Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f55c41d-0d4d-37d4-898a-5940d5f41001.roa
File: 9f55c41d-0d4d-37d4-898a-5940d5f41001.roa (raw, json)
Hash identifier: WJHTj/ghNm4Vsx7DGRTiFTxOTkWsKALtT6wS5V3GfeI=
Subject key identifier: DA:2C:D1:80:B1:92:20:92:53:8F:C8:CF:67:95:CA:13:2E:58:52:04
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BA8CC471401AEE98770280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f55c41d-0d4d-37d4-898a-5940d5f41001.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 199.223.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:8c:c4:71:40:1a:ee:98:77:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=64a60528-5866-4861-9a18-fd9dff2a23dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:46:64:bf:6e:46:36:17:3c:5c:6e:f1:0c:
5d:02:aa:e1:85:2e:63:f0:3f:96:b5:ea:73:59:6c:
18:bf:4d:5a:8e:06:1a:2c:53:64:5c:9b:50:ed:27:
16:25:47:ec:59:6a:c9:dd:89:44:7f:4e:78:63:18:
d3:e0:7b:bf:43:8f:e2:e8:b7:45:20:f1:77:2f:41:
dd:61:81:b4:aa:c3:a0:76:b9:4b:bc:94:a6:4f:23:
77:bc:0d:17:77:0b:76:3c:9e:09:5b:73:7f:b6:97:
5a:44:6e:68:96:65:43:c9:8a:6e:64:c7:c4:c9:e7:
94:35:69:10:92:ca:fc:b8:ad:ee:cc:c3:42:7f:ee:
3d:7a:20:5d:45:8a:ff:37:35:0a:9c:8b:1c:9c:97:
33:5f:79:ba:c7:76:f3:ec:77:e8:5a:1f:3f:79:6c:
6f:90:50:33:99:a2:9f:3e:23:be:06:81:80:47:e0:
ca:42:14:f1:59:11:d6:f1:04:25:65:ff:1c:bb:61:
df:e5:82:14:d4:7e:c4:db:d5:d7:e0:aa:ad:fb:27:
b9:f3:50:e3:39:80:20:f7:07:8d:7b:d6:e5:97:92:
0a:22:51:f9:61:80:41:c5:53:49:ce:5d:21:c6:0f:
b0:cd:7e:bc:f8:e9:f8:f0:83:6f:f7:43:9f:0e:c1:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:D1:80:B1:92:20:92:53:8F:C8:CF:67:95:CA:13:2E:58:52:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f55c41d-0d4d-37d4-898a-5940d5f41001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:26:2b:6b:81:74:c8:98:8f:4c:ac:89:d0:5f:99:49:c1:37:
c1:82:36:72:75:87:ad:29:c1:98:ab:ab:a9:2d:9e:1f:95:43:
d5:61:92:f4:3f:4b:33:2e:fe:1b:48:10:75:92:d6:73:c8:79:
38:0e:1b:58:e4:f7:42:28:e9:33:4c:a8:bc:40:54:5f:c2:30:
fb:37:36:5b:b7:2d:78:3c:7b:30:ce:4e:c6:64:ac:7b:9d:f6:
83:85:15:75:1b:15:62:86:ab:50:df:3f:41:3e:00:ba:b1:f4:
87:29:31:b2:b2:21:6f:f7:8e:19:6a:d6:e2:89:73:a8:b6:6d:
f7:1c:68:e2:34:e4:09:4a:68:2d:85:13:d9:79:fe:46:fe:99:
a2:d3:1b:02:6b:21:39:ea:32:38:eb:9e:f9:5d:9c:9c:8f:59:
e3:31:32:33:c6:78:4f:07:b3:f9:ee:1b:bf:33:56:74:9b:a3:
4a:c2:04:63:ca:8b:f8:73:09:bf:ac:58:c0:1f:aa:d1:4b:32:
6b:77:06:8b:b5:9b:94:dd:37:6f:1d:17:9b:d0:2a:ab:df:ab:
11:c1:9c:88:b5:9e:19:23:25:d9:87:78:45:41:83:b5:33:47:
71:4f:fa:1a:03:61:90:28:22:a9:04:8b:fc:e2:8c:a2:39:4e:
a5:b4:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:44:15 2025 by rpki-client