Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69f6c918-f0f6-33bc-8d57-1733bf7f8280.roa
File: 69f6c918-f0f6-33bc-8d57-1733bf7f8280.roa (raw, json)
Hash identifier: ojegZFlON9geMjiTKA+uA+sFfSc34wqfWUvP+OZgwRI=
Subject key identifier: 83:3E:E7:FA:49:49:64:84:E3:FB:AD:ED:0E:BB:82:C5:1D:E4:DC:55
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FE076BAC12AC5367B3C580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69f6c918-f0f6-33bc-8d57-1733bf7f8280.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.251.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fe:07:6b:ac:12:ac:53:67:b3:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b6e7c996-d649-4416-a29d-5212c036d138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:1c:92:42:21:e1:fe:ed:6d:27:b8:57:9c:
9c:b3:03:9d:4d:cb:e4:87:34:41:d9:19:69:c3:74:
6e:a7:41:c3:9e:dd:20:4a:0f:65:1f:19:aa:58:5e:
55:eb:a9:b0:5c:3f:f8:db:ad:2e:73:2b:0f:c9:c6:
24:88:f9:36:33:64:28:40:8d:f4:40:91:62:67:41:
e6:2b:b0:49:ac:a1:a7:ac:ab:0c:c9:9c:e6:ea:c5:
a3:14:7d:5b:e2:0a:6f:39:b6:3d:24:42:ad:03:6f:
cf:ee:26:2c:82:30:dc:c9:c1:76:bf:93:f9:6c:42:
ea:9f:ca:15:03:ca:13:06:4b:c1:71:ce:20:93:3a:
f0:65:b0:7d:47:71:71:d1:dc:f2:e3:5f:b5:be:3a:
bc:45:14:39:da:58:f7:60:96:58:d0:52:d1:f4:88:
ce:da:98:21:41:10:1c:b2:3a:38:50:7e:0b:0e:7e:
1d:49:94:c4:05:db:fd:d8:5e:86:bb:34:03:69:14:
19:ae:5c:f1:4b:a7:4c:64:21:fc:44:7f:01:dc:93:
63:41:44:7d:64:46:59:97:d9:80:ca:a7:8c:e3:22:
13:60:76:a8:22:51:fa:88:17:2e:2c:b8:5d:db:2f:
74:c4:f9:b1:9c:d3:2d:b5:ce:20:2d:a7:a6:37:e8:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:E7:FA:49:49:64:84:E3:FB:AD:ED:0E:BB:82:C5:1D:E4:DC:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69f6c918-f0f6-33bc-8d57-1733bf7f8280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:38:44:de:6d:83:9a:81:e6:92:84:0d:0a:b9:e6:d0:10:db:
0f:9a:43:73:4c:e9:6d:e8:0c:fc:61:b9:27:f7:41:09:08:0b:
3d:d8:63:f8:9d:11:fb:4f:14:18:1c:0b:da:84:e5:e6:01:21:
2a:45:82:76:95:47:db:80:bb:d8:1c:b5:5c:57:aa:2e:83:3f:
e2:33:66:1b:b4:9a:d5:e1:fa:fc:bf:16:6a:88:e6:6a:41:e5:
ba:1f:1c:5e:e1:55:d1:fd:ab:05:0b:2e:3b:0c:96:5d:64:3f:
ea:c8:58:f8:a9:8c:c3:61:e9:fb:5e:b4:f0:52:0d:37:e8:73:
2a:2c:8a:31:bf:df:fa:ae:cb:d3:5f:7d:80:44:c2:22:c4:26:
f4:e0:40:cc:ad:dd:0d:56:58:37:61:01:8e:1c:7d:10:9a:a8:
15:56:02:d5:a2:01:df:a8:8e:1e:1a:25:82:25:e4:87:2d:33:
07:57:8e:36:0b:0b:7d:9b:12:35:64:9a:53:dc:21:89:b7:8a:
9d:e5:db:d1:34:bb:fe:c9:ce:9a:9d:83:97:52:d0:11:c0:05:
86:95:17:e6:85:63:23:82:d5:59:47:17:1b:27:51:36:26:24:
53:cb:19:72:9c:37:30:8f:34:e7:5d:a3:1d:1a:c7:67:c7:06:
f6:64:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:31:24 2025 by rpki-client