Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22d2afc1-7b67-310b-95f4-6d539f30187e.roa
File: 22d2afc1-7b67-310b-95f4-6d539f30187e.roa (raw, json)
Hash identifier: +CtxNe6rtn6jB8mVmYn8uBR5J/PnPEcjz/K8q1eGab4=
Subject key identifier: B5:A5:8B:87:7C:5C:AA:45:82:EC:E0:21:22:78:9D:EA:9A:13:92:4D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8DBFBDC7277F876A8FF1B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22d2afc1-7b67-310b-95f4-6d539f30187e.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 108.59.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:db:fb:dc:72:77:f8:76:a8:ff:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=57fe716f-9106-4da1-a615-685f3b6306f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:aa:80:23:67:b7:92:cc:0a:8c:b7:4e:d2:
66:8d:97:08:93:92:64:fe:1f:89:7e:41:fd:cb:f7:
a1:8f:10:7a:15:0a:98:ed:b0:f5:2d:dc:72:34:42:
dd:47:2f:2a:73:42:00:c8:a1:ff:e3:dd:c1:98:78:
90:96:27:02:ba:6c:8b:c5:a5:41:e5:b0:d3:67:2b:
f0:d5:65:c4:8f:a0:82:d8:5a:e9:05:76:05:d9:7b:
28:6a:a1:ad:2a:21:6a:2c:7f:32:06:fe:14:72:37:
5b:78:14:2c:b8:95:63:5e:63:3d:7e:b5:5c:50:78:
d6:27:26:1a:ec:4c:3d:45:08:df:3b:29:21:16:27:
35:ec:9b:24:55:0b:5d:eb:93:69:b5:47:c7:3b:78:
b4:6a:2a:5c:09:1c:0a:74:c2:57:f2:11:03:a6:78:
7f:69:57:89:2f:0a:27:95:b0:7b:26:a9:ba:64:e2:
10:a6:20:db:c1:03:13:af:ec:a6:e4:13:43:a8:07:
f2:59:d7:a8:02:6e:eb:ae:13:53:2d:73:75:48:3d:
6d:09:8a:ff:c6:e1:2e:23:21:ba:ab:4e:39:90:96:
96:62:f0:ae:e5:09:c7:14:97:83:7c:ef:11:9d:f1:
f7:5d:65:e5:b3:12:35:6c:f5:09:0d:f8:93:73:a0:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:8B:87:7C:5C:AA:45:82:EC:E0:21:22:78:9D:EA:9A:13:92:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22d2afc1-7b67-310b-95f4-6d539f30187e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:92:1f:97:b4:ec:99:d7:0c:66:06:49:6a:5f:17:5c:09:22:
28:5a:a3:ba:03:c7:5e:77:c1:cc:34:4c:62:4f:4e:58:27:46:
d0:7f:8d:4e:db:d0:a3:a9:d5:aa:7a:22:e2:3b:6c:68:1c:a7:
fb:6a:de:1f:2e:39:46:1a:75:d5:50:67:c5:c5:95:24:43:10:
39:0c:e3:05:8b:39:52:7b:bc:a9:03:b4:3c:2f:75:96:1d:a2:
87:25:ad:71:97:33:c1:f6:31:7f:1c:b1:ca:4e:70:6a:de:18:
fe:e8:27:25:c0:05:c9:91:1d:bf:cd:4b:51:cc:57:a4:6a:98:
30:09:97:3a:26:e6:04:42:e4:fb:f3:cd:07:fa:39:96:60:1f:
f6:68:0f:a5:d0:65:20:f6:a1:dc:90:2e:ed:97:10:cc:5e:ff:
fc:9b:53:3e:45:e9:71:c3:7a:fe:a5:3f:65:00:09:75:b3:69:
dc:01:c6:8b:6c:ac:39:84:23:f3:2e:9c:3c:53:f0:0d:b1:5a:
16:f5:af:c9:c5:23:da:2f:86:76:42:ab:7f:69:b6:d1:25:ef:
13:66:7f:88:73:0e:d1:80:9e:78:04:7d:c4:b2:4b:a0:e8:3c:
51:fd:aa:14:6e:97:62:6e:bd:30:6e:53:eb:fc:5c:1d:08:cc:
0c:50:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:19:14 2025 by rpki-client