Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c880b3e3-a712-3993-857c-d8dd228ad1ad.roa
File: c880b3e3-a712-3993-857c-d8dd228ad1ad.roa (raw, json)
Hash identifier: 8k0Xj8nzT9NvXnHaKG19IO4MJ+vicR89ilkBoSPz4Yw=
Subject key identifier: 68:B4:E4:FF:0A:EA:B0:D4:33:16:CD:5F:74:DC:30:02:BE:92:B7:D9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B276E717CAE7D54926AA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c880b3e3-a712-3993-857c-d8dd228ad1ad.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 199.223.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:76:e7:17:ca:e7:d5:49:26:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8ba58704-b3a4-457e-ac83-15cb0dbd6a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b3:7b:7a:c5:aa:c2:ec:4c:8b:68:81:93:f9:
05:84:85:df:e9:20:03:a6:29:f6:e6:4b:6b:cf:57:
11:62:74:9e:dc:1f:87:b0:8f:f0:6f:19:8b:9e:f2:
d3:1c:73:e7:dc:88:bb:0e:87:b1:e7:5c:a9:1b:53:
35:c4:1c:68:6e:5d:98:43:c4:86:4d:d8:20:11:9b:
9a:16:a3:a2:2e:04:46:55:14:28:7a:0c:54:08:cc:
fa:4d:dd:6f:5f:be:8f:39:7d:13:93:6b:d4:0d:19:
d4:4f:ff:40:3b:b3:50:1c:a8:10:0c:e7:53:7f:95:
7e:6f:42:c2:29:1a:ba:78:ac:21:c7:89:e8:45:ae:
4e:87:2c:49:2f:64:14:8e:28:00:6c:9d:69:a7:39:
43:83:c6:83:8a:3e:11:4a:97:4a:68:72:eb:6c:d5:
b9:93:9a:6a:7c:4c:b8:fa:f7:02:3e:d2:b0:81:3d:
46:81:bb:03:5a:ac:95:cc:1d:a1:52:d0:ab:2c:e4:
1d:3d:1a:3d:f6:7d:f7:c0:c7:f8:35:62:70:ec:49:
43:ed:28:18:ad:7f:b1:a3:54:08:fa:eb:1b:f3:0b:
34:aa:8d:5c:5d:15:4a:91:49:84:ef:85:8d:01:1b:
21:de:f3:54:fa:ee:3a:82:b1:77:77:3c:c2:24:e8:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B4:E4:FF:0A:EA:B0:D4:33:16:CD:5F:74:DC:30:02:BE:92:B7:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c880b3e3-a712-3993-857c-d8dd228ad1ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:01:c0:92:df:1d:f0:75:29:03:34:e2:4c:ba:4a:3a:d3:cd:
ef:a4:fd:42:2a:1a:b6:86:48:59:d6:71:bc:9f:b5:53:42:80:
0d:ff:3d:7f:9b:89:e2:66:0b:a2:4a:a8:f0:46:bd:77:61:13:
eb:94:44:64:ff:04:e9:1f:97:5d:cc:06:a0:bd:c9:ee:bf:ce:
27:76:12:7f:78:e5:8f:32:6d:ca:b7:91:83:ad:f8:c6:06:43:
12:4e:b2:de:90:f7:3e:c3:92:f1:16:fd:74:67:05:a5:8c:5f:
e8:90:87:eb:fa:aa:77:f6:17:27:db:65:9a:23:a7:0e:0f:02:
01:df:34:52:62:2c:ff:af:e8:b7:c3:51:e1:20:40:78:ab:62:
a6:d6:18:e9:85:81:39:6a:25:b1:e1:90:74:30:2a:68:66:dc:
8a:77:8a:9e:0f:90:a3:42:57:9a:98:81:ae:25:89:db:0f:cd:
de:c2:16:ef:41:e5:92:25:77:01:0d:17:8a:ac:05:9e:6b:95:
d4:7c:1b:5a:2b:20:a0:ae:62:11:dd:2e:d8:a2:24:87:d8:7a:
15:fc:2c:65:a7:2c:27:46:ef:92:31:6c:b1:69:bd:41:fd:03:
c6:83:ae:a2:bf:d9:81:20:17:0b:93:56:8e:87:bd:1e:ce:1e:
f7:5e:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:12 2025 by rpki-client