Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203631333137.roa
File: 3230382e39312e3139312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 3qFEIoApRUtbHvEwKA1DDtI7f497wypuUQSqPuAXEhI=
Subject key identifier: DE:34:7F:43:9F:69:EE:0C:13:90:58:FB:4E:10:91:1A:E2:3B:D6:EA
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 7B188A96C0B73CE2067010CEEDF609B7EC4733AE
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203631333137.roa
Signing time: Wed 29 Mar 2023 08:12:16 +0000
ROA not before: Wed 29 Mar 2023 08:07:16 +0000
ROA not after: Wed 27 Mar 2024 08:12:16 +0000
asID: 61317
IP address blocks: 208.91.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:18:8a:96:c0:b7:3c:e2:06:70:10:ce:ed:f6:09:b7:ec:47:33:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Mar 29 08:07:16 2023 GMT
Not After : Mar 27 08:12:16 2024 GMT
Subject: CN=DE347F439F69EE0C139058FB4E10911AE23BD6EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:07:a8:1b:56:70:d0:37:52:08:0b:af:42:
2d:a2:b7:3a:f8:02:14:44:4d:ba:0c:6b:1c:eb:9a:
76:c8:dc:85:76:ca:11:f5:e7:aa:90:b0:c6:b4:f0:
3f:a5:e2:99:5b:10:6c:05:3d:90:ec:06:85:47:27:
40:7c:bc:1c:a0:ea:0f:40:a0:b6:df:1c:1e:c1:ab:
7b:53:c0:29:1f:21:3b:87:46:af:19:8b:a3:58:18:
23:27:6f:a4:96:c0:9a:98:48:3d:be:2b:85:45:b4:
bd:0b:24:53:7b:da:dc:5b:26:83:8a:ea:f8:8e:f3:
31:7c:c4:a9:87:39:d6:c8:72:88:17:1d:f4:16:2f:
bc:49:8a:ff:70:c6:30:1f:09:43:f4:74:c3:4b:eb:
84:1a:13:15:cf:9c:81:24:47:26:ea:f7:98:a3:f6:
cb:4e:70:32:88:f6:1d:7a:00:5d:74:8c:a4:e7:c0:
ca:bf:5a:b9:fe:d4:a6:87:cd:56:62:30:ca:d8:ec:
1d:ec:25:74:ec:15:2e:73:cf:9d:43:e8:5c:d8:fc:
1b:ad:e7:b1:01:9c:9e:b9:91:c5:82:35:95:3c:bb:
a3:9f:93:24:40:69:6d:0c:1c:4b:8f:76:e3:a6:05:
c2:30:1a:09:db:f3:a0:ac:89:cf:24:73:30:38:cf:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:34:7F:43:9F:69:EE:0C:13:90:58:FB:4E:10:91:1A:E2:3B:D6:EA
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bd:d1:2b:40:ae:c3:dd:fa:3c:a8:76:36:db:19:b9:d3:eb:
c7:e8:00:79:fe:dd:6e:2e:d5:27:80:4c:31:4a:b7:76:fd:fa:
22:99:7b:f8:9d:8a:52:2b:23:89:a1:62:81:50:bb:38:3c:bb:
db:ee:ef:97:84:f6:11:86:8b:bc:e4:7f:70:b3:67:69:f4:12:
5a:7f:ac:b6:5a:a5:3c:35:50:57:04:fd:59:48:f4:c4:6a:fa:
57:80:61:f5:e3:cd:88:5b:56:cc:19:9e:4e:54:0e:9b:b2:36:
12:4d:b8:3f:d4:d3:12:2d:dc:7b:e1:db:42:96:a4:3a:2c:88:
c0:5a:3d:2e:14:2f:04:c0:9d:8f:aa:3a:43:bf:53:30:bb:b1:
9b:66:2f:f1:ea:f3:e9:bb:7c:61:80:2f:de:3f:be:ba:3b:1d:
df:43:94:a7:a8:06:d8:46:93:44:00:97:4b:cb:b2:a2:66:6e:
eb:6e:2f:23:14:28:33:cc:63:13:54:02:38:f5:65:4c:8e:95:
93:ce:96:a0:ed:0a:fe:bc:04:39:eb:b9:a1:4a:b4:81:9c:2d:
f4:1c:da:1e:f5:7f:77:7d:25:1a:7e:69:30:9a:e8:1b:f2:11:
c3:21:34:66:20:01:1e:f4:5b:0b:7d:4c:87:cf:52:a7:6c:34:
30:8f:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:06:17 2025 by rpki-client