Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21ad61ec-5a38-3692-aa69-589921e20bc1.roa
File: 21ad61ec-5a38-3692-aa69-589921e20bc1.roa (raw, json)
Hash identifier: IEb8oV8QQvJKPobZ6Ky25Qb7btRzFCjQ43mrMItpBOk=
Subject key identifier: C9:64:00:9C:AB:D4:47:62:EE:1E:A7:CE:E9:51:9F:DB:EB:00:BC:67
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1C2A6895BEDDEF232E1E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21ad61ec-5a38-3692-aa69-589921e20bc1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 2600:1900:41e0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1c:2a:68:95:be:dd:ef:23:2e:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0848dd6c-95ea-463d-ac34-603071dbbae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:72:e1:ea:43:d1:23:ba:35:80:6a:8b:12:
67:c6:6f:39:18:5d:72:ce:76:99:7b:5d:c6:50:f8:
4f:17:67:b4:31:9e:33:46:09:0b:07:25:65:e7:80:
ad:b1:6a:57:88:bd:d4:74:90:a0:b5:c9:13:4e:05:
f4:2d:22:d9:8f:37:77:6d:c4:b8:96:74:07:1a:2d:
e6:55:d1:94:1e:b2:47:e8:b2:84:7c:5e:5d:bc:bc:
ca:7d:23:28:7d:ac:50:17:87:c3:f8:86:a6:fe:99:
5a:4d:4f:ef:7e:28:ee:b3:c5:dc:10:60:b1:86:19:
5f:96:6f:62:e6:35:cb:e7:72:44:7b:87:88:f6:d8:
48:4f:d7:c5:39:69:10:01:75:2f:d4:de:8c:11:e8:
86:77:14:7e:fc:ca:4d:7a:6f:f0:fd:fe:60:aa:26:
c2:cb:44:f1:a8:56:ed:2e:86:a1:b3:ff:34:99:e9:
92:84:ec:32:59:e0:ff:86:c6:f2:81:37:a2:eb:d5:
30:e5:9f:e7:12:66:ff:3c:f5:1c:d7:de:ad:77:fd:
21:7b:ee:02:bc:83:75:3b:14:65:95:bb:1b:19:b7:
32:36:86:56:50:6f:f8:42:cd:52:2a:13:a3:3c:f4:
93:f3:35:3f:27:34:ad:64:11:13:4a:7f:8e:e9:cc:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:00:9C:AB:D4:47:62:EE:1E:A7:CE:E9:51:9F:DB:EB:00:BC:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21ad61ec-5a38-3692-aa69-589921e20bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1900:41e0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:ff:33:d6:b8:b9:b2:75:f2:59:8b:03:8c:7b:23:40:a7:51:
47:ad:4b:a6:4b:90:49:33:be:3e:3a:0b:15:29:c0:e5:69:c6:
f6:e4:ab:02:60:a3:0f:80:a2:ec:6d:1c:f3:4f:69:f7:f2:bf:
c2:78:45:0b:bb:a7:33:32:f7:b7:e3:54:3a:81:28:61:f8:7a:
17:3a:de:91:fe:c3:c1:4b:14:9f:52:04:f3:38:0e:42:1b:dc:
30:75:3f:81:72:d0:a7:24:ee:46:76:c2:85:d2:50:2d:70:33:
7c:46:99:16:02:d2:f1:d2:e9:07:a8:cc:2d:c4:7a:d6:7b:37:
9b:7b:8d:cd:a5:81:73:bd:80:a0:79:ec:cb:8a:49:c1:99:67:
af:46:8a:ac:e1:01:4f:9f:b3:50:3a:36:b9:5b:86:02:3f:0e:
20:ad:ef:e1:8e:fe:0c:55:a3:69:1c:81:10:84:95:80:76:2f:
9f:58:ff:8a:46:ea:08:af:bc:3e:76:14:b3:bc:5a:03:52:df:
9a:3d:b2:e7:46:f1:fd:c4:2a:70:44:fc:12:e0:13:46:a3:97:
d6:df:18:2f:ba:a4:8f:c5:f3:f1:c9:c0:ad:14:e3:82:d6:8f:
16:d4:7a:a0:f3:f5:40:13:d7:ce:f8:eb:dd:47:7d:ff:83:95:
23:b4:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:14:57 2025 by rpki-client