Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668ee6f1-3ba1-3e20-be90-eabe6a6cb0e4.roa
File: 668ee6f1-3ba1-3e20-be90-eabe6a6cb0e4.roa (raw, json)
Hash identifier: 8Y84lkeBVNsnRTqnISzwD5vCSusHwTngy+ipR3dh3ZA=
Subject key identifier: CE:D7:1A:2A:37:30:60:09:87:A8:A8:69:46:5C:DF:08:5C:FF:61:B0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A26396F691FE57054C70640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668ee6f1-3ba1-3e20-be90-eabe6a6cb0e4.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 162.222.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:39:6f:69:1f:e5:70:54:c7:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8ab43996-3122-4051-96ea-863e9d07d765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:aa:40:6d:2e:1a:c9:28:b7:18:8f:67:a3:
77:b7:73:f2:4b:4b:5b:b3:69:b5:36:a0:63:0d:49:
97:93:7b:81:cd:74:b0:78:0b:39:72:d1:d3:f1:2b:
f4:0e:dc:51:e2:3e:fa:0e:b7:0c:80:3b:49:42:c5:
b2:e1:7f:5d:90:8d:ab:47:22:6a:80:d5:68:33:0d:
35:b5:eb:3f:58:80:08:3d:18:21:92:20:2a:0e:a1:
44:76:28:76:b9:83:d9:f7:d5:3c:b2:71:fc:ac:c3:
8e:f1:6d:5a:37:97:6a:55:38:c1:8c:b2:1b:7f:fb:
2b:dc:81:15:bb:f7:ac:c0:c4:6c:46:47:ea:a5:93:
89:37:76:f2:b1:cf:59:32:be:ab:79:69:e8:e0:fb:
12:3d:2e:f0:3c:79:41:85:5f:ad:4e:e9:91:23:35:
95:c6:69:65:69:95:15:9d:58:73:f4:38:26:5f:d1:
ee:26:0c:0f:01:04:2b:e8:75:b2:d8:f8:0a:67:b8:
a2:58:0a:97:71:ce:fb:1e:36:34:da:58:38:52:7a:
e8:06:af:0f:ed:c9:60:55:86:55:a9:36:f4:45:c9:
f8:5e:fc:ce:3d:64:4c:06:d2:c1:69:9a:89:1e:b3:
30:e8:c4:5b:4a:bb:fb:22:0f:ae:17:dc:71:91:31:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D7:1A:2A:37:30:60:09:87:A8:A8:69:46:5C:DF:08:5C:FF:61:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668ee6f1-3ba1-3e20-be90-eabe6a6cb0e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:36:56:85:55:68:06:99:32:3e:8c:20:63:28:f8:c6:6b:ca:
83:9f:f4:a6:1b:86:9a:4c:7f:00:7e:f1:e8:f5:18:8a:ba:cd:
69:c8:29:11:86:bf:5f:b6:95:69:79:3d:3e:41:80:26:cf:19:
3c:88:a8:77:e0:7a:da:a0:8d:c4:17:5e:09:a5:74:8b:a8:0b:
86:d3:b4:5f:28:8d:3f:fc:11:ec:7b:1a:fe:cd:88:e3:06:bd:
6a:8b:9d:cf:aa:f3:05:af:ab:ce:ba:53:fc:86:9f:8f:5f:63:
71:11:7f:11:d3:2f:a3:02:fc:ff:34:97:2e:d4:c7:41:0f:0d:
50:a2:cf:bb:a5:2c:c5:ec:82:33:41:ca:8e:06:a2:a1:44:97:
34:91:91:19:e8:15:2a:1d:26:7f:9f:d3:95:78:bc:71:7a:37:
eb:90:ef:3c:9e:01:0f:04:44:7c:a2:2a:c4:c7:4c:ef:de:a8:
e5:96:20:1f:83:93:23:7d:b8:9a:88:d5:50:78:e5:f7:a4:a6:
1a:99:03:72:c7:cf:a9:09:d0:34:ae:23:99:87:3c:a6:52:90:
ef:02:e1:49:bd:c8:4e:c8:c6:c8:c2:f2:a7:c9:15:40:d1:8d:
e7:23:37:5f:34:3c:ff:ac:b9:eb:d8:fc:ad:6e:3b:db:eb:2b:
6f:1a:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:36:48 2025 by rpki-client