Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa
File: 3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa (raw, json)
Hash identifier: dKSv+ArGniPspnOB74XUKQcgn/1VVazCgq8Pr0oRpHg=
Subject key identifier: 89:D6:0A:4D:6B:7C:56:9A:9B:A1:1A:05:3B:41:3C:09:A1:61:CD:F2
Certificate issuer: /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial: 65FEEB3B9EB552A93448CA240C7468C53EAB1722
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa
Signing time: Sun 29 Mar 2026 03:27:33 +0000
ROA not before: Sun 29 Mar 2026 03:22:33 +0000
ROA not after: Sun 28 Mar 2027 03:27:33 +0000
asID: 133210
IP address blocks: 167.253.47.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:fe:eb:3b:9e:b5:52:a9:34:48:ca:24:0c:74:68:c5:3e:ab:17:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Validity
Not Before: Mar 29 03:22:33 2026 GMT
Not After : Mar 28 03:27:33 2027 GMT
Subject: CN=89D60A4D6B7C569A9BA11A053B413C09A161CDF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:a1:4a:b7:76:88:d8:97:c2:f2:b8:c9:81:
53:15:a8:40:77:5d:63:d1:01:8c:c7:c2:19:21:cd:
1c:47:2b:e8:44:9e:67:71:4f:86:c6:66:49:d5:ae:
22:11:a7:d2:2b:3a:3c:bc:d7:5c:1b:2d:9e:c5:c3:
48:6c:c5:8e:2d:a6:68:8e:0d:03:8a:9d:dc:07:8f:
49:3b:eb:ce:f2:43:92:5f:47:8e:8f:a9:ef:46:08:
f7:bc:d3:c8:b3:6c:e6:1f:7f:ac:24:7c:0f:71:d0:
f4:9b:55:96:45:6a:5a:6c:c8:54:81:a5:09:af:29:
8a:24:59:be:7a:85:0a:93:2f:9c:59:a7:14:7c:b0:
88:18:9d:75:31:74:2e:39:4a:5b:88:d0:41:8e:4c:
a9:7e:55:f1:3b:6b:e9:08:95:84:4f:56:f5:60:44:
c3:74:e6:af:ce:af:ed:62:28:0d:73:02:0c:52:06:
f6:9a:15:99:4f:65:db:91:e6:71:49:06:a5:d4:b2:
36:45:ba:82:89:ff:69:34:8c:81:8d:4d:60:f2:31:
9c:95:ff:41:8d:d3:d7:94:82:a9:da:c9:6e:14:08:
ac:93:e7:2a:d1:3f:8c:bf:1c:58:3a:db:70:8b:8e:
7a:0f:44:e1:3e:9f:7d:be:9c:fc:c9:fe:76:35:63:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D6:0A:4D:6B:7C:56:9A:9B:A1:1A:05:3B:41:3C:09:A1:61:CD:F2
X509v3 Authority Key Identifier:
keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.253.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b4:a2:96:78:49:5d:9b:f3:3f:02:a7:79:ba:c9:2b:1d:93:
ca:84:f8:2b:d3:e7:02:8e:a3:cc:61:41:ec:92:bf:38:a8:99:
39:06:bd:45:fc:70:a3:da:7f:ce:82:af:d6:20:a6:e6:0c:83:
aa:9e:2d:12:34:03:cc:d7:4a:63:24:7f:c2:a4:a8:b5:49:49:
14:03:e1:f3:9c:78:76:88:3e:26:75:13:03:59:f3:dd:d4:b3:
62:a6:d3:39:6d:79:83:d4:7e:a5:2b:56:0f:1d:c8:52:7e:67:
8c:97:9e:ee:81:26:e3:0b:ff:89:92:94:ff:ca:ce:7a:33:6b:
27:21:b1:54:f3:c4:3a:ce:88:de:d3:b2:0d:35:b7:45:0c:a7:
f2:7a:1c:62:cd:89:4c:37:08:5d:af:85:bf:de:52:1d:88:6e:
0b:7d:e9:28:7e:ac:85:57:d7:c0:5a:d3:74:6b:c7:80:ea:4c:
c0:ef:36:07:7b:cb:d5:03:75:e3:71:96:8b:75:d4:f4:c1:27:
58:1f:a2:67:47:66:af:d8:a9:29:50:4a:f7:4c:3a:6a:8f:7a:
99:91:1d:64:0f:fe:f1:f9:f0:1b:34:41:d1:dc:30:3f:2c:81:
30:3f:90:dc:c1:df:06:fe:f0:96:93:39:25:e2:29:8a:52:97:
b3:9b:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:28:47 2026 by rpki-client