![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e203432303535.roa
File: 3130342e3235342e3231302e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier: aSayF2/IRcAdSvt12FqNZtJ95sF07aQLIcLWqegGjes=
Subject key identifier: AB:E9:FC:A3:26:82:F4:B5:17:20:20:63:76:2E:84:68:53:2C:CE:B3
Certificate issuer: /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial: 436DAB061770A414AA8F733C4D5039C9FC255901
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e203432303535.roa
Signing time: Tue 03 Oct 2023 15:18:51 +0000
ROA not before: Tue 03 Oct 2023 15:13:51 +0000
ROA not after: Tue 01 Oct 2024 15:18:51 +0000
asID: 42055
IP address blocks: 104.254.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:6d:ab:06:17:70:a4:14:aa:8f:73:3c:4d:50:39:c9:fc:25:59:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Validity
Not Before: Oct 3 15:13:51 2023 GMT
Not After : Oct 1 15:18:51 2024 GMT
Subject: CN=ABE9FCA32682F4B517202063762E8468532CCEB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:6a:71:c1:04:3b:00:40:30:32:3e:43:95:
8a:f5:9f:a3:54:b5:e3:93:e9:8c:51:81:16:0a:02:
d0:f1:4c:4e:3e:fb:95:91:dd:e8:01:d5:f2:4b:f7:
c3:ef:40:ca:70:3f:ca:98:c7:4c:65:ea:24:4f:0a:
5a:fe:7c:df:9e:c3:0e:14:5c:e8:ff:4e:3e:9c:44:
69:64:36:84:11:c0:22:e3:07:42:86:3d:fe:a9:29:
7e:c4:42:b9:fc:45:ab:f4:3a:17:df:29:e1:5d:6d:
01:d1:d4:2c:a9:3b:dc:70:73:79:1a:88:27:60:69:
95:ad:c8:59:bf:02:91:87:14:c2:a7:32:4c:59:c5:
41:dc:52:5c:e8:80:f0:64:02:87:33:fa:ca:23:57:
e3:55:06:f2:07:9b:7a:9c:e7:79:aa:bd:83:72:a4:
a5:d7:0d:50:e1:61:b2:a2:d0:ec:c2:10:cf:2b:1a:
01:05:39:6a:ef:1e:29:a1:10:69:80:92:d4:6d:46:
f8:16:50:06:d5:04:f1:53:49:72:64:36:1a:6c:70:
f5:fb:32:25:70:22:6c:02:ad:34:4f:96:95:74:81:
75:8d:f1:c8:7c:87:43:f2:30:91:6a:2f:93:5f:94:
70:4d:03:45:dd:32:cb:fc:6a:0a:13:9c:cc:17:0e:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E9:FC:A3:26:82:F4:B5:17:20:20:63:76:2E:84:68:53:2C:CE:B3
X509v3 Authority Key Identifier:
keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e203432303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b6:64:30:9f:2b:d3:e3:6f:95:c7:20:6c:b9:31:05:85:1a:
78:8a:74:3b:55:70:88:36:1d:af:25:66:49:29:a0:ce:ae:19:
3d:13:75:10:31:b2:0d:6e:88:5e:d8:d9:f6:73:3d:fd:ca:14:
ad:64:21:80:cd:97:a1:d4:14:5b:de:e2:65:cc:45:e1:1d:2e:
56:90:40:e0:e4:3a:33:a1:e0:f8:5e:96:38:ad:54:0f:86:b8:
9c:ac:bb:0f:62:a6:23:fe:80:65:87:e0:e3:2f:45:d5:cd:fa:
de:6a:0f:5f:5a:49:44:ae:80:ef:28:6e:90:86:69:05:f2:ff:
5f:5c:ad:9b:08:da:37:8d:0b:dd:88:a3:d0:56:da:a6:12:d7:
09:51:26:60:78:51:6d:45:1a:b8:ef:34:04:3f:e2:92:5d:03:
8f:bc:d4:df:f4:78:a2:dd:bb:d5:a5:54:9e:4d:14:80:fd:de:
d1:d0:28:16:1f:6c:b1:97:fd:3d:ff:3e:e0:48:28:e9:2e:c3:
82:70:0d:90:73:bc:c1:f3:5a:2a:11:21:46:17:25:3b:72:0b:
5b:6a:89:e7:26:63:b5:58:fd:34:b1:b0:46:ed:76:2a:1e:61:
55:95:cd:31:2a:f2:73:2d:e8:5e:5b:ba:9e:77:4f:34:eb:1b:
e5:00:76:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:00 2025 by rpki-client