Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211432.roa
File: AS211432.roa (raw, json)
Hash identifier: TGLCPGPvI0IsCGHMURWYs9MUg4+DJjmkkQXWobgejmI=
Subject key identifier: 68:78:56:69:7C:9B:0E:32:47:11:E2:F9:C3:BA:51:49:9D:77:3C:52
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 081494F7566CE6AF397B33410A07A8DD5BDBB2BE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211432.roa
Signing time: Mon 06 Mar 2023 11:40:16 +0000
ROA not before: Mon 06 Mar 2023 11:35:16 +0000
ROA not after: Mon 04 Mar 2024 11:40:16 +0000
asID: 211432
IP address blocks: 104.234.130.0/24 maxlen: 24
206.53.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:14:94:f7:56:6c:e6:af:39:7b:33:41:0a:07:a8:dd:5b:db:b2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 6 11:35:16 2023 GMT
Not After : Mar 4 11:40:16 2024 GMT
Subject: CN=687856697C9B0E324711E2F9C3BA51499D773C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:bc:00:6a:cf:81:e5:8c:f9:1f:54:32:5d:
76:65:84:3e:6c:cb:84:2f:8f:af:e4:89:a3:b4:6a:
3c:68:b9:90:96:f1:5c:eb:6a:20:71:7a:5f:5e:16:
56:8a:36:7f:fd:f4:f3:b5:93:71:a8:ab:74:08:a3:
d6:72:63:aa:59:d2:8f:47:4d:bf:da:9a:b9:e2:2a:
3a:41:25:6c:da:54:0b:25:99:34:49:b3:5a:8d:01:
81:8a:6c:cc:42:8d:b7:a4:00:79:05:1f:19:46:0c:
27:43:6e:e2:ad:ba:0f:c0:e1:36:93:0c:10:50:22:
19:79:ca:56:14:89:b3:72:98:d6:85:78:6c:40:0a:
d4:10:d5:68:fa:96:98:bc:60:47:30:b5:0a:ee:b6:
5e:bd:ed:8f:6c:de:37:dd:98:25:31:2f:61:3c:c0:
7c:b6:f5:ca:dd:ab:ab:26:d0:c9:49:f0:b1:3b:46:
b6:08:4f:fe:0a:43:5a:87:12:30:76:d3:6d:f3:28:
43:58:b3:b8:fb:b3:ff:cc:78:50:53:bf:86:8f:ee:
df:9f:81:c3:7f:b1:53:79:7a:6e:13:61:bc:f2:de:
dd:88:2d:ff:7e:89:46:5a:1e:59:b7:77:d7:87:21:
ef:17:b5:30:c9:52:5a:44:9a:1f:d6:35:e3:e2:3c:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:56:69:7C:9B:0E:32:47:11:E2:F9:C3:BA:51:49:9D:77:3C:52
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.130.0/24
206.53.49.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4e:bb:8f:6b:93:95:99:9d:51:3e:f6:53:66:80:5b:c4:ba:
b2:1b:b7:9e:77:d6:a1:51:94:71:b7:85:a9:cc:47:fe:5c:10:
f9:73:b8:05:0d:00:89:81:29:3b:33:01:b5:7f:30:05:57:92:
21:f1:1b:35:ad:81:78:38:eb:62:dd:c3:eb:3c:ab:b8:aa:8c:
75:49:a2:23:79:1b:19:62:3d:b3:09:e7:74:7d:8a:78:37:12:
85:08:40:78:11:15:6e:92:80:4a:90:6c:7e:e0:13:04:af:e5:
3c:1f:61:b5:46:7f:51:d4:05:39:ba:7e:ff:88:c3:8a:41:bf:
7b:d6:8a:26:55:1a:bb:71:b3:9b:87:83:76:9e:bb:18:1e:1c:
d9:f8:25:ab:a1:79:17:27:c7:3b:fd:36:f9:13:55:72:41:96:
35:29:76:d8:04:10:50:97:09:64:95:af:b5:f6:f1:a3:19:1e:
1e:bb:fd:db:46:83:6f:42:3b:c9:b4:a7:37:cb:03:35:48:4d:
a4:36:b4:b9:de:ed:2a:42:3b:57:39:f0:a9:cd:0c:df:d7:b4:
43:52:b0:7f:16:45:02:b7:86:21:ca:e6:25:83:95:2e:01:5b:
00:a9:18:f5:57:a3:3a:58:86:09:73:f9:4b:48:2a:7d:09:36:
fa:dd:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:57:33 2025 by rpki-client