Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a00bcaa5-c58f-3f0d-8e7f-7dc8a6adfe52.roa
File: a00bcaa5-c58f-3f0d-8e7f-7dc8a6adfe52.roa (raw, json)
Hash identifier: qmsFRPn5/jAkezLX8uCGS1iZ9JPMaK+CpJZjyaG7IFA=
Subject key identifier: E4:5C:76:5B:9F:AF:91:D2:3F:DF:72:35:EA:62:5A:F4:A5:88:8F:71
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B4DA780918804AC2B45E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a00bcaa5-c58f-3f0d-8e7f-7dc8a6adfe52.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 199.223.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:da:78:09:18:80:4a:c2:b4:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=391fd1cc-ed92-44a6-8119-dc19bd8e34a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:18:f6:2b:34:72:6c:d8:1e:fb:6c:08:c9:5f:
c3:73:60:4c:69:8a:32:9b:7f:55:06:c6:39:cc:f7:
6c:b3:ba:4e:a7:16:bf:12:9b:7e:7b:ce:0b:e3:e0:
ac:d0:3c:37:8a:b4:5c:78:5a:c5:c3:a6:8a:94:e9:
3d:f8:c7:6d:45:e1:93:63:c2:8d:6d:1d:55:68:33:
7a:86:20:a2:1b:c7:52:85:c3:f0:a0:75:c7:e8:b6:
85:c8:56:fd:76:25:87:6f:0b:eb:7c:6a:9e:fa:99:
42:a6:e2:6d:3a:e0:e5:af:48:33:ca:ae:23:d2:b4:
ad:01:70:55:0f:6c:b3:86:a1:bd:94:cd:b0:bf:cc:
a1:29:68:fc:26:90:8b:96:e8:45:8d:ab:b5:94:19:
46:7c:6c:7d:f7:f9:47:0c:2f:d4:ba:24:65:c3:ea:
70:7b:60:dc:9e:18:31:a3:17:d1:69:e2:a3:89:bf:
4c:5a:f8:20:b5:a8:71:7c:bb:8a:36:71:20:41:ba:
71:f0:a6:90:c4:4b:5c:b6:f9:fe:b8:b4:37:b4:f5:
92:a0:60:25:8d:32:b5:23:d7:6e:71:8e:55:57:48:
17:2e:61:17:9b:13:f2:56:f9:9b:77:66:9d:70:3a:
db:db:fd:f8:47:37:9f:49:1e:05:88:a1:b8:3a:53:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:76:5B:9F:AF:91:D2:3F:DF:72:35:EA:62:5A:F4:A5:88:8F:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a00bcaa5-c58f-3f0d-8e7f-7dc8a6adfe52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:82:4d:86:20:aa:ce:14:c3:80:12:06:0a:e3:68:b1:e8:31:
ca:20:9a:b1:d2:91:fc:a9:aa:6a:51:5d:c4:f0:b7:13:14:38:
55:40:14:01:80:f8:70:96:bb:50:bd:c0:1a:39:83:22:28:a1:
17:cc:6d:1c:19:b6:a9:e6:ff:f0:75:14:70:f1:80:0d:c7:ec:
40:b5:b1:84:aa:33:62:59:bb:ed:49:92:5b:3c:c4:0a:86:b6:
70:95:bc:74:eb:b8:64:71:b2:37:57:c7:08:db:10:fd:16:db:
0c:33:77:46:bb:a2:46:a0:30:92:1f:0d:5e:0f:2b:e3:30:ca:
5f:9a:c9:52:fb:8e:cb:63:37:80:ce:30:b2:d5:52:d2:db:59:
1e:8e:7a:57:a7:b4:45:01:42:70:5c:3b:54:d3:fb:a8:71:a2:
f8:dc:33:81:f7:80:00:20:b5:40:b9:c1:1e:92:92:27:f8:5e:
b0:53:97:68:19:58:fc:cf:76:7f:65:ec:51:1f:70:8d:56:80:
e7:13:d6:a8:8b:93:f0:58:7b:a9:94:53:49:b6:f6:d4:c6:81:
62:61:8e:1c:71:7b:4d:75:f3:9e:11:12:37:f6:1e:46:ff:de:
b0:e8:09:2b:56:0d:d6:da:07:99:de:cf:7d:2f:6d:50:50:da:
44:ba:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:21:10 2025 by rpki-client