Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3139312e352e35362e302f32322d3234203d3e203430383530.roa
File: 3139312e352e35362e302f32322d3234203d3e203430383530.roa (raw, json)
Hash identifier: 5RsRSdCqlOxQVfOoZ+b9D4jdxbD0oi4t8X5OE965S04=
Subject key identifier: 24:B9:98:7E:EE:E1:BB:9B:AD:FB:06:0A:62:E4:C2:41:BA:F2:7B:1E
Certificate issuer: /CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Certificate serial: 1B11B63D16CA3ACCCCA1504B53B330EF35CDEED9
Authority key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3139312e352e35362e302f32322d3234203d3e203430383530.roa
Signing time: Thu 24 Jul 2025 20:53:21 +0000
ROA not before: Thu 24 Jul 2025 20:48:21 +0000
ROA not after: Thu 23 Jul 2026 20:53:21 +0000
asID: 40850
IP address blocks: 191.5.56.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:11:b6:3d:16:ca:3a:cc:cc:a1:50:4b:53:b3:30:ef:35:cd:ee:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Validity
Not Before: Jul 24 20:48:21 2025 GMT
Not After : Jul 23 20:53:21 2026 GMT
Subject: CN=24B9987EEEE1BB9BADFB060A62E4C241BAF27B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:f9:04:64:bc:df:97:9d:29:db:f7:12:07:
34:c0:34:87:50:b5:1e:18:d8:47:57:ea:28:83:f6:
94:e6:06:e7:81:f9:4b:d8:10:f6:3d:b5:2b:ed:67:
76:de:99:72:40:1b:94:93:48:9f:ac:18:d2:63:42:
2f:34:f9:17:9a:ea:93:0b:2c:da:3d:1d:a3:09:39:
db:85:b8:3b:0e:96:a5:ac:ca:a2:4f:65:19:2c:4d:
bd:b0:bd:8c:e7:98:d9:cb:ce:6f:c2:dc:94:af:1c:
a1:ae:9b:46:e7:2b:5a:64:32:bc:64:0a:2f:2d:3d:
14:91:ea:9b:5e:af:36:42:08:ee:86:2e:ca:3a:ad:
63:34:30:d7:73:f7:6f:83:9f:c4:e7:46:5b:47:d5:
38:72:1c:ff:93:3d:b3:46:8e:79:37:72:b2:81:81:
49:b5:84:8e:08:b0:59:a9:56:ce:a1:80:d7:69:84:
f5:10:e1:d1:c2:34:da:ba:24:ef:00:2f:15:ed:94:
0d:2d:fa:6e:8f:7d:89:cc:a1:a1:e2:5f:53:fb:00:
99:6b:ea:fc:d1:ed:bc:a4:97:99:45:bd:87:88:63:
1c:37:68:14:f1:b4:b3:72:69:08:69:52:5d:c6:99:
20:52:6f:e9:96:4e:0d:05:6c:3f:b1:9f:2b:ac:b6:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B9:98:7E:EE:E1:BB:9B:AD:FB:06:0A:62:E4:C2:41:BA:F2:7B:1E
X509v3 Authority Key Identifier:
keyid:54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3139312e352e35362e302f32322d3234203d3e203430383530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.5.56.0/22
Signature Algorithm: sha256WithRSAEncryption
89:32:bd:aa:ca:18:45:7d:6a:88:f4:9c:4a:7c:10:e5:29:7a:
77:72:8a:05:df:f1:52:e9:88:fb:e2:5d:aa:ab:83:2c:a1:6d:
2b:17:a4:e6:b9:92:62:60:f8:a0:d2:c0:f2:e8:51:37:cb:90:
fd:c1:a1:0b:1f:bf:6f:c8:60:a7:1d:4b:90:de:2b:4e:d1:7b:
4b:06:e9:ab:38:f3:3a:8a:cc:6a:da:fd:6c:2a:a4:1f:8a:69:
99:09:ba:09:d7:3b:ed:e7:d6:2d:73:3d:a6:80:97:70:52:87:
f2:b0:f8:44:1e:fd:06:56:7b:f8:ab:64:2e:76:60:fc:34:65:
ab:f0:79:5f:9b:63:de:ef:f6:fd:d2:c4:32:43:1d:3f:ea:81:
7d:5e:e6:dc:3b:ac:55:69:47:e6:ea:b6:8b:f7:c8:99:c9:9a:
64:31:1a:a7:dc:87:ae:8f:d8:4a:b7:4a:4a:e3:f3:40:29:4c:
57:77:dc:4c:b1:7b:71:09:6d:8c:37:86:13:2a:a9:67:09:36:
a2:56:bf:1e:16:4e:be:0d:69:67:97:26:5a:e4:f1:45:bd:31:
50:d6:1f:f2:e8:d7:08:2c:5e:a0:d8:d5:18:02:29:dd:ef:27:
db:c5:31:95:34:88:5f:56:56:c2:af:24:1d:4d:4f:77:00:63:
fe:0e:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:50:52 2025 by rpki-client