Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34352e3233312e302f32342d3234203d3e2035363530.roa
File: 37342e34352e3233312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: eWGfNCFVpJwUQ64v31f8biXBdlXX3k//ozHJ5VaYqGI=
Subject key identifier: DF:A4:D1:2E:F7:1C:99:D6:0D:04:07:09:AC:C4:2E:AC:CE:E4:89:0F
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 18616755FF4610D0969103754F1F222CDEFB2C08
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34352e3233312e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:36:07 +0000
ROA not before: Thu 02 Nov 2023 11:31:07 +0000
ROA not after: Thu 31 Oct 2024 11:36:07 +0000
asID: 5650
IP address blocks: 74.45.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:61:67:55:ff:46:10:d0:96:91:03:75:4f:1f:22:2c:de:fb:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Nov 2 11:31:07 2023 GMT
Not After : Oct 31 11:36:07 2024 GMT
Subject: CN=DFA4D12EF71C99D60D040709ACC42EACCEE4890F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:5e:45:e0:1b:36:85:72:7f:69:e6:06:41:
5d:bc:81:fd:da:76:8d:7c:77:8c:d5:95:b2:c4:62:
a4:36:e2:4d:7a:d8:0e:0d:01:12:f4:72:09:84:1e:
70:a5:07:8e:d8:71:35:af:32:fd:31:b1:c8:09:ec:
d6:07:45:43:18:97:8f:39:e0:12:dd:92:56:6a:67:
61:ca:8c:63:72:fd:64:a8:9b:33:fe:c5:80:9e:85:
1d:58:ec:1b:07:25:38:4d:33:d6:73:2f:23:3c:0b:
ac:75:ef:b3:cb:fd:04:89:b3:8d:d3:7b:6b:cf:c4:
7e:22:3d:71:fc:a5:13:00:a3:46:d7:0a:40:3d:43:
2b:fa:ac:c5:a5:34:b0:31:7c:5f:e9:d5:ec:f5:e1:
c5:ee:06:38:e7:cc:be:41:8f:de:87:42:1b:4e:4a:
2e:4c:f9:c7:9e:24:13:fb:c4:cc:d7:d9:4b:04:b3:
c8:a8:8c:58:9b:0b:29:06:65:c8:91:28:ee:93:61:
49:f0:b4:d0:8a:27:45:5b:2f:60:aa:1a:87:97:6f:
c1:30:05:66:9b:f1:63:8e:c7:9d:7f:ca:d3:e9:e5:
d7:d7:af:16:32:7b:ec:00:39:be:ff:fc:ed:8f:dc:
2a:a0:d6:bf:c3:4e:4f:3f:0d:59:9d:0c:68:1a:cd:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:D1:2E:F7:1C:99:D6:0D:04:07:09:AC:C4:2E:AC:CE:E4:89:0F
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34352e3233312e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.45.231.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a7:e8:70:d3:05:7a:f2:50:81:fc:63:5b:52:2e:59:2d:20:
15:f9:03:52:35:90:5d:ce:52:c2:f7:af:b4:0e:89:99:78:70:
5f:d1:44:c6:11:36:ea:cd:69:a4:19:da:cd:7c:81:0c:19:7d:
a7:b2:94:72:0f:82:ef:d0:9b:0f:6a:01:be:1c:9e:98:2c:e9:
8a:21:83:91:6e:e2:cf:15:28:d5:fc:d3:54:12:12:1e:9a:2f:
e3:75:b0:b0:33:38:45:8f:7e:16:62:1b:cd:ee:43:ec:94:46:
88:fb:07:a0:6b:d3:2e:9f:f1:d4:c2:1d:5b:c2:e1:54:df:24:
7f:cb:b5:9d:b8:f1:c4:87:84:66:88:09:38:27:58:93:8d:25:
c0:5a:97:7e:39:5f:0a:7a:e0:f3:8c:9c:e9:5f:55:bc:bd:82:
1f:27:76:7f:13:bc:87:9e:69:b9:66:e2:2f:1b:81:78:a8:22:
5a:a7:dd:5d:c2:54:bd:9a:96:6a:cb:6e:a2:cd:cf:3b:cf:58:
d1:d1:bc:d8:f2:d7:79:1f:ba:95:bf:0a:70:d9:76:fe:0d:17:
b1:1a:44:a9:99:c3:e7:8b:10:e5:0f:0c:57:65:93:2f:f0:b6:
02:fb:c7:1e:91:86:a0:63:b6:b9:c3:6a:90:d4:ac:d5:dc:df:
c6:51:87:9d
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUGGFnVf9GENCWkQN1Tx8iLN77LAgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMxMTAyMTEzMTA3WhcNMjQxMDMxMTEzNjA3
WjAzMTEwLwYDVQQDEyhERkE0RDEyRUY3MUM5OUQ2MEQwNDA3MDlBQ0M0MkVBQ0NF
RTQ4OTBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VteReAbNoVy
f2nmBkFdvIH92naNfHeM1ZWyxGKkNuJNetgODQES9HIJhB5wpQeO2HE1rzL9MbHI
CezWB0VDGJePOeAS3ZJWamdhyoxjcv1kqJsz/sWAnoUdWOwbByU4TTPWcy8jPAus
de+zy/0EibON03trz8R+Ij1x/KUTAKNG1wpAPUMr+qzFpTSwMXxf6dXs9eHF7gY4
58y+QY/eh0IbTkouTPnHniQT+8TM19lLBLPIqIxYmwspBmXIkSjuk2FJ8LTQiidF
Wy9gqhqHl2/BMAVmm/Fjjsedf8rT6eXX168WMnvsADm+//ztj9wqoNa/w05PPw1Z
nQxoGs298wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFN+k0S73HJnWDQQHCazELqzO
5IkPMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzQvMzczNDJlMzQzNTJlMzIzMzMxMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKLecwDQYJKoZIhvcNAQELBQADggEB
AHKn6HDTBXryUIH8Y1tSLlktIBX5A1I1kF3OUsL3r7QOiZl4cF/RRMYRNurNaaQZ
2s18gQwZfaeylHIPgu/Qmw9qAb4cnpgs6Yohg5Fu4s8VKNX801QSEh6aL+N1sLAz
OEWPfhZiG83uQ+yURoj7B6Br0y6f8dTCHVvC4VTfJH/LtZ248cSHhGaICTgnWJON
JcBal345Xwp64POMnOlfVby9gh8ndn8TvIeeablm4i8bgXioIlqn3V3CVL2almrL
bqLNzzvPWNHRvNjy13kfupW/CnDZdv4NF7EaRKmZw+eLEOUPDFdlky/wtgL7xx6R
hqBjtrnDapDUrNXc38ZRh50=
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:20:16 2025 by rpki-client