Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234342e302f32322d3234203d3e2031323339.roa
File: 3135372e3235342e3234342e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier: cu01ZNXm68/aXK73mzNngNxaW1PP27deM0C6VUqc8yw=
Subject key identifier: 5C:7F:E3:38:BF:A8:FB:28:24:6C:E3:BE:3A:37:A0:00:51:26:72:E1
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 1629B9A8780BC6E106AB5F167E66873E08E9A0E5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234342e302f32322d3234203d3e2031323339.roa
Signing time: Wed 22 Mar 2023 20:55:05 +0000
ROA not before: Wed 22 Mar 2023 20:50:05 +0000
ROA not after: Wed 20 Mar 2024 20:55:05 +0000
asID: 1239
IP address blocks: 157.254.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:29:b9:a8:78:0b:c6:e1:06:ab:5f:16:7e:66:87:3e:08:e9:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 22 20:50:05 2023 GMT
Not After : Mar 20 20:55:05 2024 GMT
Subject: CN=5C7FE338BFA8FB28246CE3BE3A37A000512672E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:ac:1d:10:55:84:35:98:5f:44:3e:51:6e:
37:7a:d7:00:f9:cf:30:d1:65:31:e0:d7:dc:93:bf:
88:8e:1a:4f:f0:8e:45:f2:48:1e:af:7c:c6:8c:93:
62:9e:ae:ea:51:43:18:ab:19:72:48:23:ed:52:54:
c3:6b:a8:92:c6:4b:08:12:74:7f:ca:5f:f7:99:4b:
16:71:a0:57:83:67:42:17:f2:36:64:f3:ed:b9:58:
4e:23:9c:17:a6:66:da:9b:3c:fa:ee:10:94:42:89:
fd:b4:ac:d3:9b:13:18:72:23:c7:f1:db:d9:87:1b:
df:d2:b7:08:d2:56:ac:6e:7f:53:14:a7:ce:dd:5b:
45:c6:14:a2:ac:a5:0b:97:62:fd:9d:e8:77:b8:70:
68:6f:82:ac:27:b8:fa:0e:8a:df:3d:0c:e4:04:5c:
c0:7b:31:e1:dc:7e:99:0f:75:72:cc:5a:99:08:a7:
56:e2:df:7c:eb:8c:d5:14:40:72:d2:5c:ea:dd:25:
c1:09:8b:5d:a6:2a:4e:1a:9b:8e:8d:4f:11:85:78:
09:44:57:88:1b:dd:31:ca:70:2f:6e:0b:89:d9:57:
5a:8a:5f:16:a8:fb:4d:c7:d5:ac:aa:52:74:43:5c:
d9:15:be:af:08:af:9a:c9:b9:28:64:1b:ce:5c:81:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7F:E3:38:BF:A8:FB:28:24:6C:E3:BE:3A:37:A0:00:51:26:72:E1
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234342e302f32322d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.244.0/22
Signature Algorithm: sha256WithRSAEncryption
40:7e:ee:18:63:72:6a:f6:da:66:b8:d5:c2:23:3f:2a:95:d9:
8b:5a:c8:4a:25:15:ed:63:fa:f8:89:70:a3:93:d3:2d:ed:ac:
94:a5:19:0f:47:bd:76:f7:7c:ee:38:15:61:6f:27:03:8c:a0:
90:7d:5e:e5:0a:4d:2f:d0:10:db:48:12:64:51:e9:79:71:52:
2d:f8:3f:17:f4:89:42:fa:72:09:05:29:17:bf:34:4f:4c:98:
b5:f0:1f:90:15:3f:99:a4:4d:0f:dd:73:7b:6d:d3:96:f5:6b:
c3:28:58:22:04:be:96:bb:fc:37:42:e9:46:9e:9a:ce:e6:8d:
44:5d:0d:35:84:c3:da:23:2b:66:41:6a:ef:fe:56:f7:40:47:
96:b9:50:52:09:99:87:c4:4f:c6:4f:b9:c4:39:31:48:76:fa:
be:b4:31:24:75:0e:6f:45:59:5e:35:a1:f7:80:56:03:59:a2:
9f:77:99:74:bf:85:6a:d1:90:73:bc:cc:cf:84:ca:16:e8:91:
cf:2b:35:02:59:4c:dd:4f:b7:17:76:3d:c2:59:63:f0:57:70:
cb:de:d3:18:f7:83:25:61:ca:2b:b3:81:fc:5c:cb:cb:67:55:
ce:cb:cf:9b:10:f2:60:34:c8:c7:ad:c7:97:39:82:02:7a:cf:
f7:46:50:17
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUFim5qHgLxuEGq18WfmaHPgjpoOUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwMzIyMjA1MDA1WhcNMjQwMzIwMjA1NTA1
WjAzMTEwLwYDVQQDEyg1QzdGRTMzOEJGQThGQjI4MjQ2Q0UzQkUzQTM3QTAwMDUx
MjY3MkUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFCsHRBVhDWY
X0Q+UW43etcA+c8w0WUx4Nfck7+IjhpP8I5F8kger3zGjJNinq7qUUMYqxlySCPt
UlTDa6iSxksIEnR/yl/3mUsWcaBXg2dCF/I2ZPPtuVhOI5wXpmbamzz67hCUQon9
tKzTmxMYciPH8dvZhxvf0rcI0lasbn9TFKfO3VtFxhSirKULl2L9neh3uHBob4Ks
J7j6DorfPQzkBFzAezHh3H6ZD3VyzFqZCKdW4t9864zVFEBy0lzq3SXBCYtdpipO
GpuOjU8RhXgJRFeIG90xynAvbguJ2Vdail8WqPtNx9WsqlJ0Q1zZFb6vCK+aybko
ZBvOXIFimwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFFx/4zi/qPsoJGzjvjo3oABR
JnLhMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjM0MzQyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzMTMyMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAp3+9DANBgkqhkiG9w0BAQsF
AAOCAQEAQH7uGGNyavbaZrjVwiM/KpXZi1rISiUV7WP6+Ilwo5PTLe2slKUZD0e9
dvd87jgVYW8nA4ygkH1e5QpNL9AQ20gSZFHpeXFSLfg/F/SJQvpyCQUpF780T0yY
tfAfkBU/maRND91ze23TlvVrwyhYIgS+lrv8N0LpRp6azuaNRF0NNYTD2iMrZkFq
7/5W90BHlrlQUgmZh8RPxk+5xDkxSHb6vrQxJHUOb0VZXjWh94BWA1min3eZdL+F
atGQc7zMz4TKFuiRzys1AllM3U+3F3Y9wllj8Fdwy97TGPeDJWHKK7OB/FzLy2dV
zsvPmxDyYDTIx63HlzmCAnrP90ZQFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org