Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32322d3234203d3e20333935383431.roa
File: 3230382e39312e3138382e302f32322d3234203d3e20333935383431.roa (raw, json)
Hash identifier: coJsTxDVO21JQvSsY8AjT97KqjQcjE638XcEBcnTLHE=
Subject key identifier: 75:55:76:87:1B:69:D6:CC:93:45:8C:0E:7A:CB:17:BB:D0:3E:49:67
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 18B005D27166EA7B57BF4D0C11430CA97FBAFDC4
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32322d3234203d3e20333935383431.roa
Signing time: Tue 28 Feb 2023 19:37:28 +0000
ROA not before: Tue 28 Feb 2023 19:32:28 +0000
ROA not after: Tue 27 Feb 2024 19:37:28 +0000
asID: 395841
IP address blocks: 208.91.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b0:05:d2:71:66:ea:7b:57:bf:4d:0c:11:43:0c:a9:7f:ba:fd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Feb 28 19:32:28 2023 GMT
Not After : Feb 27 19:37:28 2024 GMT
Subject: CN=755576871B69D6CC93458C0E7ACB17BBD03E4967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:c9:80:30:d1:45:f0:48:e6:87:ed:cf:03:
a1:b9:1e:a3:8b:fc:43:d6:e8:e4:04:2a:7c:65:8d:
f7:c1:4c:82:d2:06:25:a4:47:8b:ac:37:90:56:d1:
d8:46:88:f6:3f:fd:a5:82:25:f1:36:76:42:19:80:
a8:9c:88:33:c8:3a:cd:01:88:6e:a4:b1:55:e9:2e:
e8:17:c7:bc:06:d8:0d:cc:63:96:3e:24:10:73:6d:
ae:82:72:dc:e5:a1:5f:91:1b:99:61:36:2a:ed:7e:
74:44:96:de:8e:12:e5:41:6c:c2:34:98:95:96:8e:
17:4d:36:c4:34:6b:69:75:a4:74:b6:9e:83:2c:6c:
d3:a2:51:6a:43:ba:fe:d5:7a:ff:3e:a0:b1:2d:5c:
6f:7f:2b:4c:f2:39:08:03:5e:c6:a0:f3:03:5b:4a:
34:f7:b8:dc:a4:a2:45:b6:b3:12:59:87:dc:d6:d9:
06:ff:b4:7f:eb:07:a0:91:d8:41:44:55:e0:2c:fb:
f6:06:b6:58:ba:8b:77:13:fb:d8:fb:b2:aa:0e:cc:
b6:40:7a:1f:a2:e2:cc:24:12:5d:8d:a7:53:d1:32:
f2:ef:5f:56:47:71:25:80:2c:eb:e2:9c:75:2d:c6:
6f:0c:91:c6:bd:3e:23:0b:af:6a:10:a9:ee:a1:de:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:76:87:1B:69:D6:CC:93:45:8C:0E:7A:CB:17:BB:D0:3E:49:67
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32322d3234203d3e20333935383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:f4:32:e8:b8:a6:bb:02:10:c7:99:01:03:be:8a:86:d0:af:
a0:de:8a:d9:0c:62:9d:45:64:14:2e:00:a7:54:3e:b4:fc:ca:
35:cd:d8:ff:e5:1a:41:5e:59:ef:36:23:e1:24:36:c7:17:fe:
a7:f4:65:d4:82:3a:85:d2:42:35:7b:9a:9f:3b:98:27:1b:a9:
4c:2a:97:18:92:21:7a:df:be:9a:c4:a5:56:f1:84:81:be:d6:
1e:20:1a:0d:bd:09:cf:35:4f:2a:44:8b:14:13:35:9c:50:a4:
03:17:d3:0a:e2:0f:c8:26:ee:e5:a5:dd:df:ed:34:ab:d8:75:
c0:85:95:ff:66:9d:10:b7:d7:c6:53:85:e6:1c:6f:9b:bb:c1:
c7:aa:65:17:d1:c1:dd:52:b8:81:1b:c5:87:79:bd:a5:dd:69:
b1:04:72:22:a7:d7:93:8c:a9:2b:bd:58:a8:3e:12:fd:08:16:
e1:50:9a:c3:27:7e:ca:bc:73:74:ee:56:5b:47:84:9f:2e:df:
3b:db:c0:1e:c7:bf:8e:af:ae:52:e5:7b:9d:be:29:79:50:e4:
41:c5:28:10:c4:fc:1a:fa:6c:9f:a8:0e:12:01:cf:9c:a6:b0:
1b:21:af:55:28:7b:2a:dc:26:83:14:ae:b0:b6:6d:9c:e7:4e:
9d:7a:ed:5d
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUGLAF0nFm6ntXv00MEUMMqX+6/cQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2
MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjMwMjI4MTkzMjI4WhcNMjQwMjI3MTkzNzI4
WjAzMTEwLwYDVQQDEyg3NTU1NzY4NzFCNjlENkNDOTM0NThDMEU3QUNCMTdCQkQw
M0U0OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9LJgDDRRfBI
5oftzwOhuR6ji/xD1ujkBCp8ZY33wUyC0gYlpEeLrDeQVtHYRoj2P/2lgiXxNnZC
GYConIgzyDrNAYhupLFV6S7oF8e8BtgNzGOWPiQQc22ugnLc5aFfkRuZYTYq7X50
RJbejhLlQWzCNJiVlo4XTTbENGtpdaR0tp6DLGzTolFqQ7r+1Xr/PqCxLVxvfytM
8jkIA17GoPMDW0o097jcpKJFtrMSWYfc1tkG/7R/6wegkdhBRFXgLPv2BrZYuot3
E/vY+7KqDsy2QHofouLMJBJdjadT0TLy719WR3ElgCzr4px1LcZvDJHGvT4jC69q
EKnuod4/gwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFHVVdocbadbMk0WMDnrLF7vQ
PklnMB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv
RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3
MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4Njk5
ODY2M2Q4MDcwMi8wLzMyMzAzODJlMzkzMTJlMzEzODM4MmUzMDJmMzIzMjJkMzIz
NDIwM2QzZTIwMzMzOTM1MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fu8MA0GCSqGSIb3DQEB
CwUAA4IBAQAt9DLouKa7AhDHmQEDvoqG0K+g3orZDGKdRWQULgCnVD60/Mo1zdj/
5RpBXlnvNiPhJDbHF/6n9GXUgjqF0kI1e5qfO5gnG6lMKpcYkiF6376axKVW8YSB
vtYeIBoNvQnPNU8qRIsUEzWcUKQDF9MK4g/IJu7lpd3f7TSr2HXAhZX/Zp0Qt9fG
U4XmHG+bu8HHqmUX0cHdUriBG8WHeb2l3WmxBHIip9eTjKkrvVioPhL9CBbhUJrD
J37KvHN07lZbR4SfLt8728Aex7+Or65S5Xudvil5UORBxSgQxPwa+myfqA4SAc+c
prAbIa9VKHsq3CaDFK6wtm2c506deu1d
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:22:22 2025 by rpki-client