Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f53c843-106c-3f37-b330-816734fc3fb3.roa
File: 8f53c843-106c-3f37-b330-816734fc3fb3.roa (raw, json)
Hash identifier: wS/fPgGp4IVCheuz9ZcZM0dRP3qzGCtAnZICTlvYK9E=
Subject key identifier: 21:CB:FC:47:B0:41:9F:B6:0D:9C:9D:03:48:01:D6:30:48:F1:CA:7A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A20A9DC5ACA3F908C571E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f53c843-106c-3f37-b330-816734fc3fb3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 130.211.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:a9:dc:5a:ca:3f:90:8c:57:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=58080b4b-8bda-4c47-9f53-70a5268b6e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:7d:14:2a:1b:51:26:e5:ec:92:32:20:0a:
7c:29:9e:0a:68:8c:5b:45:26:59:29:1e:81:0f:61:
22:c9:70:51:61:e1:00:8c:2c:64:c6:0a:fb:75:51:
1b:2b:af:db:5e:58:b4:fd:81:91:6e:f4:a2:52:2f:
86:4e:8e:fd:7e:ee:ae:a2:f2:f0:9e:ca:69:60:56:
88:04:ad:b5:32:4f:fd:9f:14:cc:2d:aa:10:ba:93:
10:5d:ee:dd:91:0a:05:15:e1:d1:b5:1e:1e:1d:45:
cf:fb:25:dd:b1:56:86:01:d2:de:47:45:a5:ab:a6:
d7:65:85:ae:3d:21:0b:5c:03:45:c1:35:f5:9d:92:
fe:8e:29:3d:92:97:5a:a3:bf:e3:06:2f:66:32:32:
b1:d5:05:c0:fa:fb:a2:a4:30:5e:94:9f:a4:77:09:
65:c7:69:c5:67:c7:15:5f:83:af:70:55:20:2f:29:
35:55:56:a2:9d:80:5f:72:5f:8c:08:d4:d8:73:03:
0b:6a:de:d7:1c:0d:9d:66:04:6f:2e:0f:09:8c:53:
0c:4e:ed:58:93:4d:53:18:ac:e8:d9:1c:6b:bf:70:
94:89:75:b9:bc:09:f5:c1:bf:c5:5d:be:f6:6e:a9:
e7:2d:2c:c1:ef:2a:26:08:9c:b9:89:82:db:fe:2c:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CB:FC:47:B0:41:9F:B6:0D:9C:9D:03:48:01:D6:30:48:F1:CA:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f53c843-106c-3f37-b330-816734fc3fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
130.211.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:e2:81:35:8c:fe:cd:3d:3f:47:91:ec:77:07:87:83:27:b7:
25:fc:68:8b:f6:b8:ba:44:e9:2b:13:c3:a5:11:8e:48:3f:4b:
25:cc:01:b0:55:68:5e:6d:c6:01:c4:56:57:65:86:f3:21:38:
5c:94:44:ec:7a:bb:50:0a:be:9a:4c:e1:db:af:14:4a:ae:53:
af:f5:1f:9c:81:4e:d1:27:90:2e:d2:e7:d9:a2:42:02:35:f3:
34:63:de:35:cb:cf:42:c2:05:9f:0a:e9:64:23:95:d1:a5:b6:
d8:c9:c5:e5:e9:72:d1:04:a0:59:f0:69:73:55:12:ff:a4:51:
da:5b:6f:74:3f:60:0a:66:61:19:e5:8e:07:0a:82:9e:50:10:
f3:a3:17:f8:36:a0:4f:e8:b9:7d:b0:e9:48:12:ac:7d:97:36:
e1:ad:5f:32:3e:ff:46:6b:7a:2a:48:fc:2c:b3:54:07:36:7e:
36:72:c7:cc:c6:b8:b7:b9:be:f1:b6:4f:cd:87:f9:29:4e:65:
93:0e:f2:00:ec:d1:84:74:31:11:2b:c5:b5:d9:fb:c1:3f:a2:
0f:7d:80:8d:7d:46:d4:d1:23:d8:73:f4:86:73:b1:73:d8:f1:
3e:2e:97:58:2f:31:f4:58:eb:12:83:50:64:f7:b8:82:1a:f8:
d8:a1:b4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:17:49 2025 by rpki-client