Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132342e3230322e302f32342d3234203d3e2035363530.roa
File: 35302e3132342e3230322e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: 3nDEyteDR/x9hahIWvW+CiG5RB2XhbZYxlpu2iuOOew=
Subject key identifier: 47:8E:50:74:9F:4B:20:57:99:1A:E0:42:5A:06:3B:84:2A:BC:79:B5
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 4ADFD7976C18278480EE0C0835A1AFF4B87EAEB8
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132342e3230322e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:34:28 +0000
ROA not before: Thu 02 Nov 2023 11:29:28 +0000
ROA not after: Thu 31 Oct 2024 11:34:28 +0000
asID: 5650
IP address blocks: 50.124.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:df:d7:97:6c:18:27:84:80:ee:0c:08:35:a1:af:f4:b8:7e:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Nov 2 11:29:28 2023 GMT
Not After : Oct 31 11:34:28 2024 GMT
Subject: CN=478E50749F4B2057991AE0425A063B842ABC79B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:ca:2b:26:e4:49:ff:33:e0:06:8e:7c:4d:
c1:49:72:ac:14:e4:b1:91:f8:c7:a9:7d:ad:1d:ec:
fd:d7:11:1a:d8:3d:ae:6f:9e:73:4d:42:9e:ef:c7:
df:03:0e:5b:55:54:c1:0f:53:6e:b2:1f:07:66:13:
52:8c:0b:8c:5a:a7:b3:6b:fa:f9:b6:dc:5f:e9:fa:
49:15:36:fd:aa:8a:17:88:36:87:cf:d4:de:a0:d4:
e9:d3:c0:0e:da:31:ef:6b:60:d5:20:21:c3:13:1b:
c9:0d:61:7e:ea:ca:c3:f8:1a:aa:fc:5e:5d:a3:d0:
ae:a2:38:9c:8f:c0:dc:da:85:f6:61:c2:c5:cf:3d:
c3:bf:d7:be:60:9b:ea:be:93:c5:34:b0:dd:98:b4:
9d:2d:ee:77:03:07:fa:d7:44:7a:d8:60:27:90:07:
a2:8e:0f:8d:cc:65:b4:4c:e1:96:43:95:84:d1:b6:
df:ef:bf:05:86:51:be:03:a8:fe:3e:b0:0a:b7:9c:
38:31:f5:87:00:7c:ad:b2:24:d0:30:11:a8:68:e1:
c3:60:ec:99:39:ef:b3:3b:fd:91:d6:8c:20:6b:78:
3a:3b:9a:a4:1f:c0:66:f9:2e:f0:e8:72:03:1f:a3:
e1:83:8a:58:eb:fd:b0:35:1f:29:91:21:c9:9f:45:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:50:74:9F:4B:20:57:99:1A:E0:42:5A:06:3B:84:2A:BC:79:B5
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132342e3230322e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.124.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ff:10:4d:93:b2:5b:b5:3e:e8:fd:b0:bb:86:b8:f0:e1:10:
69:ac:00:78:74:d6:2a:50:c2:e4:c6:3a:37:7a:5a:a6:be:03:
48:83:fa:db:5a:42:51:c8:b9:57:a4:a5:92:c9:5a:6f:c6:3a:
06:ff:ea:98:98:aa:0f:e8:dc:85:7f:27:45:02:ac:2f:a2:e9:
77:58:cb:72:68:5f:63:d4:eb:df:96:96:52:b8:8d:22:72:e2:
5f:64:f6:6c:86:44:51:94:2b:c1:6a:61:13:cf:a1:bc:63:cd:
5b:54:b4:78:67:3f:5f:53:e0:a6:79:26:82:f2:29:eb:7e:7e:
f4:e2:68:76:18:ab:c4:1e:66:31:b2:6d:9b:79:6f:6b:d3:e9:
e1:b4:4d:f1:fa:28:34:1a:2b:4b:a1:17:04:e4:38:8b:8f:ed:
13:5b:f0:38:1b:51:e7:40:ec:2c:3d:29:0a:a7:0a:81:77:cf:
78:52:78:d6:c0:c6:cf:d0:16:6e:1c:3d:55:cf:48:cc:1a:f9:
ba:cb:88:7a:dc:1e:18:6c:c4:7d:52:45:70:e3:49:50:38:c6:
ec:2e:a5:45:82:01:0a:8b:bf:e6:9a:24:98:7e:50:e9:f3:3e:
32:07:93:82:64:35:48:e9:4d:8e:84:46:7e:c4:14:78:09:ab:
f5:f3:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:44:07 2025 by rpki-client