Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa
File:                     32332e3134342e3136382e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier:          L7YCPFuRhc8PxQ5h4XxVLiizr2YWk8bQQQHk7DdO5qU=
Subject key identifier:   8F:34:4C:C5:6B:15:DB:C0:2C:E8:44:11:AE:9F:21:03:E0:A9:67:99
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       6E2B862A0443EC9FC084912B0A4A6B3703103C0D
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa
Signing time:             Sun 29 Mar 2026 03:27:32 +0000
ROA not before:           Sun 29 Mar 2026 03:22:32 +0000
ROA not after:            Sun 28 Mar 2027 03:27:32 +0000
asID:                     19521
IP address blocks:        23.144.168.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2b:86:2a:04:43:ec:9f:c0:84:91:2b:0a:4a:6b:37:03:10:3c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:32 2026 GMT
            Not After : Mar 28 03:27:32 2027 GMT
        Subject: CN=8F344CC56B15DBC02CE84411AE9F2103E0A96799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:97:49:b2:2d:52:03:eb:c5:24:2f:c6:00:
                    21:34:d5:42:76:bd:07:23:10:77:3a:b4:fb:c5:89:
                    f5:63:e6:3f:ef:21:95:f7:40:25:a9:c7:5c:46:70:
                    0b:9a:af:e2:6d:ca:6a:4f:c4:8b:7a:3c:df:e5:bf:
                    76:9a:cb:19:28:d3:4b:ca:4d:97:f9:59:ce:2e:2a:
                    2b:ea:d3:58:38:cc:85:0a:30:a9:5d:ae:3f:7f:dd:
                    1f:89:87:e9:38:c4:fa:55:a9:61:a1:6f:fc:97:13:
                    2b:2b:98:8e:f8:d7:29:8c:4f:d0:22:95:1d:af:6d:
                    19:af:20:15:a2:51:c2:bf:a3:8e:9e:3a:8d:5e:9f:
                    e2:33:c0:80:99:60:bb:88:6c:0e:2b:6d:c1:0d:3b:
                    5f:98:56:08:23:cf:b2:9a:06:79:1e:69:4c:6c:35:
                    b6:91:1a:bd:83:06:12:8b:44:58:a9:1c:36:2d:2c:
                    7a:83:48:d6:c0:7b:7a:c4:f1:63:a5:0c:ea:66:af:
                    09:a8:4f:e9:05:b2:19:15:ab:a4:b1:1f:48:b9:1d:
                    bf:fc:ca:a8:fc:98:87:c9:2f:35:12:ee:19:4b:a4:
                    39:09:27:55:3b:b5:0a:83:ab:ad:e8:58:bd:51:bc:
                    38:ec:c2:ee:fb:ae:17:70:74:d9:14:b7:88:f9:ef:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:34:4C:C5:6B:15:DB:C0:2C:E8:44:11:AE:9F:21:03:E0:A9:67:99
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:b2:1d:eb:87:4f:1a:75:6d:01:80:17:32:33:91:cb:65:
         93:41:c9:93:70:48:cb:e4:b2:ac:5d:23:ac:73:94:11:15:09:
         d7:08:a3:c5:37:c7:2b:7d:15:9e:81:97:2e:e9:a7:7a:16:80:
         50:87:f6:67:11:7e:f8:38:ec:e7:dd:b5:2b:48:6f:20:bc:b6:
         40:27:bb:e1:ca:2f:96:ca:20:cc:46:92:0f:e3:c0:13:fe:7e:
         da:0a:a0:65:2f:35:97:aa:f7:22:20:e8:98:f8:b0:11:05:b4:
         5a:0b:36:56:c5:f1:ee:7a:0c:c4:4a:f9:d8:33:99:57:cf:91:
         e0:77:e9:83:99:06:7b:83:db:f0:2a:e7:e1:13:26:10:45:17:
         c1:54:c9:d6:e6:78:63:84:84:e4:c2:75:bf:65:21:f5:88:7c:
         f1:b1:ed:b0:a1:9f:ed:c6:0a:c8:7c:06:88:ed:39:4b:ee:60:
         e4:5b:38:a9:a6:0a:9a:4c:56:44:43:ac:8f:19:4b:6a:57:84:
         f9:05:40:b0:e8:fc:89:6c:8b:d5:2d:65:fc:26:bd:0b:9f:33:
         2d:19:18:32:06:80:82:ac:8f:98:ed:14:c6:99:bf:ec:c6:ac:
         03:0b:c9:f0:b0:13:b0:60:95:5e:45:3a:03:f7:22:00:28:d7:
         bb:88:b9:1d
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUbiuGKgRD7J/AhJErCkprNwMQPA0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYTE0OGNjMDUyMmViNzI3YTRhYTVjYzg3
ZDNkMDE0OWM3ZjA3MzQ1MmYwHhcNMjYwMzI5MDMyMjMyWhcNMjcwMzI4MDMyNzMy
WjAzMTEwLwYDVQQDEyg4RjM0NENDNTZCMTVEQkMwMkNFODQ0MTFBRTlGMjEwM0Uw
QTk2Nzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ6XSbItUgPr
xSQvxgAhNNVCdr0HIxB3OrT7xYn1Y+Y/7yGV90AlqcdcRnALmq/ibcpqT8SLejzf
5b92mssZKNNLyk2X+VnOLior6tNYOMyFCjCpXa4/f90fiYfpOMT6ValhoW/8lxMr
K5iO+NcpjE/QIpUdr20ZryAVolHCv6OOnjqNXp/iM8CAmWC7iGwOK23BDTtfmFYI
I8+ymgZ5HmlMbDW2kRq9gwYSi0RYqRw2LSx6g0jWwHt6xPFjpQzqZq8JqE/pBbIZ
FauksR9IuR2//Mqo/JiHyS81Eu4ZS6Q5CSdVO7UKg6ut6Fi9Ubw47MLu+64XcHTZ
FLeI+e/hQwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFI80TMVrFdvALOhEEa6fIQPg
qWeZMB8GA1UdIwQYMBaAFOJxrlUmi4jB6XKn7oWxRZ2N0hAsMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
RTI3MUFFNTUyNjhCODhDMUU5NzJBN0VFODVCMTQ1OUQ4REQyMTAyQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhMTQ4Y2MwNTIyZWI3MjdhNGFhNWNjODdkM2QwMTQ5YzdmMDczNDUyZi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMyMzMyZTMxMzQzNDJlMzEzNjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTM1MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeQqDANBgkqhkiG9w0BAQsF
AAOCAQEAJ92yHeuHTxp1bQGAFzIzkctlk0HJk3BIy+SyrF0jrHOUERUJ1wijxTfH
K30VnoGXLumnehaAUIf2ZxF++Djs5921K0hvILy2QCe74covlsogzEaSD+PAE/5+
2gqgZS81l6r3IiDomPiwEQW0Wgs2VsXx7noMxEr52DOZV8+R4Hfpg5kGe4Pb8Crn
4RMmEEUXwVTJ1uZ4Y4SE5MJ1v2Uh9Yh88bHtsKGf7cYKyHwGiO05S+5g5Fs4qaYK
mkxWREOsjxlLaleE+QVAsOj8iWyL1S1l/Ca9C58zLRkYMgaAgqyPmO0Uxpm/7Mas
AwvJ8LATsGCVXkU6A/ciACjXu4i5HQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:33 2026 by rpki-client