Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a53a5b0-3fa6-3f66-9379-ed1071333373.roa
File: 7a53a5b0-3fa6-3f66-9379-ed1071333373.roa (raw, json)
Hash identifier: 7jmhdb7V80AINwnr8ygHa5mEnUjY1e8yb5V2UPoOjGw=
Subject key identifier: 68:8C:25:62:5A:3B:E8:42:84:AB:93:77:6B:A1:E1:39:5C:DB:D7:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0CC25C477AA90ABCC1E1C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a53a5b0-3fa6-3f66-9379-ed1071333373.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.251.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:c2:5c:47:7a:a9:0a:bc:c1:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=48b9b8bb-c5c1-4866-b98f-4d8b46c08d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:d5:55:f4:86:17:83:a7:1f:49:06:13:85:
4b:3e:9b:63:b7:36:d4:b0:c0:38:22:2e:fb:ee:c3:
29:8c:08:24:2a:3e:fb:db:2a:3e:88:dc:9c:0b:72:
73:a6:81:df:d4:3c:54:37:06:53:5a:ab:f2:47:5f:
dc:b5:d6:4b:5c:c0:a8:f4:74:bf:b1:aa:1f:f2:1f:
f4:fb:21:54:57:9d:40:20:ba:5b:18:8b:3b:d1:fe:
76:61:7a:02:54:99:33:37:2d:ed:0b:de:97:a1:c2:
09:98:9b:e0:25:fd:44:04:ac:49:b5:01:a9:c6:c9:
09:e1:6b:3e:21:07:a0:d2:83:80:b4:ba:ed:e0:d4:
1e:9a:85:10:7e:83:6d:3f:c4:0f:0b:af:63:30:e6:
be:6e:a0:fe:4b:db:fd:ad:06:77:bb:a9:50:ca:89:
6a:f7:40:25:66:87:64:bf:32:00:7b:94:4d:9a:43:
2d:4c:bf:b5:87:b1:8f:da:1e:8c:36:53:dd:eb:27:
c4:a9:74:04:df:66:5c:52:a4:04:81:2f:83:6b:e1:
3d:bb:bd:22:eb:19:4e:92:63:26:a0:54:5a:e9:55:
2d:d2:3e:39:48:39:62:68:f1:8e:bc:e0:ee:7c:7c:
03:0d:3b:3a:5a:92:1b:06:3b:82:a7:f3:4b:ec:7e:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:25:62:5A:3B:E8:42:84:AB:93:77:6B:A1:E1:39:5C:DB:D7:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a53a5b0-3fa6-3f66-9379-ed1071333373.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:32:c5:97:af:89:c2:6f:04:35:c4:9e:d9:a7:82:30:47:56:
f8:9f:dc:15:f4:69:ee:94:16:c1:ab:ff:dd:aa:9a:90:da:ae:
cc:0f:2b:c9:27:19:6b:87:ef:c7:c7:a4:f9:b0:3c:78:5f:7e:
bd:ea:b1:0b:b4:3e:2a:a9:db:12:78:3c:59:eb:f0:7e:4f:99:
e3:7f:fe:79:c3:5a:e2:4d:c6:ec:bb:82:5d:a4:52:b9:77:72:
1b:2d:2c:e4:3a:0d:be:39:08:da:a2:19:7f:f6:c1:a2:a1:23:
43:b6:b3:a5:7d:4f:e4:fa:cd:dd:2b:39:19:48:7d:a5:9a:9a:
e7:c5:e3:3d:24:34:7e:49:1a:0f:27:c4:f5:0b:0b:3f:69:ca:
62:db:c2:b4:51:9b:b5:78:72:70:e8:8f:e8:49:60:6c:df:f3:
7d:4d:1b:b7:36:89:5f:a9:61:79:00:d2:40:c3:c0:76:d1:04:
58:33:e0:5d:56:1c:c3:80:53:0d:2c:40:6a:fd:b0:88:04:56:
ec:10:b6:d8:53:9b:9f:7e:20:49:ab:14:60:ca:6f:85:5a:13:
81:47:9a:b1:f9:bb:b8:dc:16:c4:f9:15:b3:24:a4:19:33:a8:
ab:98:28:70:d9:c6:5d:44:e5:e6:63:0e:2d:b2:26:36:6c:b8:
d8:b2:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:20:36 2025 by rpki-client