Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccccee01-f532-3a9b-a298-fef2bc2069f4.roa
File: ccccee01-f532-3a9b-a298-fef2bc2069f4.roa (raw, json)
Hash identifier: cEnBSzwS8d3FDbItlMtMmwGDHbiHdlHGhR/KSvTIyoI=
Subject key identifier: DE:1F:F4:18:D5:25:A7:2B:18:11:D9:16:AE:08:9B:35:11:AF:61:4C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BB9EDBD503153B2FCB3AE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccccee01-f532-3a9b-a298-fef2bc2069f4.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 19527
IP address blocks: 199.223.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bb:9e:db:d5:03:15:3b:2f:cb:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7df64805-15ff-4761-bc29-199279957d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:ae:28:c5:b2:01:1f:8e:23:94:fa:ed:07:
29:3c:d2:0b:f8:f3:5a:43:5f:32:3d:0a:46:e7:1f:
fd:51:30:80:d2:81:f5:19:6f:66:78:7c:45:d4:80:
3a:93:2f:c3:b1:5c:ba:02:e2:47:27:b3:05:9f:49:
35:ee:8b:48:92:65:5c:8a:df:a4:60:28:a2:75:2d:
57:70:f4:8e:2c:6d:49:7d:97:d0:1f:08:cd:90:22:
cd:ac:31:26:23:e6:dc:c2:88:75:f2:7e:91:73:2b:
76:6e:4b:6a:27:c9:e3:ec:96:ba:08:6c:05:46:58:
e3:2d:fe:d5:c6:96:ca:3e:25:eb:93:32:84:76:ba:
ed:4c:aa:a5:4e:f6:32:5a:55:a9:7f:05:2f:b0:48:
6b:02:66:7d:98:02:0b:1d:80:f7:d2:17:84:98:16:
18:23:6a:15:7d:39:83:63:42:42:55:a9:77:1d:40:
67:02:a6:62:74:35:70:13:71:f8:ef:97:08:49:8a:
c4:08:c1:83:74:f5:c7:9d:dc:a4:95:fe:a4:31:ce:
44:c8:57:b5:7a:c9:02:fe:22:96:a7:d2:f5:80:80:
18:e5:de:0c:60:89:1c:cc:5e:00:59:97:83:7c:6d:
96:6a:ba:7d:84:83:ef:c4:c0:65:d9:b8:0a:ed:35:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1F:F4:18:D5:25:A7:2B:18:11:D9:16:AE:08:9B:35:11:AF:61:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccccee01-f532-3a9b-a298-fef2bc2069f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:04:9c:e7:f1:cb:d7:ab:f9:9d:e7:df:d7:49:ec:1f:f5:6d:
18:4d:c2:3d:55:18:a6:69:41:67:80:59:5d:2e:3e:38:43:83:
ec:d5:64:c9:08:13:b5:78:1e:89:fc:5d:ef:dc:83:03:dd:3e:
9c:5e:ff:e1:23:fb:ef:4c:61:c8:c0:fe:e7:8d:b7:cb:89:e7:
cc:03:cb:61:e0:4a:ca:71:98:21:c9:41:8c:72:b1:71:9a:3b:
48:da:69:da:25:39:ed:82:b9:d5:da:f1:2c:22:7e:66:e2:8a:
89:fe:a1:fc:23:ad:b5:f3:4a:19:b8:23:04:54:f5:5d:a8:96:
d5:65:bb:74:63:eb:78:8b:af:e4:96:c2:3e:17:48:f0:62:f6:
b6:07:bf:b1:34:0f:fe:50:18:61:3d:92:72:57:f2:8c:83:66:
45:d5:4e:59:14:48:37:3a:c8:d9:b3:c5:be:8f:55:28:89:7c:
42:42:44:89:bb:b9:04:ce:40:56:7d:53:76:d5:61:c3:2e:f4:
fd:58:8f:2a:3e:a3:6d:62:fb:d1:a0:af:f5:2d:3a:4c:e2:f1:
69:a8:0d:7d:a8:61:ef:c8:44:3d:12:2f:1e:5c:e9:a6:91:c5:
4e:d5:41:6e:eb:30:71:f2:4d:36:45:4a:bd:43:c0:18:38:e0:
19:13:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:20:58 2025 by rpki-client