Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e20323132343438.roa
File: 3230382e39312e3139312e302f32342d3234203d3e20323132343438.roa (raw, json)
Hash identifier: +qPIPAShSJ7dt8AdWi+y3p1141YtpuHeHpWMDbdpIOk=
Subject key identifier: 0F:7B:65:06:0C:48:21:BA:70:D4:24:6D:70:B3:65:52:85:76:98:48
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 7EF34602608EDAD2E4FA30033561FF2304942327
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e20323132343438.roa
Signing time: Tue 16 May 2023 15:24:46 +0000
ROA not before: Tue 16 May 2023 15:19:46 +0000
ROA not after: Tue 14 May 2024 15:24:46 +0000
asID: 212448
IP address blocks: 208.91.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f3:46:02:60:8e:da:d2:e4:fa:30:03:35:61:ff:23:04:94:23:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: May 16 15:19:46 2023 GMT
Not After : May 14 15:24:46 2024 GMT
Subject: CN=0F7B65060C4821BA70D4246D70B3655285769848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:64:05:35:b8:e3:55:96:01:1d:7a:12:ad:
81:c1:cc:19:77:92:4b:87:c5:f3:0e:81:c0:a6:55:
b3:fb:ee:f9:37:93:6e:8c:77:35:70:f1:b0:58:55:
4b:74:6a:30:48:63:7e:dc:e4:10:05:55:65:89:63:
5a:1b:a7:b4:7d:99:a3:a7:8d:54:c5:e5:46:02:3b:
60:9c:92:4b:d0:8e:bd:21:77:4d:44:31:42:1f:12:
cd:d6:17:b2:01:ba:21:cc:16:57:1b:3a:10:8f:f5:
f7:d8:d6:0f:c1:5c:ef:9a:82:40:cb:57:03:a9:28:
0c:6e:f1:58:89:ed:d7:3d:18:a1:79:e8:ac:8e:87:
ae:ec:98:2d:2b:d2:81:88:70:ef:13:f6:91:7c:6c:
b6:1b:43:fa:ee:2d:7c:2d:90:6b:47:0d:ad:18:55:
fa:45:94:0f:2d:61:4f:30:b1:99:e2:40:c6:f5:3f:
30:fa:16:e8:d7:ab:9e:3b:b1:3f:79:01:78:09:8b:
ed:26:34:de:06:b2:ea:5e:be:66:9f:a1:8f:5a:4b:
1c:ee:3f:86:3d:61:a0:20:ff:e7:8a:93:1d:04:da:
72:66:5f:40:50:50:50:28:22:64:59:44:84:eb:8e:
c2:10:ce:c0:ce:57:42:36:c4:e5:54:e2:36:2d:52:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7B:65:06:0C:48:21:BA:70:D4:24:6D:70:B3:65:52:85:76:98:48
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e20323132343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:da:95:53:da:35:4d:cc:22:06:66:71:e0:56:69:b3:3b:ba:
ca:9c:49:a4:83:cf:1c:22:e0:e4:f5:d0:7e:96:0a:c4:a9:2e:
fc:c6:e6:6a:6b:68:85:71:6a:99:25:c4:fa:fe:c4:0c:5c:02:
df:49:9f:4f:12:e5:3a:e3:43:79:07:57:91:e6:60:ba:f5:87:
4c:b1:c7:5f:77:50:9f:b8:22:f7:31:e0:37:f6:01:5a:5b:e9:
68:c2:ff:8d:bd:0a:38:f7:50:08:7b:c1:81:74:c3:42:09:4f:
15:a1:3f:29:e0:eb:ae:32:e6:ae:60:01:45:d6:f6:1d:2b:45:
a0:ec:28:77:5e:14:25:38:54:fb:65:28:dc:ca:34:59:f6:3f:
2f:da:65:43:99:1b:05:96:7d:68:d9:9c:f9:ac:59:ed:dd:6e:
6a:a8:0b:a4:41:ce:a3:ce:09:99:18:01:af:8c:9a:fc:13:4d:
34:a3:00:4a:8f:65:60:59:a4:1b:5f:a7:41:23:ff:40:bf:33:
88:9f:c5:8e:f7:c4:0f:ae:0c:ab:02:ce:46:27:dd:17:8d:b1:
c3:48:10:15:56:56:ad:c6:15:ce:7b:8c:f5:71:f1:3b:65:62:
d7:f8:92:8a:03:4c:60:a8:db:b1:dc:f9:87:76:ae:4e:0c:d6:
45:e2:78:83
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUfvNGAmCO2tLk+jADNWH/IwSUIycwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2
MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjMwNTE2MTUxOTQ2WhcNMjQwNTE0MTUyNDQ2
WjAzMTEwLwYDVQQDEygwRjdCNjUwNjBDNDgyMUJBNzBENDI0NkQ3MEIzNjU1Mjg1
NzY5ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH1kBTW441WW
AR16Eq2BwcwZd5JLh8XzDoHAplWz++75N5NujHc1cPGwWFVLdGowSGN+3OQQBVVl
iWNaG6e0fZmjp41UxeVGAjtgnJJL0I69IXdNRDFCHxLN1heyAbohzBZXGzoQj/X3
2NYPwVzvmoJAy1cDqSgMbvFYie3XPRiheeisjoeu7JgtK9KBiHDvE/aRfGy2G0P6
7i18LZBrRw2tGFX6RZQPLWFPMLGZ4kDG9T8w+hbo16ueO7E/eQF4CYvtJjTeBrLq
Xr5mn6GPWksc7j+GPWGgIP/nipMdBNpyZl9AUFBQKCJkWUSE647CEM7AzldCNsTl
VOI2LVIvGQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFA97ZQYMSCG6cNQkbXCzZVKF
dphIMB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv
RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3
MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4Njk5
ODY2M2Q4MDcwMi8wLzMyMzAzODJlMzkzMTJlMzEzOTMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzQzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fu/MA0GCSqGSIb3DQEB
CwUAA4IBAQCe2pVT2jVNzCIGZnHgVmmzO7rKnEmkg88cIuDk9dB+lgrEqS78xuZq
a2iFcWqZJcT6/sQMXALfSZ9PEuU640N5B1eR5mC69YdMscdfd1CfuCL3MeA39gFa
W+lowv+NvQo491AIe8GBdMNCCU8VoT8p4OuuMuauYAFF1vYdK0Wg7Ch3XhQlOFT7
ZSjcyjRZ9j8v2mVDmRsFln1o2Zz5rFnt3W5qqAukQc6jzgmZGAGvjJr8E000owBK
j2VgWaQbX6dBI/9AvzOIn8WO98QPrgyrAs5GJ90XjbHDSBAVVlatxhXOe4z1cfE7
ZWLX+JKKA0xgqNux3PmHdq5ODNZF4niD
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:19 2025 by rpki-client