Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ef9e21e-1f70-3c30-9bd5-e232fe0b8384.roa
File: 3ef9e21e-1f70-3c30-9bd5-e232fe0b8384.roa (raw, json)
Hash identifier: RIqhHtzLpzWzQRc54StblHwqf//PpwMZwgrxmeLcwdA=
Subject key identifier: 14:A8:26:68:1C:C1:DC:1E:41:1F:6A:4F:BD:50:8D:39:79:44:52:9D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1A266E9A622FBA587CC580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ef9e21e-1f70-3c30-9bd5-e232fe0b8384.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 108.59.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1a:26:6e:9a:62:2f:ba:58:7c:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4ae5ca45-97c4-4d96-bd6a-7adca2552681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:0f:e1:53:44:61:cb:d2:15:11:6b:dc:75:
b4:2c:e4:be:71:48:fd:b3:7f:19:18:0d:06:33:37:
5d:7e:2e:0c:17:2d:87:37:9b:82:0c:a2:79:10:84:
0f:50:95:11:33:9c:1b:89:7c:26:00:06:10:50:98:
f1:11:b9:5a:0a:8d:2a:9e:f2:ab:2c:69:c8:02:13:
b6:4f:7b:6d:0c:23:de:ff:f6:33:17:7c:4a:54:e6:
f0:e2:20:9a:96:9b:38:25:80:8d:9d:fe:26:77:fe:
2f:0c:09:24:53:9b:9a:7f:cb:31:3d:42:86:4a:a0:
5c:78:01:6b:d3:a2:58:30:b2:09:30:6e:33:93:7a:
1e:80:e4:8e:55:8f:60:64:2a:3d:b3:2c:6a:15:35:
2f:12:70:bd:7d:8b:f7:fd:93:f0:7c:0c:e5:12:a2:
4d:00:57:12:50:82:1f:2a:42:f5:99:b6:f5:86:e0:
1c:2f:90:f1:38:46:a6:3f:be:bd:e9:46:83:90:e4:
88:a9:26:32:fb:6f:a9:fe:1c:c2:77:e5:40:14:27:
02:00:94:9b:cd:1b:37:01:f2:10:4b:da:5b:5f:fa:
f4:a5:28:11:b9:df:0c:ba:1a:0b:f8:44:fd:57:c1:
2a:ac:d6:aa:41:96:b8:8d:f7:b3:0a:22:a3:e6:6f:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A8:26:68:1C:C1:DC:1E:41:1F:6A:4F:BD:50:8D:39:79:44:52:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ef9e21e-1f70-3c30-9bd5-e232fe0b8384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:84:91:a5:4c:cd:0c:77:b3:1f:14:42:ce:fd:8d:c7:38:a8:
46:a5:de:9b:2f:dd:00:ba:a8:c5:45:8e:a5:8c:75:77:84:2f:
1f:40:13:49:d1:de:cf:00:f6:d9:a6:5c:ce:49:de:cb:59:9f:
bb:f7:9e:1d:05:5f:c1:23:14:5d:b6:34:79:a6:16:25:54:40:
fb:82:fb:23:d1:50:c9:28:f2:87:52:c6:d0:87:b9:44:64:06:
5c:b0:c0:49:c5:00:18:e3:ac:09:aa:35:40:a4:66:8b:36:a0:
56:09:67:41:a0:16:39:69:3a:e1:8d:52:b1:61:e7:92:be:54:
5c:9d:67:8f:3c:16:7a:46:7c:0f:a3:8d:e8:2d:29:e4:8b:52:
45:b5:8e:5c:c8:59:fd:58:99:15:3b:a1:51:51:8f:7d:dc:f7:
8d:2d:88:89:cc:39:74:99:f2:08:38:7b:05:49:cb:86:88:a1:
24:00:35:86:fd:3c:18:81:7a:32:8b:db:51:31:0d:48:58:39:
83:0a:01:94:fe:67:b2:76:43:fa:a0:aa:33:5c:e6:05:87:50:
91:19:50:46:84:df:32:0b:3a:3f:1a:fc:62:ca:81:df:be:d9:
73:1e:fa:30:84:f0:a0:86:ed:0e:07:f0:55:5f:9d:07:25:52:
76:4f:df:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:03 2025 by rpki-client