Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e35372e302f32342d3234203d3e2033353933.roa
File: 3230392e37342e35372e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier: FiBWlcdGmMcDi3tIWJcP70jGIPhNUsUnnNSpf7FLFXk=
Subject key identifier: 35:B3:CE:C4:CC:2D:E4:0E:69:D7:97:72:F4:4F:26:E7:33:29:48:89
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 027E6E1A47A661FEAD4047668D9AD8FA74CCA9A9
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e35372e302f32342d3234203d3e2033353933.roa
Signing time: Thu 26 Oct 2023 05:01:40 +0000
ROA not before: Thu 26 Oct 2023 04:56:40 +0000
ROA not after: Thu 24 Oct 2024 05:01:40 +0000
asID: 3593
IP address blocks: 209.74.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7e:6e:1a:47:a6:61:fe:ad:40:47:66:8d:9a:d8:fa:74:cc:a9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Oct 26 04:56:40 2023 GMT
Not After : Oct 24 05:01:40 2024 GMT
Subject: CN=35B3CEC4CC2DE40E69D79772F44F26E733294889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:b2:09:df:3b:8d:2f:05:86:04:9d:40:a5:
80:fe:2d:fd:17:b3:e0:4d:45:ac:49:e2:ef:53:39:
12:38:74:07:56:36:8b:9d:99:93:61:ab:4a:e5:a4:
9c:6d:07:03:4c:94:8f:03:1e:20:7c:65:8c:e3:b1:
a8:b8:48:14:ee:81:a1:8a:7e:b5:8f:8c:42:38:ff:
83:87:03:87:23:88:73:d9:c2:d3:5c:b0:90:00:f6:
22:0b:fd:f4:4b:5a:c7:c3:18:db:ee:12:07:62:94:
89:a6:18:b8:a3:52:3c:76:13:4a:80:c8:a2:82:ab:
88:32:b5:a0:3d:8d:3c:69:3a:3f:ed:b4:2e:77:7b:
4e:4a:bb:28:ba:39:40:2c:ca:48:cc:d2:92:39:e6:
bb:3d:46:ec:af:a6:2b:af:cb:5f:51:89:3f:36:68:
73:52:03:89:d7:d5:44:13:25:aa:f4:fc:b0:c0:cf:
a2:49:e8:35:cb:d5:04:b3:a6:d2:23:f0:bd:92:eb:
56:09:40:af:a4:3c:5f:09:d4:d7:94:49:cb:a9:d0:
4c:b4:f8:06:72:d8:7b:71:20:e8:eb:77:78:46:17:
72:d7:4f:9c:dc:ec:15:44:1d:5d:bb:e7:30:6e:f8:
74:6b:6e:b7:e3:ca:2f:49:6e:60:fe:48:15:83:e2:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:CE:C4:CC:2D:E4:0E:69:D7:97:72:F4:4F:26:E7:33:29:48:89
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e35372e302f32342d3234203d3e2033353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.74.57.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:df:a2:69:e8:49:e5:47:f0:df:c0:eb:d5:48:0e:b6:60:02:
66:47:de:7e:c3:70:6d:92:44:dc:91:df:c6:c1:ba:2a:ac:2e:
d8:f6:73:36:bc:78:ee:04:3a:08:1a:40:c2:a3:c9:ef:f7:53:
11:1e:9f:18:a3:dc:5d:e6:d0:c2:e3:c1:9d:ad:b2:a8:bf:31:
ce:c7:91:b3:09:aa:a3:b2:ae:f3:b2:75:1f:f8:06:05:d2:36:
bc:78:2f:bb:5f:66:be:99:fd:6a:ce:b2:52:13:e7:6d:81:1f:
43:f4:3a:17:55:88:2b:ff:1a:d7:6a:68:6e:a6:d0:81:fc:5f:
d7:31:1c:71:16:f7:0e:b4:d9:2e:ff:84:39:f9:bc:d8:ea:42:
20:a5:31:87:6d:6e:47:cb:36:b3:82:fe:58:84:33:4b:02:8b:
95:37:3f:5a:8a:eb:da:73:d7:c5:6e:c2:32:25:9f:1c:14:cc:
81:d3:b6:85:36:81:43:3e:d8:e3:84:9a:c4:8f:27:65:40:3f:
e9:ec:a3:e0:1d:90:70:b3:5b:4c:ae:87:0b:48:69:63:11:18:
d2:62:5d:f4:cb:0c:b3:7e:b7:eb:9f:93:39:21:27:8e:22:f4:
75:d6:ab:30:cd:74:41:e5:b9:c9:50:0a:4c:34:74:a0:cb:71:
38:a4:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:31:57 2025 by rpki-client