Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34362e34312e302f32342d3234203d3e2033353933.roa
File: 37342e34362e34312e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier: FzVNjERMBjwjXpqWgQUUealhi98eztZqbl5LdgSa7go=
Subject key identifier: BE:48:42:40:A9:92:E9:F6:54:D6:6D:AC:76:C9:46:70:82:ED:2C:40
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 527860F4583808160AA8E1122294A9A97BEBD585
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34362e34312e302f32342d3234203d3e2033353933.roa
Signing time: Thu 26 Oct 2023 04:43:45 +0000
ROA not before: Thu 26 Oct 2023 04:38:45 +0000
ROA not after: Thu 24 Oct 2024 04:43:45 +0000
asID: 3593
IP address blocks: 74.46.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:78:60:f4:58:38:08:16:0a:a8:e1:12:22:94:a9:a9:7b:eb:d5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Oct 26 04:38:45 2023 GMT
Not After : Oct 24 04:43:45 2024 GMT
Subject: CN=BE484240A992E9F654D66DAC76C9467082ED2C40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0f:57:cb:67:c6:23:1f:4d:5c:59:b3:76:7a:
0f:20:ff:ed:42:99:59:0f:30:44:85:75:50:9c:33:
2a:d4:52:e1:5d:f8:b1:76:75:50:2f:65:07:f0:fe:
c8:6e:83:70:75:54:0e:af:bd:45:90:bb:97:d4:52:
8b:66:9e:b9:74:4f:f1:9e:e6:a7:e6:6e:53:69:0a:
d6:b2:29:90:61:e2:07:a5:4c:c9:c8:f4:89:c0:5a:
93:fe:a6:b8:03:4c:a0:42:87:91:37:ac:5a:98:d1:
86:9e:7d:83:87:91:d6:91:78:12:95:ec:91:e4:19:
68:39:b1:f0:de:18:eb:ff:d3:67:11:b0:22:d6:08:
ad:23:d6:9c:f4:4b:02:cc:a3:fb:77:6a:fb:69:0e:
86:ff:3d:51:13:5e:34:43:dc:ce:03:84:27:4e:03:
9c:5e:08:61:e7:79:29:ea:7d:3a:8c:83:ef:16:51:
8b:fa:b6:3c:ae:6f:e8:92:94:ef:85:be:19:06:10:
7b:38:5b:86:6c:6c:10:21:6b:08:27:8b:68:26:f4:
79:fb:fe:bc:51:62:51:c5:76:ae:83:36:b3:a6:77:
6a:72:8f:4a:c9:11:4d:6c:d7:01:19:74:0d:88:53:
df:44:65:b7:4e:b0:c5:b0:70:ef:6c:ed:22:71:60:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:48:42:40:A9:92:E9:F6:54:D6:6D:AC:76:C9:46:70:82:ED:2C:40
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34362e34312e302f32342d3234203d3e2033353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.46.41.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:cb:fc:42:8d:d8:92:30:06:57:75:61:a7:22:4f:47:02:df:
79:fe:8d:bc:fa:1e:6c:b9:46:df:ae:a7:5f:fc:e4:50:48:5e:
82:67:84:ab:85:47:a9:63:58:7e:fc:a6:e9:cd:27:e6:ec:33:
0c:c6:f5:b2:70:d2:12:b2:94:c5:8a:33:cb:8d:26:38:12:71:
7d:44:13:2a:ca:45:9c:6e:43:e2:3c:47:fd:07:68:02:e5:b8:
3d:3c:70:fe:82:58:0a:80:10:95:f2:64:d4:93:33:a5:35:60:
28:f3:d6:5d:cb:99:66:21:45:f7:8a:13:e1:78:20:04:dc:64:
48:1e:af:ef:a0:e1:87:4e:fc:ec:51:74:3c:0a:29:78:e6:99:
cb:c2:17:97:87:b8:c9:18:28:d3:44:c8:19:7c:dd:13:f2:71:
2c:25:cd:a9:1c:bb:d3:26:2e:da:15:4e:6c:87:79:fe:e5:a4:
ba:fc:2a:cf:18:fc:7e:90:2b:ae:33:67:09:da:dd:b6:89:50:
c4:52:11:c0:7d:b6:23:1c:20:81:ab:fb:d0:82:36:d6:8c:5e:
22:c2:3a:ec:01:b9:16:3c:79:06:83:cb:32:1f:e7:5e:af:8a:
2b:92:77:23:e4:ff:c4:4e:4d:e9:32:40:34:82:6d:f2:8e:b1:
0c:1f:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:34:55 2025 by rpki-client