeM7vFlx9OqDpkyhVkgw0JljGJWCNfR4qy2lt4zblneXIBZVhuAGiNP
nmC+ZE9wLz7goajazfjYPPXtCFAQqSEF4Asm9pelcW9iWv4eeuURoFj7vILIfqi6
b18+sqTA8wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEyPnx9qDeknpvVRKzx4CBHn
zkxBMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMTM1MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzkzNjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/pswDQYJKoZIhvcN
AQELBQADggEBAJ26p/FbHOWZZIHKaesVomtJllSaZa6R16XeBdaItr5n7r3Ehn6a
O49QHbHR21pgzyX7cv31kRuJTQMf/QwYMCrBkSRe8Lwypf+N8h82jcbdTtv7MY/1
p/pYrl5EomEkP46Fg33xBkmdBdRKMzCbkdXrjZ2pTI8/ul4JvTFEhBqmXuknCTJx
iueSDVkTq9VPxRGa+Hb/J41rCIw/Dkrng44zJktXeoLd22RgeOzL/0UWNjws56/2
16gNoKIxB8ZoKgdTdJuBNrovJA2Jn+7+kelgY2d4hruoNO2oKxzWYzUJzKbAzwYk
Ll1aFV54D/uscc/hUGk/Yc2iaq5wHf2cbUw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org