Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c22b64f-30c2-3bb7-a491-26947886b1d2.roa
File: 8c22b64f-30c2-3bb7-a491-26947886b1d2.roa (raw, json)
Hash identifier: 1D5VDVOfUA1WLl5wYOinuyx39BedvgdcR2NHTCg0ZQ0=
Subject key identifier: F2:28:77:3A:59:3B:79:37:A3:FF:57:2A:8C:0A:A3:D6:F2:EE:A7:FB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A01F5E7CDA102999C6A9500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c22b64f-30c2-3bb7-a491-26947886b1d2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.236.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:01:f5:e7:cd:a1:02:99:9c:6a:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=02de57b9-df6c-452f-a767-03e193f0e314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:11:4c:0a:2a:65:47:f0:71:a3:2e:0b:fe:
db:ee:2c:79:af:a1:b8:1f:4a:e0:16:d8:bf:10:0e:
34:2e:1f:bf:08:29:c5:a3:be:0d:11:5a:3a:78:9d:
e5:0f:87:78:cd:01:9a:37:c6:e7:8b:71:99:11:8a:
e8:ef:70:b7:e3:ce:15:4e:e9:ea:78:a6:2c:ce:f9:
e4:76:90:43:d6:8c:83:a6:5b:75:f5:a1:e6:2a:44:
af:fc:e2:ef:be:0f:80:ca:0e:29:b3:5b:28:8c:64:
2c:2c:2e:82:91:79:4b:9b:dd:d9:a3:ab:4e:ee:ff:
26:2f:74:4b:e5:3c:b4:c0:e3:47:5c:fd:6d:4e:19:
ef:9e:2a:e4:ee:45:85:25:03:cd:f4:48:23:1f:22:
94:84:1c:cb:6d:6f:14:e1:13:7b:15:8e:55:5f:23:
93:f9:49:a1:29:1c:7e:13:5a:6f:af:69:4e:55:ea:
d5:51:29:47:51:0c:91:fc:da:f6:26:7d:e2:2a:4b:
ee:43:74:22:c5:b5:36:45:a1:82:02:38:7f:fb:93:
6f:ec:b0:dc:28:ab:62:fa:91:b3:f4:43:f8:0c:90:
3f:30:c4:36:b6:0b:5b:55:1c:a5:e6:08:be:21:e0:
dc:10:cc:f9:89:1c:dd:4f:59:8d:04:3a:1f:e6:a8:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:77:3A:59:3B:79:37:A3:FF:57:2A:8C:0A:A3:D6:F2:EE:A7:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c22b64f-30c2-3bb7-a491-26947886b1d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.236.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:43:56:5b:29:ab:c2:9f:14:c5:83:c6:63:49:5c:6c:0e:78:
32:1b:f9:e3:09:42:f9:f7:a2:3b:8e:2b:8f:d8:9b:0a:7e:3f:
50:21:cc:50:e3:6a:ad:f0:b9:9e:dd:8f:81:aa:45:f6:44:db:
55:e9:9e:58:80:82:04:1f:7d:43:c8:02:f5:ed:a6:63:09:18:
15:df:c0:20:24:8a:b5:ed:7a:e5:f7:64:69:09:0a:ba:3e:57:
e3:4b:e7:cc:cf:f5:78:2b:57:68:48:d8:82:06:18:f2:de:87:
47:73:75:f4:a3:33:e5:88:90:f2:bc:d7:5d:54:9e:4e:a8:ba:
2e:f9:7a:1b:89:e1:41:5f:c0:83:fb:36:3d:1b:89:ca:9c:8c:
0d:e6:b9:86:ce:cd:79:57:62:c9:b5:77:50:8a:e7:8a:ce:c5:
7d:50:98:74:ca:1e:ec:d8:82:9e:59:fd:f4:39:26:ac:57:c7:
ed:69:43:2b:31:94:87:b8:9a:e4:77:9e:b5:a6:05:0c:41:d9:
dd:ca:e5:b8:44:61:d7:f8:6f:ff:93:16:b1:de:79:fb:9c:e1:
41:f1:83:78:13:40:af:3a:6a:8f:d9:f9:86:f2:61:df:60:b1:
bc:c0:de:80:dd:4f:31:64:80:b8:13:a2:6a:22:b0:92:ac:d9:
ba:e2:db:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKAfXnzaECmZxqlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDJkZTU3YjktZGY2Yy00NTJmLWE3NjctMDNlMTkzZjBlMzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQARTAoqZUfwcaMuC/7b7ix5r6G4H0rgFti/
EA40Lh+/CCnFo74NEVo6eJ3lD4d4zQGaN8bni3GZEYro73C3484VTunqeKYszvnk
dpBD1oyDplt19aHmKkSv/OLvvg+Ayg4ps1sojGQsLC6CkXlLm93Zo6tO7v8mL3RL
5Ty0wONHXP1tThnvnirk7kWFJQPN9EgjHyKUhBzLbW8U4RN7FY5VXyOT+UmhKRx+
E1pvr2lOVerVUSlHUQyR/Nr2Jn3iKkvuQ3QixbU2RaGCAjh/+5Nv7LDcKKti+pGz
9EP4DJA/MMQ2tgtbVRyl5gi+IeDcEMz5iRzdT1mNBDof5qiTewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIodzpZO3k3o/9XKowKo9by7qf7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGMyMmI2NGYtMzBjMi0z
YmI3LWE0OTEtMjY5NDc4ODZiMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+w0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpDVlspq8KfFMWDxmNJXGwOeDIb+eMJQvn3ojuOK4/Ymwp+P1AhzFDj
aq3wuZ7dj4GqRfZE21XpnliAggQffUPIAvXtpmMJGBXfwCAkirXteuX3ZGkJCro+
V+NL58zP9XgrV2hI2IIGGPLeh0dzdfSjM+WIkPK8111Unk6oui75ehuJ4UFfwIP7
Nj0bicqcjA3muYbOzXlXYsm1d1CK54rOxX1QmHTKHuzYgp5Z/fQ5JqxXx+1pQysx
lIe4muR3nrWmBQxB2d3K5bhEYdf4b/+TFrHeefuc4UHxg3gTQK86ao/Z+YbyYd9g
sbzA3oDdTzFkgLgTomoisJKs2bri22Q=
-----END CERTIFICATE-----
Generated at Sat May 10 12:06:39 2025 by rpki-client