Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0de87064-13af-378d-911d-63ee8cc5f970.roa
File: 0de87064-13af-378d-911d-63ee8cc5f970.roa (raw, json)
Hash identifier: meJtKpwRCNHOx8YpXcDr65wqCRoNw9K2qdR0xlHaPPY=
Subject key identifier: 99:88:85:D7:26:32:7B:66:EB:38:07:EC:1D:21:9B:7C:59:5E:3D:C4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FCADD323E0A95C509BB2C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0de87064-13af-378d-911d-63ee8cc5f970.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.251.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fc:ad:d3:23:e0:a9:5c:50:9b:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=15f1cd0e-fdd2-452e-be9a-3ebdfbaec78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:2e:ae:0c:8b:2a:5b:7c:61:b9:9d:2f:02:
3b:52:ec:eb:2d:f0:c9:44:e3:d0:a4:27:10:ef:3c:
0c:e7:6b:b0:2b:16:b0:ac:be:a8:2f:8d:ac:4c:71:
9d:14:ec:d2:22:2f:e4:ce:6e:f4:ba:be:2e:8c:92:
90:94:0d:a3:ae:d8:d6:9d:f5:e8:9c:67:35:9a:ea:
39:52:eb:3a:bb:3c:d6:15:82:b3:84:28:5c:0f:45:
03:eb:7c:df:3f:5b:83:85:d7:0e:0e:3a:a1:43:21:
52:d6:ea:ef:00:e7:a2:a8:83:1b:fd:c2:7e:f6:c0:
63:cd:08:d6:31:89:bc:ba:52:13:0e:11:2e:bb:37:
cc:8a:92:0f:b8:45:7f:00:86:86:d4:5f:21:59:37:
b7:f4:59:42:2e:1f:05:cc:c0:8f:60:70:35:bd:ff:
4b:42:cf:da:e7:cb:e5:a8:e9:79:74:05:69:23:f1:
9f:c8:a5:bb:8c:2e:e8:cb:76:58:6a:07:0c:4b:80:
ba:f5:86:00:88:9f:b2:5e:e1:e9:b3:fe:44:c4:16:
22:23:2c:ac:51:51:af:31:53:47:78:12:1e:72:56:
4d:40:ca:0c:d4:32:7a:65:04:f1:ce:fd:ad:13:86:
52:d9:94:ef:48:c3:ac:97:50:58:43:f2:77:c2:7d:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:85:D7:26:32:7B:66:EB:38:07:EC:1D:21:9B:7C:59:5E:3D:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0de87064-13af-378d-911d-63ee8cc5f970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:da:6a:9a:0d:bb:da:08:8e:5c:67:c3:97:55:0c:5a:8e:61:
f3:98:47:d7:f6:41:7c:a6:5a:73:13:2f:a2:a1:f7:2a:54:85:
33:cd:d4:3f:34:a3:f4:c7:2e:4e:27:d0:4e:ea:53:f2:ce:b2:
ac:ef:bd:37:46:f8:4d:c7:73:9e:2c:7e:2e:15:7a:3a:ab:68:
6a:46:d4:b4:4a:a1:16:c9:da:43:77:c0:0f:74:e8:7f:1c:7a:
91:41:ca:5e:fe:d1:7b:b5:f8:85:d4:c7:e3:68:bc:ee:96:67:
fe:dd:19:4a:81:be:88:0c:38:3a:1c:62:c8:39:6d:8c:cf:ba:
a3:70:63:09:47:f2:51:c4:c5:a9:a3:28:6a:bb:e3:51:d4:de:
53:c1:55:76:6c:48:ca:71:27:b6:7c:a1:7f:2f:ed:91:98:7f:
6d:65:19:37:64:24:34:41:08:f5:bb:e5:11:98:c9:f6:94:39:
bf:9c:49:02:73:95:12:75:c6:10:68:73:29:66:c8:e5:96:cc:
fe:d5:37:4a:83:37:87:3a:b7:ba:fb:9f:0c:3b:23:c2:6b:75:
85:86:84:20:9b:e1:40:d1:0f:fa:e0:19:61:4f:44:83:b6:c3:
4f:3d:8f:f5:21:17:78:48:55:d3:a5:28:c0:43:ee:cd:98:8e:
54:c4:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:16:03 2025 by rpki-client