Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1623a47f-e59d-3abc-9af2-e446d1d2b954.roa
File: 1623a47f-e59d-3abc-9af2-e446d1d2b954.roa (raw, json)
Hash identifier: u+IGkSVuTn0XWHVFYo0wjpGWSSCG/9nkfjgX/+0dJVE=
Subject key identifier: E5:21:D1:84:01:E1:73:71:57:85:46:E6:BF:4A:D4:BB:2B:04:39:6D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F79D2EB6793099DDA3F3E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1623a47f-e59d-3abc-9af2-e446d1d2b954.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.251.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f7:9d:2e:b6:79:30:99:dd:a3:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=312f7998-419c-4e1b-87cf-b15da282439e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:5d:bc:7f:ba:16:ff:72:cc:33:18:0b:26:
6a:f9:9a:63:33:3b:7d:a0:e9:12:c3:e9:41:98:b0:
7c:c8:ea:fa:5d:1d:81:c3:70:c5:cd:6f:ea:93:eb:
b1:7e:35:22:f9:41:9e:e9:7c:e1:54:f3:f6:18:e9:
d9:d3:dd:75:a5:08:c0:e8:73:de:8d:f7:b1:e8:31:
b5:76:d3:88:96:de:b5:b2:22:15:07:fa:70:e2:bb:
81:c6:b5:4f:cb:0a:21:92:ff:5c:92:6e:bb:e1:2e:
9d:a0:f5:f9:2b:42:30:43:fd:3c:85:f8:3a:89:12:
60:0c:0d:f3:74:6d:49:56:c2:1d:37:7b:93:f2:4f:
a4:62:aa:1a:9a:10:0d:f8:ae:a6:e8:e8:db:54:1d:
72:1e:df:c7:3e:ea:93:6c:a0:77:da:e0:0e:15:69:
48:7c:4d:f6:e3:74:79:05:52:60:b0:f4:fc:27:29:
95:70:12:bf:2a:a4:d8:26:8a:b4:af:07:e7:b8:7c:
7a:ba:80:27:b8:1e:cb:4d:28:8c:ba:05:57:04:a3:
80:e4:57:96:0e:29:cd:68:56:6c:21:f0:1c:2c:01:
8c:45:68:5e:f2:08:22:d4:5c:a4:4f:8c:70:2b:38:
13:1e:d5:1e:e2:5b:cc:f2:a0:d2:12:88:9f:78:31:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:21:D1:84:01:E1:73:71:57:85:46:E6:BF:4A:D4:BB:2B:04:39:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1623a47f-e59d-3abc-9af2-e446d1d2b954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:c1:88:43:54:07:e9:af:99:e1:6b:61:4f:21:c9:9f:00:cf:
6c:54:09:27:be:3d:f6:60:d5:ad:a0:52:b4:f8:20:81:ff:de:
9d:a2:d1:10:29:e4:cb:d6:c9:5c:0d:e4:f8:4e:d5:c9:5f:d7:
68:47:5b:ff:a8:54:48:e3:2f:87:ab:bf:64:0a:cc:82:b8:f7:
4c:05:b9:a0:1c:0b:b8:3f:27:d6:a6:f1:c3:af:db:d0:6c:35:
53:f5:bc:d4:62:d0:10:b7:6d:9d:d8:0c:dd:27:28:0e:17:c1:
1a:1e:b9:de:de:e0:77:b2:57:84:24:5f:05:fb:23:b8:c8:b8:
74:0f:3d:46:01:25:37:a0:ed:50:87:a2:d7:94:fe:40:60:01:
20:29:75:ca:21:46:c0:49:14:47:8a:13:19:a4:0d:87:75:89:
99:3b:27:19:73:60:13:aa:ed:18:7a:08:6b:c2:28:c3:d7:c2:
89:0a:b9:6b:02:4a:05:2f:e1:d3:d3:07:55:17:bb:75:af:fa:
60:d7:4c:66:1e:b5:cd:50:2a:8b:84:24:8a:4b:ce:38:d3:2e:
e5:c2:41:d8:b5:18:8b:2c:b7:87:ce:7a:95:4d:57:39:d9:74:
04:d7:c1:18:05:2a:d2:4c:fd:27:06:ac:89:1e:74:85:d0:fb:
61:76:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:13 2025 by rpki-client