Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa
File: 3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa (raw, json)
Hash identifier: u/tEPElnH8ycXviZoiIvKVIrE5bDvf2y1hw7r+Yb7qc=
Subject key identifier: 58:D4:E5:D0:5C:A3:11:18:AC:2B:48:C4:7D:66:C6:DC:30:DF:C6:2A
Certificate issuer: /CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Certificate serial: 2BCF3C70C1DB5395FA82C4B34D3F464426EC260C
Authority key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa
Signing time: Thu 24 Jul 2025 20:53:21 +0000
ROA not before: Thu 24 Jul 2025 20:48:21 +0000
ROA not after: Thu 23 Jul 2026 20:53:21 +0000
asID: 40850
IP address blocks: 138.118.116.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:cf:3c:70:c1:db:53:95:fa:82:c4:b3:4d:3f:46:44:26:ec:26:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Validity
Not Before: Jul 24 20:48:21 2025 GMT
Not After : Jul 23 20:53:21 2026 GMT
Subject: CN=58D4E5D05CA31118AC2B48C47D66C6DC30DFC62A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:d5:65:c5:dc:7c:10:c0:f3:93:a5:98:e4:
3d:ac:e2:37:ca:e2:b4:4d:d8:12:10:e2:82:1b:98:
4a:e6:8a:46:d5:a6:f0:fa:77:60:6d:15:d7:fa:c5:
c8:af:3e:e4:f4:eb:62:61:ae:4e:24:aa:7c:fa:96:
b3:97:d6:c2:6b:a5:ab:e5:40:b2:e1:24:99:e4:e8:
45:e4:7a:08:cc:bc:a6:3a:c8:3b:17:cf:93:ea:72:
69:53:3d:80:fb:dc:8c:ad:64:14:0f:da:0f:ad:72:
57:f7:dc:1c:60:ef:ef:70:33:21:ce:8c:ce:54:f1:
ce:5d:09:91:b4:47:98:0a:2f:4e:b3:5f:a3:36:29:
23:40:e0:a5:f1:0d:9d:b4:d8:2b:07:af:8f:fb:69:
7d:87:e8:31:72:a1:46:4e:e8:21:fc:f8:af:88:26:
10:78:d7:34:e8:73:a2:bb:af:31:0a:c1:d2:4e:7e:
31:43:18:0b:d5:a2:c1:f0:a1:18:25:c0:f6:84:cc:
58:5e:34:73:fd:19:a9:e8:bd:f6:ee:7f:a2:c6:03:
00:b5:24:ad:5d:ca:1f:b6:b8:8e:1f:06:f1:2b:dd:
07:d7:46:62:6c:2f:00:f2:86:8d:00:3e:74:97:d4:
6a:78:1c:80:f7:56:2c:6a:57:8c:c2:bf:a8:fd:f8:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D4:E5:D0:5C:A3:11:18:AC:2B:48:C4:7D:66:C6:DC:30:DF:C6:2A
X509v3 Authority Key Identifier:
keyid:54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:64:1f:3c:84:af:86:58:fb:70:dc:2b:9d:6b:37:27:3c:86:
83:07:ed:db:fe:e4:ca:ee:9a:4e:b0:1a:2b:b8:59:12:66:12:
e3:8e:84:7f:bc:67:86:39:74:68:c5:7b:7d:ec:5f:06:97:4a:
c7:4c:26:d5:31:98:7d:6d:6d:8d:27:7c:73:53:bd:a7:a7:6d:
cc:79:6e:4e:54:f5:20:14:cd:f0:af:ee:5e:f1:c0:ab:81:2d:
68:fe:16:af:69:3c:1b:e4:e6:fb:2b:4f:f3:93:a0:c0:3f:7f:
b4:e3:4d:4d:20:d5:2c:85:56:cd:f6:54:84:58:c9:89:65:57:
5b:53:7b:26:8b:0c:d1:79:5b:b3:45:16:97:f4:17:f7:7c:f3:
48:7e:2f:4d:5d:a2:80:67:27:fa:82:f5:c1:1f:18:2f:58:32:
43:79:29:42:83:23:de:98:84:10:4d:64:b7:ef:d2:1c:09:f1:
f4:8c:6a:c5:8b:39:70:99:76:37:ab:96:f1:33:4d:21:a8:db:
76:da:f7:d2:85:f9:d3:28:51:00:de:5d:07:34:3c:19:f0:f1:
76:bf:2c:3f:ab:6e:16:98:5b:1a:3e:c2:50:9d:6d:fd:95:19:
2a:d6:97:ee:02:c1:a4:a2:36:13:c2:87:ff:9b:d7:bd:ab:ce:
19:ca:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:46:50 2025 by rpki-client