Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f5aa033-be7e-39b5-9419-dcfb0a7aa4c3.roa
File: 8f5aa033-be7e-39b5-9419-dcfb0a7aa4c3.roa (raw, json)
Hash identifier: TQbaLDIbJVpIL10IFW5kR5IOcZiRvxb5aJkv8Apy1YE=
Subject key identifier: 75:54:24:C5:20:4B:DD:DE:67:4B:45:DC:78:EA:1D:E9:8D:53:07:E5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F9F7AF8268A642F7E90800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f5aa033-be7e-39b5-9419-dcfb0a7aa4c3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 192.158.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:f7:af:82:68:a6:42:f7:e9:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=11ec336a-8935-4177-bb9b-3496e8e2c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:87:78:8a:e9:2e:21:a2:41:72:f5:86:96:cd:
a1:62:dd:35:fb:ef:4c:34:bb:e9:da:46:bb:ed:d9:
22:cd:74:f5:60:73:f4:d7:5a:56:f3:31:1d:2a:50:
bf:11:6b:1e:99:89:8c:08:05:4f:8b:cb:72:76:80:
e0:fa:64:b9:41:00:65:1c:2b:3f:03:6c:9d:66:bc:
f4:e8:23:9d:3c:3e:ee:9a:50:e1:36:f2:a4:2e:8f:
3e:af:5e:69:7a:da:86:a2:32:37:b7:b6:ec:f2:87:
6a:0e:7f:9a:51:37:3e:0a:18:35:96:31:33:4c:3c:
1d:9e:20:56:8b:db:08:7d:63:b9:56:25:2b:4a:2c:
b3:d8:9c:9d:ee:7a:c1:54:c2:76:b7:3b:a8:de:89:
34:91:9a:f3:ef:20:8a:27:47:9b:13:c2:aa:45:bd:
63:45:c7:57:52:52:e1:61:84:ae:3d:cc:f1:2a:bb:
4e:13:17:35:e3:3d:5f:30:a6:25:00:81:7b:d2:99:
42:31:ba:c5:e3:85:ce:26:be:dd:d5:cd:20:19:e3:
79:a1:13:3d:af:37:6b:94:ca:3f:61:31:30:78:3b:
c1:e4:d0:ae:34:9d:66:56:a2:0c:df:b0:b5:88:4a:
63:c4:6e:95:4a:42:53:b3:d6:27:ab:d1:f6:ba:6e:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:24:C5:20:4B:DD:DE:67:4B:45:DC:78:EA:1D:E9:8D:53:07:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f5aa033-be7e-39b5-9419-dcfb0a7aa4c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.158.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:22:80:1f:7c:4b:df:e0:e5:76:6e:04:82:cb:c5:ea:af:c5:
9e:40:48:06:8e:67:66:ff:bf:71:67:f9:4b:0a:c3:a9:2a:ef:
51:ea:c8:e5:e8:7e:47:fb:be:d5:81:7f:b1:80:23:cd:03:d2:
53:57:0e:ab:47:26:f1:6f:d8:4c:83:03:ef:b9:4f:a3:97:6f:
40:31:7c:c3:5a:f6:7f:c7:f3:53:bc:22:45:af:28:f5:ed:6c:
dc:ce:c5:32:c9:0d:c6:5e:19:9f:f0:b2:0c:f5:39:28:d9:55:
35:2a:15:98:cb:b4:3e:b4:b9:9c:e9:a6:66:5d:c2:51:20:63:
64:1f:e1:3c:0b:22:74:4b:be:b6:a7:d9:d8:76:56:17:b5:06:
2e:a4:f0:f6:95:cc:d9:42:10:d0:36:a5:23:a3:de:31:71:fc:
44:29:67:99:8d:8f:7a:dc:c8:6f:1f:cd:6e:20:9c:9c:81:b2:
48:8d:5a:f3:9e:b0:e3:65:65:be:15:48:e1:f0:ba:fb:bf:cf:
eb:28:d8:17:fc:13:c1:99:24:89:33:68:31:6d:26:14:7f:90:
bf:3e:a4:a4:93:d5:cf:b3:ec:a7:8a:21:f5:15:ce:81:c5:32:
ce:f4:36:d8:81:78:03:42:70:68:b7:58:3c:e9:bc:a6:8e:04:
9d:77:24:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:28:28 2025 by rpki-client