Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa
File: 3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa (raw, json)
Hash identifier: qovkkNrNbSH9vHjBPSNcuX1x1Sw6B8En4oP8a4BFJz4=
Subject key identifier: 88:0D:78:BD:52:15:FE:84:43:F5:6A:B1:2F:D9:6D:4F:49:52:D3:82
Certificate issuer: /CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Certificate serial: 69976554BAFB80B61931AB44CE75AD1C1D59F187
Authority key identifier: FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa
Signing time: Wed 31 Jul 2024 23:08:16 +0000
ROA not before: Wed 31 Jul 2024 23:03:16 +0000
ROA not after: Wed 30 Jul 2025 23:08:16 +0000
asID: 400806
IP address blocks: 199.182.132.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:97:65:54:ba:fb:80:b6:19:31:ab:44:ce:75:ad:1c:1d:59:f1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Validity
Not Before: Jul 31 23:03:16 2024 GMT
Not After : Jul 30 23:08:16 2025 GMT
Subject: CN=880D78BD5215FE8443F56AB12FD96D4F4952D382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:3c:cc:1d:ec:96:dc:24:3e:36:7d:46:48:
22:39:7a:8a:77:db:b8:94:e0:db:db:fb:c8:28:16:
8d:43:b3:72:b5:49:3f:89:fd:49:34:fc:79:a0:aa:
39:bf:9f:17:2d:ec:82:9c:d8:0c:08:b1:a7:e9:fd:
6e:ec:fd:6c:14:4e:91:38:ac:4d:c4:fd:f6:c2:2f:
d7:bf:50:67:e5:67:45:62:1f:17:07:78:62:83:a7:
89:96:24:ff:9b:46:56:81:7c:48:93:ef:1f:94:4c:
10:c6:f8:b3:fd:33:31:8f:0a:cc:0b:50:c1:9f:88:
72:7f:b4:48:74:1e:43:f7:ef:a7:d3:64:e0:14:02:
70:b7:3f:37:0d:89:b0:94:8f:5f:d0:96:e3:a8:8a:
ce:71:b8:40:92:c2:b4:82:d3:da:05:4a:67:8e:91:
70:cd:b9:fb:37:57:e3:e8:48:93:18:71:a8:5f:67:
c6:ac:5e:16:65:c7:00:15:4d:42:6d:f7:f8:21:70:
7c:be:9f:d6:24:ff:4a:a0:b9:38:c4:c0:61:78:dd:
b0:d8:9a:a6:dc:a2:f8:c6:f2:1f:1b:58:a0:0d:3f:
98:63:71:1e:07:ab:81:5b:0a:28:63:4b:e2:0f:d9:
0f:cf:9a:81:63:ad:ce:fd:d3:e5:7f:63:04:de:30:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0D:78:BD:52:15:FE:84:43:F5:6A:B1:2F:D9:6D:4F:49:52:D3:82
X509v3 Authority Key Identifier:
keyid:FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.132.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:30:28:21:da:bc:09:08:ba:71:42:2c:eb:97:2c:aa:e1:8a:
e2:b7:1f:26:97:fe:80:8a:ed:98:45:d4:83:3b:34:51:fe:f9:
a4:70:2e:2a:02:df:a1:ea:20:17:c7:55:ea:5e:30:e4:44:ba:
39:b9:a8:11:82:9b:71:ee:f5:8d:02:04:82:4d:07:ef:f1:af:
15:60:83:a8:19:ce:19:0b:a6:49:3e:1f:2d:2d:b5:ef:07:19:
49:0e:ac:b1:22:2b:a8:a3:1d:e7:40:e8:d4:ce:ef:eb:c2:f0:
63:a3:ac:2b:22:cd:b2:8d:d0:f9:35:3b:8b:e8:b1:63:da:6b:
fb:0f:57:02:a0:f9:e8:81:4e:bd:60:a2:99:dd:6e:0c:90:98:
40:f5:09:6b:17:69:b0:39:33:f1:65:f8:a4:a5:f6:d7:3c:05:
76:cb:4b:3f:f6:24:44:cc:e4:e4:08:66:79:28:2e:49:82:91:
98:07:cd:b9:ad:22:bc:4d:a3:cb:7e:a1:2a:13:24:ec:8a:d1:
eb:97:20:4a:fc:a6:9e:8b:b5:df:fa:4b:f7:f9:e6:13:66:2c:
2f:ae:e5:48:81:38:45:9f:53:3b:f5:28:ed:39:3f:c6:ff:f1:
e0:b8:9e:21:a4:e5:f9:b5:84:3f:27:80:cf:50:41:e7:a9:62:
db:8d:fb:60
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUaZdlVLr7gLYZMatEznWtHB1Z8YcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkyNzdkMGE5YjU5YzEyNWU4ZDJlNzIwZmU5ODNkZDBm
OWVjMzRlZjJlYmNhYmE4ZjcwHhcNMjQwNzMxMjMwMzE2WhcNMjUwNzMwMjMwODE2
WjAzMTEwLwYDVQQDEyg4ODBENzhCRDUyMTVGRTg0NDNGNTZBQjEyRkQ5NkQ0RjQ5
NTJEMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufA8zB3sltwk
PjZ9RkgiOXqKd9u4lODb2/vIKBaNQ7NytUk/if1JNPx5oKo5v58XLeyCnNgMCLGn
6f1u7P1sFE6ROKxNxP32wi/Xv1Bn5WdFYh8XB3hig6eJliT/m0ZWgXxIk+8flEwQ
xviz/TMxjwrMC1DBn4hyf7RIdB5D9++n02TgFAJwtz83DYmwlI9f0JbjqIrOcbhA
ksK0gtPaBUpnjpFwzbn7N1fj6EiTGHGoX2fGrF4WZccAFU1Cbff4IXB8vp/WJP9K
oLk4xMBheN2w2Jqm3KL4xvIfG1igDT+YY3EeB6uBWwooY0viD9kPz5qBY63O/dPl
f2ME3jDFPwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIgNeL1SFf6EQ/VqsS/ZbU9J
UtOCMB8GA1UdIwQYMBaAFPslHMeqsp0o8XdWuI4V3EPcWs8JMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NmJhM2JkZDQzZDNjLzAv
RkIyNTFDQzdBQUIyOUQyOEYxNzc1NkI4OEUxNURDNDNEQzVBQ0YwOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2E4MTZlOGFkLTliY2MtNDZkYS1hZmQ4LTcwZGQ5N2JkMDIzMi82OTI3
N2QwYTliNTljMTI1ZThkMmU3MjBmZTk4M2RkMGY5ZWMzNGVmMmViY2FiYThmNy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTZi
YTNiZGQ0M2QzYy8wLzMxMzkzOTJlMzEzODMyMmUzMTMzMzIyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzNDMwMzAzODMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALHtoQwDQYJKoZIhvcN
AQELBQADggEBAD8wKCHavAkIunFCLOuXLKrhiuK3HyaX/oCK7ZhF1IM7NFH++aRw
LioC36HqIBfHVepeMOREujm5qBGCm3Hu9Y0CBIJNB+/xrxVgg6gZzhkLpkk+Hy0t
te8HGUkOrLEiK6ijHedA6NTO7+vC8GOjrCsizbKN0Pk1O4vosWPaa/sPVwKg+eiB
Tr1gopndbgyQmED1CWsXabA5M/Fl+KSl9tc8BXbLSz/2JETM5OQIZnkoLkmCkZgH
zbmtIrxNo8t+oSoTJOyK0euXIEr8pp6Ltd/6S/f55hNmLC+u5UiBOEWfUzv1KO05
P8b/8eC4niGk5fm1hD8ngM9QQeepYtuN+2A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:25 2025 by rpki-client