Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e8ed4fd-a197-3405-9d60-f4e8a08a3f1d.roa
File: 5e8ed4fd-a197-3405-9d60-f4e8a08a3f1d.roa (raw, json)
Hash identifier: cwWH6Qk7sl4E0Ssu65W2Y9xvZCASfyZJwJDUolhM7kA=
Subject key identifier: 8C:B1:95:14:5B:ED:64:F9:15:92:FC:BE:91:1C:54:C5:9D:3D:8C:6D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A12FE60CDD3B3CE3E63F980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e8ed4fd-a197-3405-9d60-f4e8a08a3f1d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.236.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:fe:60:cd:d3:b3:ce:3e:63:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c89385dd-e509-4e8c-a33f-1eee863e24b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:15:7b:6d:8e:ed:98:06:3d:98:c6:00:bf:
d7:a5:6f:75:21:b4:39:ce:3c:d6:86:7d:ff:42:11:
eb:d4:7a:53:e6:96:12:b9:8f:a5:10:74:c3:40:9b:
b5:1e:96:05:84:f5:0b:11:09:ba:11:54:fd:0e:4b:
49:87:f9:40:5c:5a:e0:ac:e0:ab:8e:ea:5a:55:ca:
63:cf:34:04:09:23:d0:6b:75:a5:40:28:3b:77:2d:
86:97:87:bf:9e:f2:a2:9a:fc:7a:54:c7:00:7c:a0:
93:1d:77:37:fa:c5:49:d6:8a:71:57:ef:38:bf:7f:
f7:ce:a4:3a:c6:bb:c1:a2:b2:b0:ef:1e:ef:45:f3:
f8:ec:7a:31:ab:7b:91:14:f0:5d:73:fc:e3:61:d4:
4d:7a:27:53:c6:33:44:67:bf:d1:c7:f4:4b:b9:50:
6b:6c:92:24:5f:c7:aa:58:eb:39:ac:5b:03:80:9b:
7f:9b:f8:0b:b7:2e:79:e1:74:c8:3d:e1:3c:9b:be:
0a:a3:51:15:4c:36:91:d3:b6:cf:66:93:6a:41:55:
76:4c:15:95:c9:aa:4c:1d:09:33:ee:89:87:29:96:
42:2d:03:26:b5:c8:ce:c7:9d:19:26:9a:47:51:eb:
11:43:9c:ec:1b:21:d4:8a:51:47:e0:e1:24:ed:82:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:95:14:5B:ED:64:F9:15:92:FC:BE:91:1C:54:C5:9D:3D:8C:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e8ed4fd-a197-3405-9d60-f4e8a08a3f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.236.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:f6:e3:09:4b:53:d0:8b:8b:99:01:8c:af:b5:05:bb:6e:d6:
71:15:2a:1c:a3:8f:4f:47:04:ca:37:88:9e:14:43:77:e7:cc:
5f:b6:96:1a:61:92:10:89:6d:08:65:93:83:c8:78:7e:ca:21:
7a:96:2a:03:51:5e:db:79:fc:99:10:fc:92:47:f9:92:8c:b0:
f5:9f:58:2e:96:5c:9a:e1:53:f1:55:cb:91:7f:97:99:cc:82:
e6:e9:5f:01:a7:21:f5:0c:4b:f4:4d:cf:1f:cb:3d:ab:01:32:
34:57:38:81:2e:ca:43:7c:e0:f9:47:3b:df:79:1a:ca:ef:30:
0e:cf:0c:32:4d:04:12:f9:a5:ec:af:83:4c:ae:44:ee:07:fd:
fb:5d:a5:bd:31:2b:31:91:0d:49:9a:ff:04:f9:98:a1:a4:76:
1a:a5:ee:79:c8:05:ca:d1:d4:25:f3:17:92:c0:ca:da:d7:84:
cb:60:55:8f:7f:5c:ac:d4:d9:7d:6d:2c:69:49:2e:9b:15:01:
63:23:47:a8:cf:53:da:23:64:3d:0b:36:bf:ad:35:da:76:45:
dd:03:c0:29:c9:95:c7:ac:19:9d:23:1d:28:55:78:39:bd:a1:
53:1e:be:4c:be:be:c1:10:4e:21:30:37:e1:52:fa:8a:60:a4:
20:7b:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:27:19 2025 by rpki-client