Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e1a1eae-d556-3ebb-930a-bf7c5863b943.roa
File: 9e1a1eae-d556-3ebb-930a-bf7c5863b943.roa (raw, json)
Hash identifier: MkALZbuR9y8qb2ccKqcIVHCcslyB5/39kpoqpAAQlng=
Subject key identifier: C5:FD:EF:A0:4C:FD:21:63:EE:9B:18:82:22:A6:14:62:E6:4B:79:52
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A245166797DA1237F5B5380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e1a1eae-d556-3ebb-930a-bf7c5863b943.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.236.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:51:66:79:7d:a1:23:7f:5b:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8a2685ab-e940-4a7b-8f45-3ddc017bc6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:e5:65:0a:32:23:63:25:67:57:7c:cc:a2:
a6:15:ac:cd:53:65:9e:be:da:74:46:5b:19:9c:d2:
7b:ce:15:42:7b:26:5b:a7:58:ad:bb:fb:c8:a0:2c:
2f:dc:83:66:16:03:fa:71:ca:6b:02:1e:94:9e:a7:
31:c8:3e:bd:ca:d9:c5:56:c4:89:07:6e:bd:f8:4b:
f4:4a:b5:fc:48:1a:31:01:84:fc:9a:43:aa:18:06:
b5:6f:3d:c7:14:c7:e9:ed:06:bf:42:27:18:b9:bb:
d4:6d:dc:ea:4d:b1:f4:77:59:db:61:28:3c:db:6b:
cb:04:8f:32:5a:38:bb:4e:6f:21:32:0a:24:0f:73:
c0:23:fd:f5:21:e7:f9:50:91:72:11:2c:39:37:e2:
73:0d:7b:f0:04:77:05:90:d4:47:26:78:f3:63:02:
ef:dc:76:02:ad:e7:85:a1:6c:ed:ef:3a:ec:df:28:
13:22:fb:2e:18:fb:e0:43:72:40:e5:2b:20:87:b5:
e0:7d:0c:5a:e4:c3:2f:59:5f:ea:fb:87:15:ba:e5:
aa:91:b6:04:72:a4:ee:0b:44:35:9f:31:a3:38:8c:
73:8b:6b:e9:6b:36:5a:8c:61:68:19:01:2e:ad:14:
21:d1:15:49:89:e7:73:07:3b:d5:6a:94:ab:c3:04:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FD:EF:A0:4C:FD:21:63:EE:9B:18:82:22:A6:14:62:E6:4B:79:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e1a1eae-d556-3ebb-930a-bf7c5863b943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.236.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:cc:46:f8:7b:b5:a4:ce:c6:97:ff:59:d6:61:2a:35:d5:7a:
eb:02:04:95:a6:e9:06:31:1e:e7:46:cd:ef:d5:6b:86:34:0c:
15:5c:87:13:74:36:a6:24:e9:0b:fa:3d:ad:61:77:25:1c:3c:
18:2f:37:4d:6d:27:b3:e2:ef:9d:2b:22:93:58:3e:87:98:2a:
36:ec:6d:32:ca:6d:76:8d:9f:c2:97:cb:5b:3f:47:c5:d1:fc:
37:e9:83:e3:ed:ee:96:22:a7:f1:d8:38:d5:3f:5f:5c:df:b9:
05:24:9d:76:0a:7e:8d:9c:96:2d:ba:1b:22:56:3d:4b:aa:24:
6a:49:8e:85:6b:93:f5:88:73:4a:19:db:2b:4f:4c:d3:6f:fe:
fd:10:14:a0:bf:74:62:ef:32:e3:7c:9c:2a:3e:e0:3f:df:47:
5c:36:45:bd:fc:c8:ed:46:1b:65:59:e9:f5:ee:8f:94:16:85:
04:3e:40:b3:af:f0:de:81:a3:13:87:8e:53:66:f5:9e:8f:19:
59:20:9e:a6:fe:ef:ac:9b:bf:a5:d8:f7:a1:de:92:16:37:4d:
fd:c0:64:99:fc:a2:6c:d0:08:c7:1c:f4:5d:9d:85:20:51:fc:
a0:72:07:ad:b0:79:a0:7c:84:af:96:ee:c8:8d:cc:37:86:1c:
09:34:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:09:14 2025 by rpki-client