Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234302e302f32322d3234203d3e2038313030.roa
File: 3135372e3235342e3234302e302f32322d3234203d3e2038313030.roa (raw, json)
Hash identifier: Pcgs2ABRyZlDqlp4FS3FnthcfVYiLk6pOD+CP3NflOQ=
Subject key identifier: A3:AB:2F:1E:B2:AD:FD:7F:8A:86:6A:16:6B:34:D4:D0:12:95:39:0A
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 5F58B9849C368F44E9FEEB5286785A05E590D519
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234302e302f32322d3234203d3e2038313030.roa
Signing time: Thu 02 Feb 2023 00:22:38 +0000
ROA not before: Thu 02 Feb 2023 00:17:38 +0000
ROA not after: Thu 01 Feb 2024 00:22:38 +0000
asID: 8100
IP address blocks: 157.254.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:58:b9:84:9c:36:8f:44:e9:fe:eb:52:86:78:5a:05:e5:90:d5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Feb 2 00:17:38 2023 GMT
Not After : Feb 1 00:22:38 2024 GMT
Subject: CN=A3AB2F1EB2ADFD7F8A866A166B34D4D01295390A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:a9:b9:c0:5a:f5:90:7a:be:61:ff:5b:e7:
01:96:28:84:92:52:ea:ba:b2:bc:23:ae:8a:ac:a0:
ff:30:72:8e:32:91:8f:8d:09:b8:98:14:b5:61:74:
b2:4c:db:1f:2e:25:72:0d:21:18:f2:8a:c8:9a:55:
d7:0a:72:e9:27:d7:92:9e:67:45:25:47:34:ac:7e:
ab:30:34:70:19:01:c3:f3:03:9e:62:6c:d5:0c:7b:
fb:6c:6c:5c:73:a5:72:8f:eb:4c:2d:aa:ef:10:49:
db:53:34:53:14:f5:4f:e4:c7:e8:be:4d:98:9b:d3:
bf:ee:54:b5:bc:df:75:87:4c:5f:b7:48:e2:36:5d:
a5:7c:21:65:93:b0:6a:55:21:b0:ee:2f:c9:35:34:
c3:72:40:21:38:4e:80:b2:54:0e:44:7b:a6:13:8c:
6a:69:59:a5:81:a0:4c:e2:74:16:16:77:9d:ae:07:
85:9f:09:3a:06:7e:17:34:27:13:ff:89:f5:c3:42:
29:20:9d:96:f6:62:75:49:7e:6b:38:e5:d6:52:21:
b2:95:51:79:f5:e7:bc:5a:cd:b8:5f:1b:45:8a:20:
18:c6:de:fd:c8:db:2d:4c:69:26:94:8d:3f:f6:0b:
cb:a7:c5:23:8a:18:d8:15:d8:d4:46:5d:a8:1f:fd:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:2F:1E:B2:AD:FD:7F:8A:86:6A:16:6B:34:D4:D0:12:95:39:0A
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234302e302f32322d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.240.0/22
Signature Algorithm: sha256WithRSAEncryption
38:86:18:5f:70:0b:da:6b:b5:05:42:c0:18:ba:d0:af:32:4f:
d0:ba:6d:b1:4a:73:08:0f:f6:24:52:90:ab:43:d9:a8:6d:ae:
06:29:d0:b9:fc:83:32:f2:76:5d:2a:39:7a:7b:fb:9d:64:63:
fe:48:55:4c:b4:97:dc:88:a7:66:79:86:20:22:c5:04:02:4e:
e0:47:5a:9b:f8:0c:18:ab:5b:68:df:5d:1a:ea:41:af:de:7c:
3b:91:54:e3:55:a9:29:cc:03:48:f9:a6:a1:aa:d6:1a:5d:d3:
b2:b8:38:be:2d:ed:44:44:92:47:ba:60:1c:12:49:65:08:55:
97:eb:86:a6:3c:19:2f:81:02:ff:e9:aa:f9:b1:ea:4b:a8:3b:
1d:30:61:9b:65:e7:99:9c:54:54:3f:79:0f:f7:a1:51:03:12:
ad:ec:d3:cd:16:18:97:71:0e:c0:37:7f:62:28:fa:e0:80:9a:
d6:5d:1d:de:0b:7d:c9:06:49:a6:c2:c6:5b:f3:1e:81:80:ce:
8c:ae:b5:cd:c0:99:eb:77:97:68:a1:04:d3:11:27:2e:99:95:
d5:0d:4e:d8:ed:6d:d5:e0:a2:9e:3f:8c:57:7b:a1:53:bb:b3:
f2:1a:8b:5f:37:e0:67:52:54:66:05:5c:21:7a:77:ca:d7:29:
86:bf:bf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org