Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
File: 3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa (raw, json)
Hash identifier: rWaBPr9iKaOeGguo1IrMPhN5HMmv4citqb3RIbEMh4E=
Subject key identifier: 84:72:2D:09:72:34:D0:E8:A2:0E:62:F5:1F:F9:4E:62:19:2D:05:94
Certificate issuer: /CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Certificate serial: 3777D6853F4B6DBB5324A55F192015708C5F24FC
Authority key identifier: FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
Signing time: Wed 04 Dec 2024 04:09:28 +0000
ROA not before: Wed 04 Dec 2024 04:04:28 +0000
ROA not after: Wed 03 Dec 2025 04:09:28 +0000
asID: 54110
IP address blocks: 199.182.132.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:77:d6:85:3f:4b:6d:bb:53:24:a5:5f:19:20:15:70:8c:5f:24:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Validity
Not Before: Dec 4 04:04:28 2024 GMT
Not After : Dec 3 04:09:28 2025 GMT
Subject: CN=84722D097234D0E8A20E62F51FF94E62192D0594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:3e:5f:35:54:e2:af:f0:55:9c:8d:25:9b:
54:c3:c0:51:84:b2:30:da:8a:ff:a3:17:81:06:be:
af:63:7d:c2:28:a1:1b:b4:f0:ff:a8:b9:53:25:dc:
d6:ad:df:47:b6:9c:53:19:11:9a:7c:10:64:32:fb:
e2:b7:ab:98:71:07:9c:a8:bd:39:f9:68:d5:f9:98:
9c:a2:30:4c:dd:a4:22:f7:84:52:27:65:d7:54:37:
23:29:0f:3d:a6:a1:68:e0:cf:d9:bd:40:d2:b4:56:
c0:88:6f:49:30:ce:f8:e8:4f:c0:28:f3:b3:c1:80:
7f:ed:8f:83:00:6d:2b:78:a6:a8:fd:81:5f:7d:86:
e1:29:eb:50:f6:11:12:ea:03:bc:73:80:48:4a:10:
bd:d0:21:d7:fb:3e:c6:1b:96:25:ef:03:6a:a9:ed:
6b:b4:a9:6d:70:88:b8:f4:e5:97:1e:e3:0f:e4:dc:
84:0a:66:fe:8e:cb:30:98:81:57:ab:75:90:36:19:
ac:f1:e6:52:98:27:71:9b:d4:f6:94:2b:06:69:47:
a7:50:64:21:89:ad:4b:99:26:8a:d0:ae:96:0d:a9:
82:c6:c5:2a:d1:ba:5d:5e:41:2f:9c:de:ac:76:09:
14:35:a3:14:a5:7c:f8:22:36:08:74:46:33:a8:c6:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:2D:09:72:34:D0:E8:A2:0E:62:F5:1F:F9:4E:62:19:2D:05:94
X509v3 Authority Key Identifier:
keyid:FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.132.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:40:11:4f:fc:28:a6:7b:62:3a:f1:37:74:82:06:ae:f0:02:
59:d5:ae:37:1f:81:29:95:e3:c9:19:82:34:4a:9e:ab:d4:20:
e4:92:46:12:2a:bd:8d:b8:b6:4a:6f:0b:8e:5b:58:42:62:37:
4f:0c:f9:84:b3:60:f0:f7:b8:c1:09:f2:26:7e:6d:d7:5a:98:
de:c2:1e:77:4f:de:d9:3f:cf:8f:35:c9:2d:1f:68:83:91:dc:
92:ec:df:3b:9f:90:75:10:06:78:1c:7d:a9:46:80:de:da:69:
28:cc:da:5c:0c:d1:e4:9b:b3:87:37:09:ba:ac:61:e3:3f:18:
0a:f8:f6:25:2c:d8:f6:bd:a1:09:02:dc:03:74:db:4a:b7:1f:
5b:47:12:25:1b:d3:c3:95:15:cb:c4:63:52:b5:f3:ca:a0:4a:
45:7d:a8:cd:26:16:42:e7:8b:08:8c:1c:77:78:c8:13:4f:34:
7d:22:79:f2:af:ab:91:b5:4a:b9:51:6e:de:1f:a5:e8:8a:2b:
9c:67:1f:6b:d8:0b:0d:8b:5d:56:3b:cf:c1:81:33:87:29:42:
19:f9:bb:02:ca:18:b5:7b:7e:91:5c:c1:27:3b:f5:b5:41:ca:
b1:58:d2:ac:02:d4:67:d9:50:e7:39:14:3e:ab:08:e8:2f:4f:
5e:a9:2f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:55:46 2025 by rpki-client