Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203139353231.roa
File: 3136372e3235332e34372e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier: xjT9fAGnxEY1uUc2MDlXO60E7/C7bPFK/SNkMBUSPFw=
Subject key identifier: 35:7F:BD:BE:18:73:97:3F:0E:5D:17:E2:29:B0:25:77:CF:F9:AB:7C
Certificate issuer: /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial: 52CCFB31888B5E9E148FF737D56C0D5D515A87A3
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203139353231.roa
Signing time: Sun 29 Mar 2026 03:27:34 +0000
ROA not before: Sun 29 Mar 2026 03:22:34 +0000
ROA not after: Sun 28 Mar 2027 03:27:34 +0000
asID: 19521
IP address blocks: 167.253.47.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cc:fb:31:88:8b:5e:9e:14:8f:f7:37:d5:6c:0d:5d:51:5a:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Validity
Not Before: Mar 29 03:22:34 2026 GMT
Not After : Mar 28 03:27:34 2027 GMT
Subject: CN=357FBDBE1873973F0E5D17E229B02577CFF9AB7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:fc:17:e2:7b:18:c8:55:58:96:22:5d:2e:
ca:0f:20:b3:4f:c5:e0:0d:ce:c0:da:02:9c:34:76:
74:3e:ac:97:83:43:19:10:17:09:89:40:a1:ab:0a:
28:70:39:47:77:e8:bb:93:c8:e1:63:47:ae:0e:e6:
8a:5b:2a:32:17:7d:74:46:eb:37:d1:47:40:26:b5:
34:b6:b5:95:9f:bd:84:09:a2:53:eb:4c:64:79:dc:
78:03:40:1b:1f:4e:2c:a3:99:1d:68:d2:82:13:20:
12:14:c7:44:71:58:20:20:f5:20:fb:76:b6:40:de:
f3:30:7e:7f:95:cc:85:be:ea:f5:08:81:d9:f2:60:
df:29:0c:97:f3:c5:94:bf:6f:bd:d2:8a:44:9d:4e:
04:cd:b8:3b:8e:b5:89:44:20:03:76:f7:f9:92:da:
54:4f:40:6a:c0:e5:05:f7:3e:4c:9d:63:04:00:05:
a8:eb:3c:23:7f:9a:6f:40:a4:5f:aa:c4:67:52:9b:
5d:eb:2d:1a:1d:02:19:a0:5c:c1:e6:9a:75:4b:c8:
f6:66:04:06:d7:fe:47:be:17:8d:b4:45:ee:93:0b:
d0:aa:98:f1:63:ad:aa:7c:8c:b7:87:ab:4f:9f:96:
e4:2b:dc:b6:38:89:a7:d1:ed:6b:ee:e4:cd:6b:66:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:BD:BE:18:73:97:3F:0E:5D:17:E2:29:B0:25:77:CF:F9:AB:7C
X509v3 Authority Key Identifier:
keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203139353231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.253.47.0/24
Signature Algorithm: sha256WithRSAEncryption
22:3b:ad:90:0d:da:d7:54:d8:a0:95:86:8a:e6:af:5e:c2:43:
c0:11:34:3a:fb:26:8b:b7:16:73:99:16:c1:c3:eb:93:4e:7f:
8c:50:3a:21:d4:80:a4:f8:f3:07:9b:66:f7:14:34:db:fc:a9:
08:5b:c2:43:50:f3:a2:25:fb:0a:83:c5:f7:64:b0:bb:43:03:
86:fd:64:b4:d3:69:98:06:9e:b5:25:80:59:51:7b:ab:c0:41:
f9:2b:a0:97:c5:95:85:72:07:ce:db:6c:68:10:67:75:fe:cf:
6f:f7:c7:ac:f4:29:c9:64:76:01:d3:6e:fb:69:85:fa:a5:58:
64:71:d6:35:a1:eb:7e:a6:9d:e3:7a:45:c5:dd:b7:7e:61:3c:
6f:1e:cd:4f:55:23:82:fd:c3:77:4b:27:95:00:51:fb:d6:d0:
03:6f:e1:03:63:23:55:12:70:fb:63:14:24:bf:cf:70:56:bf:
9a:83:c2:a2:b2:57:a1:78:90:ca:12:c9:74:7e:5a:27:1c:d3:
b2:11:fa:b8:34:5b:2f:4a:b3:4d:b6:b9:79:49:a7:00:bf:d1:
2d:6b:d7:fb:d8:f0:38:7c:af:f2:1b:56:34:10:29:58:ee:57:
3b:ee:9f:12:b7:bb:ba:49:d8:06:10:41:1a:02:f3:8a:d3:c9:
15:5e:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:43 2026 by rpki-client