Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3130342e3132342e302f32342d3234203d3e203236313237.roa
File: 35302e3130342e3132342e302f32342d3234203d3e203236313237.roa (raw, json)
Hash identifier: ME0o75Jnmhu4Z+JoM2voqG52YGflsasKwdqW5fT1zd8=
Subject key identifier: BD:96:15:69:31:1B:9D:0B:0C:9C:1B:C7:B9:BE:34:7F:EE:93:44:83
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 778936AAAF616BCC1DD5A447B7C5DC4726A28AA8
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3130342e3132342e302f32342d3234203d3e203236313237.roa
Signing time: Wed 12 Jul 2023 13:14:59 +0000
ROA not before: Wed 12 Jul 2023 13:09:59 +0000
ROA not after: Wed 10 Jul 2024 13:14:59 +0000
asID: 26127
IP address blocks: 50.104.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:89:36:aa:af:61:6b:cc:1d:d5:a4:47:b7:c5:dc:47:26:a2:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Jul 12 13:09:59 2023 GMT
Not After : Jul 10 13:14:59 2024 GMT
Subject: CN=BD961569311B9D0B0C9C1BC7B9BE347FEE934483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:7b:b0:4f:01:f2:df:36:47:32:2e:ba:8b:
80:7f:cc:f0:22:30:2b:86:32:24:bb:98:7d:77:6d:
a8:af:f9:0c:c4:a2:ce:34:31:54:a5:a8:2e:db:42:
db:83:39:22:29:8b:eb:de:79:5d:c3:51:3e:47:6c:
e7:be:0d:1e:6f:3f:92:13:98:b3:8f:eb:ff:58:45:
dd:e9:30:e8:4a:b2:a5:cf:7f:0e:13:51:f4:a0:72:
b3:bd:86:1d:cd:b8:a0:11:3e:b4:3b:e9:56:d3:23:
e6:19:86:2c:c7:96:13:74:ff:5b:db:d3:3f:04:64:
96:82:5f:ca:3a:2e:d2:9d:0a:d4:6d:ed:37:f9:f6:
fd:37:8a:75:c8:22:57:f9:4b:c7:1d:60:56:dd:a5:
60:86:ea:49:76:2e:f9:79:f1:b0:45:35:9b:7b:25:
32:80:c0:87:21:ff:15:75:87:e4:cf:d8:03:d4:34:
43:31:d5:5b:79:ca:7e:cc:bd:eb:de:dd:63:7b:93:
ea:79:b8:92:bd:30:22:36:0a:d4:d2:2a:59:12:16:
6b:af:1a:c6:81:ab:26:3a:03:ba:3d:7e:66:da:70:
3f:f1:43:5d:37:ab:85:1d:cf:ca:5d:77:89:4e:52:
aa:56:fb:da:a8:9b:03:66:72:e4:8b:89:fd:45:55:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:96:15:69:31:1B:9D:0B:0C:9C:1B:C7:B9:BE:34:7F:EE:93:44:83
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3130342e3132342e302f32342d3234203d3e203236313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.104.124.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0c:33:4e:3c:3b:65:9f:5b:c8:b7:24:f7:85:41:63:26:59:
49:f2:88:fb:61:ab:91:10:b0:f1:52:3e:e4:cf:04:80:bd:ff:
08:36:29:38:cf:1b:d8:e1:b4:41:f2:ab:ea:79:20:f6:12:07:
dc:68:f1:c6:ed:a6:3d:be:25:2d:5b:24:e8:98:fd:f6:02:68:
49:c2:e3:56:19:af:66:ff:ef:49:ed:79:af:ee:86:f0:bf:e1:
98:96:ca:45:e3:a8:2c:43:86:f9:1d:45:71:5e:61:a4:ea:51:
36:7e:79:03:30:4e:0c:8a:3b:6d:b7:23:a9:8e:74:df:e9:e1:
0d:62:39:12:00:70:0f:67:80:75:de:4b:a1:22:47:6f:83:2e:
5b:f6:1b:c9:9b:17:ed:ad:97:35:78:15:d3:7b:40:de:1c:ee:
85:0b:db:49:74:05:49:4f:38:cd:08:1d:79:4c:af:02:19:9f:
00:39:68:5d:8a:d4:d1:38:59:20:1a:0e:04:76:d3:b9:02:23:
ed:72:7d:20:91:ae:07:f6:d9:ce:17:8c:59:1d:bd:2d:da:b6:
90:91:2c:f0:11:cc:e2:c0:0e:77:42:1a:a5:82:24:aa:ce:11:
2a:6a:48:5c:f7:b2:cc:33:39:fb:58:45:17:d0:de:f0:14:13:
c6:d3:ef:fa
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUd4k2qq9ha8wd1aRHt8XcRyaiiqgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMwNzEyMTMwOTU5WhcNMjQwNzEwMTMxNDU5
WjAzMTEwLwYDVQQDEyhCRDk2MTU2OTMxMUI5RDBCMEM5QzFCQzdCOUJFMzQ3RkVF
OTM0NDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgx7sE8B8t82
RzIuuouAf8zwIjArhjIku5h9d22or/kMxKLONDFUpagu20LbgzkiKYvr3nldw1E+
R2znvg0ebz+SE5izj+v/WEXd6TDoSrKlz38OE1H0oHKzvYYdzbigET60O+lW0yPm
GYYsx5YTdP9b29M/BGSWgl/KOi7SnQrUbe03+fb9N4p1yCJX+UvHHWBW3aVghupJ
di75efGwRTWbeyUygMCHIf8VdYfkz9gD1DRDMdVbecp+zL3r3t1je5PqebiSvTAi
NgrU0ipZEhZrrxrGgasmOgO6PX5m2nA/8UNdN6uFHc/KXXeJTlKqVvvaqJsDZnLk
i4n9RVVbIwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFL2WFWkxG50LDJwbx7m+NH/u
k0SDMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi80LzM1MzAyZTMxMzAzNDJlMzEzMjM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzNjMxMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADJofDANBgkqhkiG9w0BAQsF
AAOCAQEAQgwzTjw7ZZ9byLck94VBYyZZSfKI+2GrkRCw8VI+5M8EgL3/CDYpOM8b
2OG0QfKr6nkg9hIH3Gjxxu2mPb4lLVsk6Jj99gJoScLjVhmvZv/vSe15r+6G8L/h
mJbKReOoLEOG+R1FcV5hpOpRNn55AzBODIo7bbcjqY503+nhDWI5EgBwD2eAdd5L
oSJHb4MuW/YbyZsX7a2XNXgV03tA3hzuhQvbSXQFSU84zQgdeUyvAhmfADloXYrU
0ThZIBoOBHbTuQIj7XJ9IJGuB/bZzheMWR29Ldq2kJEs8BHM4sAOd0IapYIkqs4R
KmpIXPeyzDM5+1hFF9De8BQTxtPv+g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:36:00 2025 by rpki-client