Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa
File: 3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa (raw, json)
Hash identifier: A46+V2cgmgdEfMBRWbPxiwYbJWkjieOV59rDkAIcZDg=
Subject key identifier: 53:1F:BE:4C:1F:C1:0A:A6:5D:81:ED:1B:AF:3C:B1:4A:2D:53:D9:09
Certificate issuer: /CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Certificate serial: 11DEE6D141F13EBB27E89711089033EB9C452399
Authority key identifier: FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa
Signing time: Wed 02 Jul 2025 23:16:51 +0000
ROA not before: Wed 02 Jul 2025 23:11:51 +0000
ROA not after: Wed 01 Jul 2026 23:16:51 +0000
asID: 400806
IP address blocks: 199.182.132.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:de:e6:d1:41:f1:3e:bb:27:e8:97:11:08:90:33:eb:9c:45:23:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Validity
Not Before: Jul 2 23:11:51 2025 GMT
Not After : Jul 1 23:16:51 2026 GMT
Subject: CN=531FBE4C1FC10AA65D81ED1BAF3CB14A2D53D909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:ad:51:ce:46:94:0a:a9:a8:c0:77:5a:06:
26:f7:b1:33:72:6b:45:2b:f4:8a:a0:3c:14:9c:6e:
02:b6:41:d0:ec:45:4d:e5:f1:a7:82:8d:56:14:5c:
0c:07:e8:af:c6:1b:60:a6:55:5a:be:23:4b:31:63:
20:36:fa:f1:f0:36:b8:9f:68:fd:8f:2e:2a:e7:61:
61:19:f8:5b:af:59:d7:dc:b9:dd:95:87:b0:e6:8b:
e8:64:6d:06:70:fc:39:16:b9:c8:20:77:e8:9e:20:
4e:92:37:00:d0:1a:93:5d:fb:b7:0e:d7:4c:0e:15:
02:eb:23:78:32:5d:67:9e:bd:2a:da:ed:85:a6:76:
99:e7:b7:20:86:5b:fa:62:c1:42:e4:b5:7a:97:d7:
54:04:12:98:ae:bf:f7:e4:4f:8f:aa:2f:e4:71:7d:
b6:88:1f:2d:47:cd:07:0c:32:46:c9:57:5e:28:a5:
dd:ba:2c:f8:aa:b9:61:4a:cf:c5:5b:dd:09:f0:d9:
a1:d4:0c:24:21:19:a1:0b:a2:dd:d4:73:1c:5a:c0:
96:50:c0:7c:7b:a0:28:ba:a6:66:aa:ee:d5:5c:1d:
2f:15:75:8a:83:7d:f4:c4:e2:fb:b1:a8:c7:1a:1a:
36:a7:b7:32:7b:8c:8b:91:fd:5b:ee:81:fc:bb:07:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1F:BE:4C:1F:C1:0A:A6:5D:81:ED:1B:AF:3C:B1:4A:2D:53:D9:09
X509v3 Authority Key Identifier:
keyid:FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.132.0/22
Signature Algorithm: sha256WithRSAEncryption
44:98:eb:68:c4:ab:e0:a1:8f:1e:4b:65:65:e6:c4:12:42:36:
47:7a:e8:c6:d6:67:38:8d:fa:03:6c:0a:fd:f7:7b:05:1b:52:
de:81:b5:54:14:29:9e:1b:51:bf:f5:f5:0c:30:8b:ff:0b:5a:
3b:3a:56:2f:5c:14:98:d9:2b:1a:7c:b5:14:d1:a7:76:3e:89:
c0:00:d1:a7:9b:4d:39:bf:93:48:9e:57:04:ec:e2:14:a4:36:
c7:57:f6:6d:18:2a:1a:68:48:26:6b:7b:bb:db:4c:9c:bc:59:
a2:2a:4b:fe:25:42:b7:79:9c:59:fc:c5:2a:c5:a7:bf:30:cd:
19:97:05:68:f2:78:c7:11:1c:10:2a:15:c0:a7:8f:2a:36:34:
53:fa:9a:28:7c:ca:0f:f9:e6:a0:f1:5d:b0:8d:67:72:91:3c:
7f:ac:6b:94:49:72:d7:02:41:b8:28:2b:96:1c:8c:d8:f8:99:
29:2a:e0:d2:ab:2f:99:7b:a1:d1:82:e2:23:3a:e5:1e:1e:c2:
f0:76:76:d8:57:2c:6a:d9:3e:c3:69:2f:71:7f:60:e1:47:1d:
eb:36:c9:b9:64:6b:e0:37:ec:28:42:10:a6:f3:3c:17:12:04:
bf:f7:9b:fb:33:93:7d:39:cc:79:bb:50:df:a7:48:14:6c:cf:
8c:80:8f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:34:48 2025 by rpki-client