Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3235322e302f32342d3234203d3e2033353933.roa
File: 37342e34342e3235322e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier: Gx32piExNZ7hApW3CNVEAcxiPAP70E98BfmOxM65/xA=
Subject key identifier: D6:A5:53:B5:E4:75:38:8C:A6:7D:BA:C8:AA:3B:E6:93:94:F1:58:13
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 5973695E30D3E120C85141F8E660FFC5B67510D2
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3235322e302f32342d3234203d3e2033353933.roa
Signing time: Thu 26 Oct 2023 04:43:29 +0000
ROA not before: Thu 26 Oct 2023 04:38:29 +0000
ROA not after: Thu 24 Oct 2024 04:43:29 +0000
asID: 3593
IP address blocks: 74.44.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:73:69:5e:30:d3:e1:20:c8:51:41:f8:e6:60:ff:c5:b6:75:10:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Oct 26 04:38:29 2023 GMT
Not After : Oct 24 04:43:29 2024 GMT
Subject: CN=D6A553B5E475388CA67DBAC8AA3BE69394F15813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:a8:70:49:f8:04:af:80:60:a7:7d:40:a8:
53:b6:ed:f0:74:94:ff:02:46:5b:01:d0:c3:89:8d:
fa:4f:64:f2:96:2c:7d:2f:7a:bc:a3:01:c6:a9:03:
26:f4:93:d3:47:a4:05:72:b1:6c:55:a1:b2:8a:d3:
a8:c7:b1:8f:f5:4f:9b:83:99:e2:10:9d:fa:ec:27:
61:1c:8d:a0:54:90:d5:83:90:45:0e:1b:ae:e7:fa:
1a:4c:9d:44:a2:48:e2:f1:e4:7c:3f:0a:5e:c2:25:
a4:6d:11:ac:d8:e3:37:c7:d0:2d:83:ab:d8:71:6b:
91:34:c6:59:e1:fa:44:3d:46:23:66:21:ec:83:0d:
b4:e7:7d:b4:47:e6:c4:b2:71:ba:2e:ce:0f:0f:70:
91:d1:1e:b2:d7:38:0a:ce:33:b1:1c:e2:e8:1c:2c:
63:0f:af:b5:2f:ac:9f:9c:28:b8:9d:6e:25:f6:7a:
f4:57:f7:95:cf:ac:c7:83:d0:4b:86:13:8a:b8:4d:
40:c9:6c:a6:f7:59:49:ae:3e:ec:0b:a2:8d:1a:e8:
66:0e:84:15:88:40:83:b9:44:dd:8d:40:48:f6:f9:
f3:07:86:e6:98:93:e3:a0:f8:36:3c:ea:52:de:ab:
00:f4:c9:72:75:1d:94:0b:74:2d:88:8e:55:ab:01:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:53:B5:E4:75:38:8C:A6:7D:BA:C8:AA:3B:E6:93:94:F1:58:13
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3235322e302f32342d3234203d3e2033353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.44.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:14:f5:4a:47:7e:d2:14:d5:23:b0:c9:e9:a7:37:7c:05:88:
7e:17:bc:e3:7d:8f:d2:3d:f3:87:92:7f:28:58:80:d3:16:e0:
78:7d:78:3e:3e:c5:14:91:fc:ac:35:16:0d:db:1d:1e:80:37:
1b:83:6c:e4:59:e6:6e:3f:29:80:d8:6b:ee:8b:ae:80:94:e8:
81:5d:f0:9d:06:f3:2c:10:ad:5e:ba:4f:b2:ef:5c:b9:30:71:
9c:3d:8f:3e:9e:42:5d:8c:2c:41:be:6e:3c:e1:ba:05:cf:c3:
43:ea:41:15:9f:91:04:5d:91:c5:98:3e:76:db:99:14:10:d2:
a0:36:1b:95:80:6f:d0:58:db:44:ba:d8:b6:85:6b:b0:cf:8e:
2b:7d:73:54:14:25:ec:59:1c:22:92:fc:6c:06:a7:21:0f:bd:
08:cc:36:13:cd:1f:6c:2d:ec:03:b0:c8:21:83:9a:32:7d:cc:
7e:68:d9:12:19:ab:78:51:61:01:41:ac:ed:ed:e4:54:7e:6c:
a3:10:80:ea:f8:92:64:c6:2e:99:67:71:05:6a:af:b4:ee:b6:
0e:f1:ea:f6:47:e2:7e:3c:de:4c:b0:38:a4:33:a7:4d:cc:12:
28:97:54:34:5a:c6:00:3c:00:52:2a:0e:88:b8:eb:34:00:fb:
56:f1:17:fb
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUWXNpXjDT4SDIUUH45mD/xbZ1ENIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMxMDI2MDQzODI5WhcNMjQxMDI0MDQ0MzI5
WjAzMTEwLwYDVQQDEyhENkE1NTNCNUU0NzUzODhDQTY3REJBQzhBQTNCRTY5Mzk0
RjE1ODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbOocEn4BK+A
YKd9QKhTtu3wdJT/AkZbAdDDiY36T2Tylix9L3q8owHGqQMm9JPTR6QFcrFsVaGy
itOox7GP9U+bg5niEJ367CdhHI2gVJDVg5BFDhuu5/oaTJ1Eokji8eR8PwpewiWk
bRGs2OM3x9Atg6vYcWuRNMZZ4fpEPUYjZiHsgw205320R+bEsnG6Ls4PD3CR0R6y
1zgKzjOxHOLoHCxjD6+1L6yfnCi4nW4l9nr0V/eVz6zHg9BLhhOKuE1AyWym91lJ
rj7sC6KNGuhmDoQViECDuUTdjUBI9vnzB4bmmJPjoPg2POpS3qsA9MlydR2UC3Qt
iI5VqwHWDwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNalU7XkdTiMpn26yKo75pOU
8VgTMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzQvMzczNDJlMzQzNDJlMzIzNTMyMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzMzNTM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKLPwwDQYJKoZIhvcNAQELBQADggEB
AAsU9UpHftIU1SOwyemnN3wFiH4XvON9j9I984eSfyhYgNMW4Hh9eD4+xRSR/Kw1
Fg3bHR6ANxuDbORZ5m4/KYDYa+6LroCU6IFd8J0G8ywQrV66T7LvXLkwcZw9jz6e
Ql2MLEG+bjzhugXPw0PqQRWfkQRdkcWYPnbbmRQQ0qA2G5WAb9BY20S62LaFa7DP
jit9c1QUJexZHCKS/GwGpyEPvQjMNhPNH2wt7AOwyCGDmjJ9zH5o2RIZq3hRYQFB
rO3t5FR+bKMQgOr4kmTGLplncQVqr7Tutg7x6vZH4n483kywOKQzp03MEiiXVDRa
xgA8AFIqDoi46zQA+1bxF/s=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:09:42 2025 by rpki-client