Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234302e302f32322d3234203d3e20383334.roa
File: 3135372e3235342e3234302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: AUy0RJemQ34iI5yw++2odK/Vg+qhJiEXpcNwiggYba0=
Subject key identifier: 0A:B2:1F:9A:D4:9F:26:4E:47:E7:C0:BB:BF:58:7F:0D:57:CF:CA:F2
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 17AB335A92EB5DBF37D708DB628ADAEB05149EE8
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234302e302f32322d3234203d3e20383334.roa
Signing time: Mon 26 Jun 2023 18:50:34 +0000
ROA not before: Mon 26 Jun 2023 18:45:34 +0000
ROA not after: Mon 24 Jun 2024 18:50:34 +0000
asID: 834
IP address blocks: 157.254.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ab:33:5a:92:eb:5d:bf:37:d7:08:db:62:8a:da:eb:05:14:9e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jun 26 18:45:34 2023 GMT
Not After : Jun 24 18:50:34 2024 GMT
Subject: CN=0AB21F9AD49F264E47E7C0BBBF587F0D57CFCAF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:ad:c8:62:49:ec:41:0b:d2:7a:b3:c4:f6:
0f:04:e6:08:da:62:80:5a:32:41:f7:9c:02:97:4d:
0c:e0:57:fb:42:1e:c3:9a:e3:6f:0d:b3:51:7e:e5:
d6:b7:76:8a:48:aa:3f:9c:3b:db:53:64:9b:29:78:
59:e8:4c:15:ba:d7:d8:35:bd:ea:00:a5:18:0f:8d:
07:d7:cf:51:fa:54:c2:78:32:1e:2a:88:17:42:67:
70:ef:b7:a0:c0:ed:19:ec:c6:42:9b:c6:da:ac:cd:
e8:9e:5f:9a:32:99:d5:66:37:7e:46:e0:11:85:3d:
91:05:7e:3e:a8:a8:f2:61:3e:b0:d1:1c:89:d6:ca:
a2:f0:1d:35:5f:b6:52:85:ec:c5:6e:7c:98:fc:4d:
d4:ae:c9:c5:c8:05:11:c8:5d:10:65:62:ff:90:f1:
c4:3d:9b:37:e2:13:bf:22:28:c9:09:e0:77:00:28:
70:1c:9f:9d:dd:df:72:0d:47:96:14:93:01:71:fb:
4e:d3:39:30:40:00:8c:e9:41:8a:17:8a:8a:b1:32:
fa:1a:99:d2:f2:d9:a9:cc:c4:a8:90:cf:28:81:34:
cd:72:eb:b8:db:90:c2:ca:0a:cb:ea:30:3d:dd:69:
e5:0d:6f:1c:98:db:6f:37:3f:6c:e0:ee:aa:aa:44:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B2:1F:9A:D4:9F:26:4E:47:E7:C0:BB:BF:58:7F:0D:57:CF:CA:F2
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.240.0/22
Signature Algorithm: sha256WithRSAEncryption
48:09:05:ac:6a:43:b2:55:e8:a3:72:2e:13:35:b9:54:fb:86:
cf:56:84:eb:45:58:c4:f2:1d:be:36:3a:b9:d9:26:6e:8a:a5:
3c:13:b1:fd:f4:be:66:87:2a:86:7f:d4:d9:6e:61:31:1b:35:
51:92:0e:50:77:38:3b:cf:22:77:cb:2f:95:c3:45:ff:15:2d:
8e:45:95:d2:f0:72:62:be:0a:39:e3:78:8e:dc:23:c7:34:b0:
23:50:e9:6b:d0:54:36:b2:4d:df:a8:e8:26:49:85:c1:fb:85:
1e:6b:a5:cc:d0:ba:c6:af:f3:81:a4:94:ec:d4:a6:0c:95:ee:
d5:ff:96:a2:3c:71:c2:bc:4d:a1:58:6e:3e:a8:b9:f8:cb:d4:
da:0a:aa:bc:2b:d5:83:76:6b:1b:2b:6d:2e:27:6d:38:0f:87:
bc:50:2f:e4:72:6d:c4:db:de:37:48:25:97:8c:71:86:d2:9d:
b8:a7:8e:df:36:cc:49:e2:4c:3c:5c:55:12:e0:ed:37:71:51:
9a:17:76:20:86:00:c5:9a:52:90:0e:3d:46:51:79:20:78:aa:
ea:51:00:a3:d9:23:5d:b9:29:fa:ae:08:c4:4c:49:17:dc:93:
d1:36:5c:7e:d0:f7:c9:17:dc:0b:45:0c:51:80:b9:44:29:cb:
c1:8e:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:34:26 2025 by rpki-client