Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb3eb033-aca0-3efc-a01e-1050c2c983af.roa
File: bb3eb033-aca0-3efc-a01e-1050c2c983af.roa (raw, json)
Hash identifier: CVQpGTWbwZ4VFSdMOY8Z8sG2Y2c82rT/7SDqo5EJkZI=
Subject key identifier: 9B:41:88:15:0A:E5:28:A9:B4:5E:57:44:8C:FC:30:7E:8A:95:5E:7E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F21FE549F8EE4E4DACDE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb3eb033-aca0-3efc-a01e-1050c2c983af.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.251.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f2:1f:e5:49:f8:ee:4e:4d:ac:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6724d30c-30b2-4648-9ad4-92e1b124b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:cb:08:91:3f:3c:ac:be:3a:11:be:48:30:
37:30:6b:4f:2e:e3:b8:ae:4a:0d:fa:b4:c5:4b:9e:
12:aa:fb:09:1d:36:cd:75:22:86:10:f8:c9:ad:54:
f1:87:79:54:58:42:89:80:6e:64:d8:18:da:9d:ef:
eb:b8:a7:b0:7b:ef:80:ac:8f:bc:9d:b4:68:e7:6f:
a9:6e:72:14:34:96:dd:28:d8:ee:b4:97:57:e7:26:
78:5d:0e:fc:68:d6:0c:3f:0a:9d:9d:96:8c:f7:db:
61:e6:40:f7:c5:9a:cd:f2:93:bd:e6:e2:27:bc:cb:
2b:c1:d2:f5:b1:e3:c8:cf:26:2a:92:59:cb:7e:c9:
ce:e4:d0:db:41:81:a6:10:38:e8:98:35:39:44:ad:
66:2d:3a:3c:e1:19:1c:7a:c3:88:0d:b4:b2:5d:d7:
fb:5f:02:40:49:80:74:94:0f:d3:d2:c2:5e:90:35:
f3:b5:8d:7f:14:d5:0b:87:a2:04:3d:4e:d4:06:81:
0b:c0:ee:07:8f:91:2a:44:e3:79:f3:ef:f6:62:2b:
ef:96:80:6f:50:b4:21:84:40:f8:3f:cd:02:d3:1c:
3a:b2:8b:bd:25:35:f4:78:d8:e4:c1:63:fb:cd:01:
3e:7b:64:9c:00:66:cd:ff:97:7d:f2:df:31:c9:65:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:88:15:0A:E5:28:A9:B4:5E:57:44:8C:FC:30:7E:8A:95:5E:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb3eb033-aca0-3efc-a01e-1050c2c983af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:94:1c:79:fe:f5:e0:a3:fb:59:ee:20:48:f3:f2:29:80:03:
54:6f:57:b7:26:15:58:29:67:b0:43:82:81:77:3a:de:a5:17:
b2:05:5d:88:d7:4e:99:a3:42:28:d9:cc:0c:39:cd:98:21:c5:
bb:3d:44:09:9b:28:ca:06:e5:4f:3d:34:a8:31:de:f7:41:14:
4f:e0:94:d0:b1:dc:44:4a:08:11:f5:fd:82:48:07:b7:b7:ab:
d1:84:c4:af:6e:51:ae:d5:30:92:40:82:e3:71:05:9d:bd:05:
08:27:80:0c:03:7f:ee:4e:6e:20:a0:37:4e:8c:00:e6:f6:48:
b1:01:10:01:e8:21:c2:83:fb:46:a5:94:44:06:88:7a:e6:14:
40:2e:a7:4b:71:c8:95:c5:0c:c0:3b:1f:3d:56:35:b3:63:ba:
d4:c3:3b:e2:21:79:b9:44:74:51:4f:91:9f:c0:4f:e9:3c:8b:
5e:ec:de:48:eb:17:e2:7e:f8:d2:75:b4:b4:c9:08:ad:6b:4d:
46:d6:f0:95:b9:1c:29:3e:0b:f2:c7:70:2f:03:a8:19:d2:7e:
ca:93:2e:20:47:18:bd:ab:71:4d:17:eb:f1:98:53:9e:b6:7a:
25:b3:20:ee:54:4d:6d:33:5c:b2:02:98:99:77:70:32:57:16:
fd:24:64:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:09:55 2025 by rpki-client