Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b2fedde-f0a2-31ca-a23e-bb986bcacbdc.roa
File: 2b2fedde-f0a2-31ca-a23e-bb986bcacbdc.roa (raw, json)
Hash identifier: +Lt43NQ/ouqYw3tfT4RiPs0c+Eaq/13vVy5iQjXSHUY=
Subject key identifier: 4F:E6:1B:D3:D1:7B:D0:AC:48:EC:81:AD:13:64:79:7C:E5:44:D3:59
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B71E48C17CEA9FEB271E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b2fedde-f0a2-31ca-a23e-bb986bcacbdc.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 107.167.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b7:1e:48:c1:7c:ea:9f:eb:27:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f03015c9-2c19-4cdb-89cc-5cb6bd073761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:2f:0c:fb:9c:29:dd:ac:78:9c:67:fe:7a:
37:c3:a1:28:8f:b8:c5:6f:68:d5:fa:e3:9b:83:d1:
bf:1b:8e:31:62:93:4c:9e:f0:91:4d:b5:4e:b5:ee:
7e:05:a0:34:f6:35:dd:5a:87:29:57:a7:a0:54:4c:
b6:f3:8c:26:f8:d2:0d:5a:8f:32:32:51:67:ad:d6:
80:1c:8c:24:28:da:a2:6f:d0:ba:5c:61:09:a1:a7:
0a:35:b9:a2:eb:6c:45:38:6f:d5:b1:77:3e:29:ee:
26:93:4c:90:3e:8d:eb:89:cc:77:d5:1c:31:f6:cf:
72:2b:52:5a:e1:1b:1f:54:9a:00:63:c8:4e:b5:bc:
12:c0:cc:f8:5d:f4:c8:3c:ec:68:15:36:ed:51:20:
32:c9:de:59:0e:dc:aa:36:de:91:22:43:39:46:59:
7c:fe:3e:aa:20:e2:01:e8:ed:75:70:46:6c:49:f8:
d8:70:98:83:ca:a3:2b:a6:b2:e5:84:2e:d0:e6:93:
3c:42:bc:17:13:4b:e8:cd:33:87:96:cb:a4:67:02:
59:05:d9:b4:a1:0a:02:27:99:64:ae:67:b1:8c:22:
6e:40:29:e5:d5:04:5c:bd:70:32:73:49:ca:cb:33:
db:7e:f1:cb:cf:9f:cd:81:92:27:29:38:5b:f9:f4:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E6:1B:D3:D1:7B:D0:AC:48:EC:81:AD:13:64:79:7C:E5:44:D3:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b2fedde-f0a2-31ca-a23e-bb986bcacbdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:aa:f6:38:e3:2d:85:06:95:de:b1:c0:80:dd:33:f5:85:b7:
83:c2:a8:42:4a:ed:b4:64:eb:c3:ba:89:ca:1d:e0:73:33:79:
1c:96:35:d5:dc:95:2a:0b:6b:cc:56:76:17:fb:23:0f:fe:c8:
e6:ba:42:63:86:ba:b7:a6:a2:63:9d:9c:af:1b:c6:80:7c:01:
b5:37:63:79:85:9d:51:ac:c4:c3:bd:aa:58:e2:c6:60:82:1a:
54:04:a1:2b:fe:a6:dc:80:fd:49:e3:c6:e6:eb:3b:01:f0:21:
df:f7:e4:ee:b3:a2:fb:fb:aa:31:14:dd:68:07:8c:37:c7:25:
df:88:e1:79:8a:44:27:a3:7d:88:6b:f2:69:3f:f1:12:1e:59:
18:c7:38:20:81:4c:3c:6b:99:c8:4c:e0:74:25:75:4c:64:a9:
12:5f:48:31:42:73:77:d9:e3:1a:65:13:1e:dd:04:f1:ae:03:
79:12:7e:b1:2d:8f:d9:6e:12:32:47:dd:89:1b:04:b3:cd:eb:
6f:2a:67:c7:c5:bb:4f:01:63:90:b5:9e:b2:7c:50:ca:0d:b6:
0f:85:9f:bd:25:24:af:b0:97:cd:5f:2e:13:a2:b9:2c:20:19:
3d:68:ed:3c:5c:44:dc:ee:43:0b:6e:6b:0d:32:d1:01:0c:d4:
af:ba:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:55:27 2025 by rpki-client