Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b98dabea-59c6-3b68-aea9-f27e929c5ba6.roa
File: b98dabea-59c6-3b68-aea9-f27e929c5ba6.roa (raw, json)
Hash identifier: VzowfwvMZtr2Hl1+c8xiz+kFrZdQgUvTTpBNyyUGgg8=
Subject key identifier: 27:64:FF:B1:E2:D8:1E:02:C9:81:57:FD:98:59:BE:10:AB:E5:05:78
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0EC29403693BBE0B484460
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b98dabea-59c6-3b68-aea9-f27e929c5ba6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.251.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0e:c2:94:03:69:3b:be:0b:48:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=aca17be7-cb04-4f1c-8d7d-045ea45dbfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:ce:45:8b:de:d0:6e:3e:4d:94:8b:69:c1:
af:c5:ae:39:df:fa:b8:20:80:8b:d4:25:27:c2:3a:
c5:1c:2d:4e:b8:38:e8:68:24:fe:fd:f9:a7:e0:f5:
07:6a:3a:a1:6a:cf:16:7a:22:3a:a1:42:cc:17:60:
4a:c4:26:51:76:a4:6c:19:74:7f:ba:73:ed:f0:19:
1c:0b:c1:e4:18:21:29:a4:34:4d:4c:2e:4b:05:ac:
8c:7b:67:e7:ad:7b:14:05:73:1d:bc:02:cf:9a:8e:
ea:36:9d:34:16:a7:2f:da:7d:62:d6:3f:ac:4f:23:
62:4c:20:35:e2:15:5c:b4:41:57:c0:a0:13:ca:01:
f1:89:1e:e9:27:23:e9:c5:e2:77:97:41:b6:9c:66:
bb:ec:56:de:bc:33:cf:31:09:f2:25:dc:18:6e:ef:
b1:6f:a2:1c:60:cc:f0:46:54:af:77:79:11:dd:4e:
9f:0e:e6:78:2c:38:80:87:d7:1f:6a:aa:a1:ff:1f:
3f:b7:90:89:94:52:c4:6c:6a:d2:b1:68:04:c1:61:
a8:d2:45:35:99:34:af:a8:16:86:1f:ba:94:13:ac:
e4:d7:5f:3f:65:dc:28:b7:e1:a3:f4:8f:5a:e9:4e:
7f:7e:d9:45:75:d8:88:21:ed:b7:ba:9c:7c:5f:02:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:FF:B1:E2:D8:1E:02:C9:81:57:FD:98:59:BE:10:AB:E5:05:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b98dabea-59c6-3b68-aea9-f27e929c5ba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:06:f1:c8:e8:7b:3a:31:88:ea:40:f5:2e:bc:71:ce:7a:9d:
d9:d1:d4:a5:29:d2:cb:42:52:18:00:32:2e:6c:6c:05:36:fc:
5e:00:f5:93:2e:65:0b:7a:03:63:01:17:aa:65:58:1f:eb:a0:
e1:d7:fa:71:7b:1c:b2:41:53:00:de:b8:b5:d5:8e:d6:b1:cb:
a3:d0:95:a8:ae:f4:24:14:b7:60:56:ff:de:1f:ee:2c:4c:79:
5c:d1:e0:09:ca:12:3a:a0:16:75:bc:34:6d:29:cd:10:3d:59:
94:e1:2b:aa:d8:ee:9b:5d:1c:e1:a9:0b:40:cf:5b:1e:ed:af:
58:b6:c2:ce:e8:08:92:5c:18:f2:87:e7:91:72:91:c5:1d:02:
a9:ee:89:bf:7c:9d:69:39:9b:c3:b4:d1:c2:c5:7f:3f:9f:1c:
7d:68:4d:05:09:d8:61:10:68:f4:9c:7c:16:4c:cd:b1:3a:92:
cd:cf:7a:aa:17:9b:a9:db:7c:33:6a:0a:19:93:4c:79:68:81:
da:6d:7f:81:d5:93:f0:f0:bc:e3:a8:08:29:9a:35:8b:74:15:
2c:50:6e:3a:f6:14:fe:4c:01:81:66:fa:51:e1:d4:87:86:ee:
a9:44:f4:f0:c2:61:36:bc:85:5f:87:af:a9:0f:45:17:85:2c:
ff:1e:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:01:39 2025 by rpki-client