Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199654.roa
File: AS199654.roa (raw, json)
Hash identifier: GqRZr0aMJ6DdbHpQRViKmv4DoxpfEooe7yNtLrgT7Ww=
Subject key identifier: 5D:38:62:0A:DF:EE:ED:AC:DF:56:DB:86:6D:15:55:43:36:F8:6B:76
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 45C1A75DBFAD4213D4C763D772ADD23E32B0A1FD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199654.roa
Signing time: Wed 01 Mar 2023 21:35:27 +0000
ROA not before: Wed 01 Mar 2023 21:30:27 +0000
ROA not after: Wed 28 Feb 2024 21:35:27 +0000
asID: 199654
IP address blocks: 2a06:a005:1876::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c1:a7:5d:bf:ad:42:13:d4:c7:63:d7:72:ad:d2:3e:32:b0:a1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 1 21:30:27 2023 GMT
Not After : Feb 28 21:35:27 2024 GMT
Subject: CN=5D38620ADFEEEDACDF56DB866D15554336F86B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:fd:1d:37:e3:32:8e:04:eb:e8:ad:68:6d:
40:3e:41:34:a1:c9:5d:dd:5e:6e:88:01:20:f0:e6:
4c:da:7b:54:5f:55:56:6c:bb:64:65:d8:2b:de:e8:
9b:b8:3a:b4:30:da:2c:ee:00:bd:3f:d7:3f:88:6b:
da:55:26:52:90:30:af:9f:d5:9a:9f:1c:52:7d:59:
c0:b4:4c:83:02:2a:47:69:46:fc:87:10:1b:45:f5:
7d:0c:5a:e4:38:3b:26:78:ee:5f:94:fb:bc:e8:9d:
d1:ca:c1:9d:d9:f5:ae:d9:20:cf:69:42:c7:3c:0d:
3c:16:de:98:b9:01:f4:7e:b9:3a:26:fc:5d:1e:67:
83:2d:d2:97:f3:fa:76:f4:ca:9c:54:f6:83:0d:52:
cf:cb:67:7b:e4:65:f4:3a:6d:a3:fd:1e:51:e6:28:
60:6c:10:c3:fc:70:9f:5c:fc:2f:76:6f:1b:0c:9c:
49:bb:cc:22:9b:b6:73:c1:50:b2:46:d5:0d:81:b7:
64:10:e7:80:34:0c:79:61:93:ab:13:29:44:04:fd:
c8:97:8e:f4:f3:7f:70:19:24:c2:ca:19:23:51:21:
b0:cb:84:a0:1b:0b:5b:e9:bc:14:66:c3:86:6c:f9:
fb:71:68:97:b1:08:65:b9:9d:57:6e:0d:90:df:03:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:38:62:0A:DF:EE:ED:AC:DF:56:DB:86:6D:15:55:43:36:F8:6B:76
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1876::/48
Signature Algorithm: sha256WithRSAEncryption
79:53:9e:39:d0:f0:c5:ce:85:8b:44:7b:26:0c:38:41:8b:2d:
29:3e:1c:04:57:e0:3e:7d:17:9a:6a:37:48:13:6f:50:4f:91:
32:38:f9:09:d7:d1:31:eb:de:a7:63:f9:3a:81:5f:e9:ec:ff:
86:25:63:72:4c:a2:9a:0a:06:29:ad:d1:d6:4c:e5:b8:7e:ef:
7c:d0:67:9e:04:97:bd:e7:30:4c:45:ba:75:85:ad:da:10:1a:
9a:27:c3:7c:9b:b2:f8:2e:ba:19:6d:d7:9b:6e:f6:35:17:dc:
38:fb:00:20:42:d8:37:5e:a4:8d:14:95:77:d4:2c:fd:5a:61:
c0:59:48:fa:ea:5d:b8:7e:7e:1a:b7:a5:8c:6b:b6:a9:15:1a:
11:53:28:8e:27:d9:71:7e:57:87:ad:59:6b:5e:e3:2e:7b:92:
eb:f3:b7:58:a4:82:26:bb:1a:aa:83:33:c7:a1:e7:58:5d:e8:
55:45:22:48:80:0b:39:a4:3d:17:94:c9:f0:92:90:a5:66:ab:
8f:5a:40:97:81:72:b0:25:f8:20:0d:ee:c3:6f:98:6f:fb:77:
5a:c3:2c:1a:8d:e7:1d:d5:f3:3a:48:44:4b:60:b8:5e:ee:5b:
89:6c:e3:31:93:57:3a:02:6e:f1:1f:35:34:12:69:b7:5f:a9:
57:85:00:31
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIURcGnXb+tQhPUx2PXcq3SPjKwof0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzAzMDEyMTMwMjdaFw0yNDAyMjgyMTM1MjdaMDMxMTAvBgNV
BAMTKDVEMzg2MjBBREZFRUVEQUNERjU2REI4NjZEMTU1NTQzMzZGODZCNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlf0dN+MyjgTr6K1obUA+QTSh
yV3dXm6IASDw5kzae1RfVVZsu2Rl2Cve6Ju4OrQw2izuAL0/1z+Ia9pVJlKQMK+f
1ZqfHFJ9WcC0TIMCKkdpRvyHEBtF9X0MWuQ4OyZ47l+U+7zondHKwZ3Z9a7ZIM9p
Qsc8DTwW3pi5AfR+uTom/F0eZ4Mt0pfz+nb0ypxU9oMNUs/LZ3vkZfQ6baP9HlHm
KGBsEMP8cJ9c/C92bxsMnEm7zCKbtnPBULJG1Q2Bt2QQ54A0DHlhk6sTKUQE/ciX
jvTzf3AZJMLKGSNRIbDLhKAbC1vpvBRmw4Zs+ftxaJexCGW5nVduDZDfA+hjAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUXThiCt/u7azfVtuGbRVVQzb4a3YwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTk5NjU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBRh2MA0GCSqGSIb3DQEBCwUAA4IBAQB5U545
0PDFzoWLRHsmDDhBiy0pPhwEV+A+fReaajdIE29QT5EyOPkJ19Ex696nY/k6gV/p
7P+GJWNyTKKaCgYprdHWTOW4fu980GeeBJe95zBMRbp1ha3aEBqaJ8N8m7L4LroZ
bdebbvY1F9w4+wAgQtg3XqSNFJV31Cz9WmHAWUj66l24fn4at6WMa7apFRoRUyiO
J9lxfleHrVlrXuMue5Lr87dYpIImuxqqgzPHoedYXehVRSJIgAs5pD0XlMnwkpCl
ZquPWkCXgXKwJfggDe7Db5hv+3dawywajecd1fM6SERLYLhe7luJbOMxk1c6Am7x
HzU0Emm3X6lXhQAx
-----END CERTIFICATE-----
Generated at Thu May 8 10:35:45 2025 by rpki-client