Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc13c9c-f011-333b-a1aa-b5bcf10a1e9f.roa
File: 6dc13c9c-f011-333b-a1aa-b5bcf10a1e9f.roa (raw, json)
Hash identifier: fBboVmLGJKvIhTmMug4CO4PTV+JvFunvCGt+oT9B3Ww=
Subject key identifier: 56:74:4C:91:9D:81:69:BD:B3:6E:B7:5C:56:4F:DA:FD:04:BA:77:9C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A00E2183154B0473058DB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc13c9c-f011-333b-a1aa-b5bcf10a1e9f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.251.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:00:e2:18:31:54:b0:47:30:58:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=63fb4b21-efa7-46bb-ab1c-4b7c5caf192d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:ed:17:cc:71:e4:9b:c8:e0:94:af:e5:a0:
bc:22:2c:04:39:35:00:47:dc:ff:4a:44:d2:f9:1b:
e6:e5:3f:23:9a:3c:01:79:99:cd:95:c5:a0:96:8a:
16:11:9b:e4:32:a1:51:63:62:5d:6f:c1:43:34:14:
8f:0c:a4:6e:09:41:7e:f8:06:cf:78:ba:04:4e:ea:
2b:90:94:15:d0:0a:a9:d8:24:a1:65:a5:5f:34:2b:
a9:9c:2d:89:d7:9e:77:d3:75:9f:b6:27:b1:f3:ba:
fd:8f:50:a4:a2:d5:27:38:c1:02:39:cc:7c:b1:8c:
1f:f8:2b:93:db:4e:40:79:db:49:87:5d:ca:0d:fc:
2c:55:d9:cf:1a:dd:75:4e:b3:5e:b3:75:83:0f:67:
8f:1d:51:5b:79:dd:e3:a8:69:09:c1:6f:44:04:9c:
46:6b:b8:c2:12:b5:d7:96:3a:4c:40:ef:05:2b:ee:
a2:c3:5c:08:0f:6d:a8:bd:c6:92:5d:0a:07:25:01:
e4:14:63:ab:66:09:3e:e2:01:ff:94:29:bb:16:52:
f3:63:53:b7:48:9c:c4:94:97:fa:a2:f2:23:6f:1c:
ee:3c:60:71:e4:e2:06:68:0f:44:aa:e6:35:3f:8c:
e7:d8:c6:b0:bd:6f:21:d4:67:47:ad:39:11:93:10:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:74:4C:91:9D:81:69:BD:B3:6E:B7:5C:56:4F:DA:FD:04:BA:77:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc13c9c-f011-333b-a1aa-b5bcf10a1e9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:67:d1:3d:71:ba:c2:be:b3:ef:47:5e:0f:01:00:2a:c6:fd:
8c:c1:bc:d9:d4:dd:c6:54:5c:e4:a5:04:a6:17:7c:9f:a7:33:
7e:4e:ba:1e:bb:04:af:c4:07:61:97:98:b6:22:9d:de:0f:78:
f5:7e:2e:4f:88:f5:10:b9:d3:b3:24:f4:be:53:cc:a4:bb:d1:
ef:b5:2a:4b:15:cc:2d:89:68:25:8b:5a:c8:d8:45:58:23:02:
63:e4:a3:8b:8a:cf:fe:60:1c:7a:6c:21:a2:23:58:b9:2e:29:
1c:dc:3e:f1:a3:4c:af:62:7a:b3:c0:f6:2a:ee:21:8e:f9:96:
2c:65:6a:ed:ed:a6:e2:cf:b1:3a:e9:85:33:db:9d:b5:1a:bb:
85:5e:de:2c:0f:3d:04:36:83:8e:76:ee:b7:a1:cc:9d:5d:0c:
fa:38:36:44:f3:50:3e:b1:da:8c:f6:df:1c:45:a2:ca:7d:7b:
8e:ae:0f:75:f1:77:75:0b:2a:7a:6a:aa:a1:32:2d:47:14:03:
38:a9:74:54:b2:e8:e0:78:a5:1f:90:32:d7:0c:40:8f:95:1a:
b7:0b:7a:75:92:77:a8:f7:d9:b6:4a:d0:53:bf:55:34:9e:f7:
a0:bd:86:8c:4a:d4:c3:23:a6:42:60:72:96:4f:b0:bb:99:b5:
ca:a0:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:41:29 2025 by rpki-client