Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS204843.roa
File: AS204843.roa (raw, json)
Hash identifier: XeJAjnzbxBn95TAf5zh6ebe+X2I7bG/PqB3Pfo0K7Qg=
Subject key identifier: 61:60:0F:59:4C:AC:18:2F:10:C7:01:42:08:1F:48:93:13:7C:F9:0D
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 717A136CEE9C537FDD6B31669C0E8D7DF0DF3D99
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS204843.roa
Signing time: Fri 26 May 2023 18:16:44 +0000
ROA not before: Fri 26 May 2023 18:11:44 +0000
ROA not after: Fri 24 May 2024 18:16:44 +0000
asID: 204843
IP address blocks: 64.50.164.0/24 maxlen: 24
67.210.119.0/24 maxlen: 24
209.200.248.0/24 maxlen: 24
209.200.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:7a:13:6c:ee:9c:53:7f:dd:6b:31:66:9c:0e:8d:7d:f0:df:3d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: May 26 18:11:44 2023 GMT
Not After : May 24 18:16:44 2024 GMT
Subject: CN=61600F594CAC182F10C70142081F4893137CF90D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:7f:0f:5a:34:75:2c:a4:7f:b3:64:d8:ef:
a2:58:da:8e:90:3d:a0:f4:29:9a:72:72:cf:f0:56:
a3:3e:c6:26:5f:cd:72:55:d8:30:d2:08:0b:0c:0a:
df:5e:6a:c0:bc:21:36:b2:f0:d0:a8:fe:9c:56:16:
24:91:d9:e6:e9:fe:c7:ea:31:06:dd:57:a6:50:6f:
7c:2a:2d:88:b2:9e:b3:e2:92:93:2d:38:db:75:b2:
1c:09:e5:df:6e:0f:8e:f0:e9:3b:6b:6b:71:b2:51:
cc:8c:a5:57:85:c2:61:16:47:e8:27:b8:49:f9:b9:
86:85:fe:f5:2a:8e:9c:fb:68:72:4f:3d:89:19:44:
dc:e5:e8:13:94:b6:a0:9e:60:68:b0:65:b0:82:2c:
5b:ae:f9:68:f0:db:af:63:65:70:21:0b:33:ed:17:
33:43:72:8e:03:07:0c:90:f3:63:e7:c3:db:85:19:
bd:c7:b3:6c:65:1d:73:06:e5:a7:fb:ab:d8:08:c3:
64:d3:e0:f2:e8:35:12:a7:fc:5f:a4:cb:62:dd:f5:
e1:9f:13:21:5b:0b:1a:cb:c5:33:39:0a:d8:71:e2:
16:46:0d:64:40:db:fe:35:95:ee:3d:47:a9:99:1b:
21:db:b0:32:c7:83:bd:65:67:80:5c:06:1b:7c:90:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:60:0F:59:4C:AC:18:2F:10:C7:01:42:08:1F:48:93:13:7C:F9:0D
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS204843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.50.164.0/24
67.210.119.0/24
209.200.248.0/24
209.200.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6b:27:a0:70:d3:dc:89:b6:1d:62:b9:7a:9b:4e:70:9a:fb:
5b:9b:80:cc:0d:27:f0:33:4c:d6:c2:9b:65:96:a1:b3:d5:d2:
08:28:7a:f5:8a:66:ed:ec:f5:68:74:ea:51:46:ee:1a:35:89:
d6:7a:40:e6:82:53:4d:03:4a:6c:9a:63:34:27:7c:a5:aa:7c:
f2:46:d5:25:00:4b:5d:cb:5f:34:9b:c2:fc:cf:69:90:13:a4:
7a:6e:ed:0e:87:91:6c:25:04:a1:fe:19:cb:6a:57:7c:7d:70:
66:9a:7b:70:d1:d4:64:73:40:ad:9f:39:eb:b3:79:b2:47:91:
db:a7:91:24:54:d7:69:c9:eb:6b:59:cc:fc:ca:10:de:bc:f6:
ae:2e:fb:31:ed:e8:eb:85:80:12:06:c8:e1:5d:23:80:18:26:
16:59:c8:fc:9f:b1:5e:2c:66:86:a0:32:bc:6c:a8:3a:0e:4e:
a9:b0:06:1d:9c:a0:0e:20:b9:5d:a2:b9:92:f5:7c:46:36:2c:
3c:ae:9a:ac:c2:26:81:de:34:b1:5e:84:7b:c9:2c:4e:10:fb:
7c:fe:4f:6a:dd:9d:20:b3:1f:86:11:21:ee:76:2a:dd:fe:7c:
52:5a:f6:4c:bb:2d:4e:7b:6c:3e:b4:10:c5:ee:96:3a:d0:c0:
2e:e1:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:47:18 2025 by rpki-client