Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da068e08-3f42-314d-96c5-92c53b0ca840.roa
File: da068e08-3f42-314d-96c5-92c53b0ca840.roa (raw, json)
Hash identifier: S7JBnr6haZHMSZPM2smupRySdS5ZU3rlNd/5f3Mses0=
Subject key identifier: AB:30:F5:B7:57:8C:F8:27:CD:CB:BF:23:AF:B1:4E:B5:73:12:3C:A3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842ADBAA6F6A45AE8208F49DB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da068e08-3f42-314d-96c5-92c53b0ca840.roa
Signing time: Tue 25 Jul 2023 12:00:00 +0000
ROA not before: Tue 25 Jul 2023 12:00:00 +0000
ROA not after: Fri 26 Jul 2024 04:00:00 +0000
asID: 15169
IP address blocks: 23.236.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ad:ba:a6:f6:a4:5a:e8:20:8f:49:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2024 GMT
Subject: CN=0ba4fb3a-a31a-420b-b211-b8d20f886d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:83:e7:71:46:30:c9:c7:14:d5:60:d6:35:54:
8e:ab:bf:0e:32:89:d1:88:f9:d0:17:71:59:53:63:
42:1b:a7:74:45:c3:70:5b:1f:e2:d6:b5:da:02:83:
1f:0a:a2:6b:8e:ed:c5:c7:ff:bf:db:dd:e1:e4:f9:
8f:85:5c:d8:69:45:e0:82:09:9c:ec:a1:21:33:71:
51:7b:9a:b3:75:dc:6c:f4:71:e7:54:82:0f:33:de:
d5:b7:ab:88:4b:a7:31:97:dd:69:76:6c:27:3c:b4:
a1:da:d2:ae:bb:89:66:bd:ac:dd:da:dd:51:f0:cd:
8e:83:4b:c9:49:57:56:0a:8c:56:57:90:3e:e8:95:
0a:27:8c:37:8d:97:9e:3d:bc:f5:d8:1d:d8:30:81:
ca:12:60:fc:4f:6b:37:45:97:2a:af:75:e2:69:8b:
53:8a:f2:c8:47:7b:1f:ff:9f:98:f8:d2:47:af:c6:
5a:68:02:1d:44:19:24:5b:02:62:00:f8:a5:15:67:
6b:9e:dd:6b:eb:10:69:65:8e:b1:d5:d5:30:47:1c:
a5:a8:c1:91:d1:2a:c0:b9:36:92:d8:58:f7:5b:21:
e2:7e:81:7f:d8:89:4c:01:aa:ad:99:3a:56:5b:86:
2b:fa:c1:d1:4d:aa:dc:c0:32:67:3a:de:44:e3:6f:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:30:F5:B7:57:8C:F8:27:CD:CB:BF:23:AF:B1:4E:B5:73:12:3C:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da068e08-3f42-314d-96c5-92c53b0ca840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.236.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:43:bc:04:85:a1:13:c7:98:ea:0b:e3:5e:df:c8:c5:df:cb:
13:35:67:11:48:1d:b3:bd:99:30:b8:4b:70:ad:d4:c8:14:1b:
15:78:e8:23:52:d4:a6:95:09:74:7c:3a:57:cd:4f:a0:20:63:
61:50:52:4f:9c:33:fe:33:3b:90:8f:2f:07:e1:6f:e7:b9:8b:
87:02:59:e7:30:2c:04:38:ab:b8:ec:75:d6:cb:45:9d:94:36:
90:be:fe:08:01:75:b1:30:b4:d3:90:12:5b:25:14:8c:8b:92:
51:77:c5:ad:d0:6d:3a:d3:2b:19:42:fe:28:c7:e2:c1:fc:8c:
59:de:18:b2:ca:78:bd:c8:9c:e0:ab:ab:33:19:4b:0a:94:e5:
53:29:74:8c:ea:3f:13:22:39:52:60:a9:bf:51:c6:87:21:69:
07:03:69:c0:0c:a1:18:a6:e9:06:5a:1a:d5:a2:fc:fc:80:c8:
86:09:0c:fb:b2:3b:ae:76:49:1c:8d:3e:22:f6:5b:30:79:68:
d8:ba:8b:78:18:09:bc:62:b3:20:38:b7:bf:b6:5d:77:6d:47:
ca:14:0c:f1:5b:f8:88:86:1e:55:b0:17:f5:c7:06:f5:13:68:
2b:e5:72:4e:c9:30:09:54:68:95:ef:52:09:37:28:50:bf:71:
f5:4b:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:50:05 2025 by rpki-client