Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e06257e7-237d-376f-9d59-b7955def4ff3.roa
File: e06257e7-237d-376f-9d59-b7955def4ff3.roa (raw, json)
Hash identifier: oWV+qm1dypnh4pqiCOwBeSUyX/G+s11JCChKKaDLJRo=
Subject key identifier: 2B:92:4E:7C:70:27:DB:F3:21:3B:5D:67:5C:E7:DF:68:07:B7:E9:2A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F349625DF068C3D62AA800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e06257e7-237d-376f-9d59-b7955def4ff3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 23.251.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:49:62:5d:f0:68:c3:d6:2a:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=871720ce-c6b1-43b2-ad11-42cdcac5d9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:81:85:4f:11:2b:7d:e1:12:f1:23:93:63:
7d:d5:df:60:97:67:f8:17:81:94:db:b2:cb:df:8e:
57:e1:cc:21:88:6f:82:95:9f:2b:fa:e9:d7:e0:40:
01:c6:55:06:3c:fa:9f:9b:62:36:f4:02:b8:74:6a:
d4:ab:47:ac:7f:c7:ef:d5:ac:3c:6c:7f:73:a5:46:
7b:33:33:e7:3d:51:05:92:7e:22:37:4e:14:c1:c8:
62:26:c7:6f:1f:27:1c:a8:38:eb:3e:2d:d7:1c:27:
35:4e:dc:69:8f:be:2f:65:79:3c:7f:35:f2:95:c9:
ec:91:b4:8f:f3:1c:ae:61:c8:24:19:36:fd:9e:d4:
2d:e7:b4:d3:f9:00:99:ca:42:cd:8d:4a:e2:38:ee:
a6:7e:b1:31:3f:28:41:9d:5b:71:dd:52:12:b5:e5:
4a:f9:45:df:ab:78:7b:3b:7b:0e:81:ab:9c:af:78:
8b:89:79:40:b7:61:af:5d:e0:dd:58:cc:51:fb:15:
1b:75:5d:94:1c:b4:fb:fd:ca:d3:fc:08:13:1f:ee:
93:e7:8f:ec:49:e1:c6:25:8a:9e:16:cb:06:1f:95:
65:13:77:3c:93:58:3f:36:b6:37:46:27:0c:5c:be:
81:a3:d3:9f:c0:eb:af:d4:39:a1:14:72:15:ce:dd:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:4E:7C:70:27:DB:F3:21:3B:5D:67:5C:E7:DF:68:07:B7:E9:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e06257e7-237d-376f-9d59-b7955def4ff3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:7a:0e:9d:6f:d0:da:ec:aa:82:af:36:2e:cb:bb:6c:44:af:
cd:bf:13:fc:ec:02:23:30:85:b6:18:b0:9b:fb:24:91:f4:47:
49:0b:46:78:a3:30:f8:65:1d:e2:8c:6a:64:5b:10:d4:b1:f9:
f0:68:77:56:92:35:d2:20:9e:c1:bc:dd:d2:8e:72:f5:d2:30:
11:a4:c6:27:96:51:67:e6:b0:8c:a1:80:ad:f0:2d:d2:fd:83:
2c:84:63:a1:4a:b7:8e:af:fb:91:a1:34:86:af:03:71:ee:2d:
16:04:7f:69:d6:98:86:2a:fc:4c:7d:4d:4f:f9:cd:bf:b4:ea:
17:39:d4:77:8c:70:47:a8:be:ee:ad:dd:26:ef:89:93:57:71:
c5:7c:86:c5:04:c6:d3:42:37:db:80:36:14:3c:5b:86:72:a7:
54:48:a8:f7:b2:80:cb:99:c0:60:1b:2e:fb:93:0e:f5:f1:2e:
64:2f:e7:79:be:33:2b:9c:f5:6f:bf:98:df:94:30:63:89:b3:
58:39:ec:88:c5:23:db:17:04:7d:1f:5a:2c:01:9b:a1:1d:c1:
c5:f6:26:d7:40:99:4a:2d:a8:52:06:23:20:40:bb:b9:28:c0:
3a:b8:98:ff:19:67:50:2b:a7:e6:22:47:49:ca:fd:5e:a6:77:
53:33:2b:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ80liXfBow9YqqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODcxNzIwY2UtYzZiMS00M2IyLWFkMTEtNDJjZGNhYzVkOWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/mBhU8RK33hEvEjk2N91d9gl2f4F4GU27LL
345X4cwhiG+ClZ8r+unX4EABxlUGPPqfm2I29AK4dGrUq0esf8fv1aw8bH9zpUZ7
MzPnPVEFkn4iN04UwchiJsdvHyccqDjrPi3XHCc1Ttxpj74vZXk8fzXylcnskbSP
8xyuYcgkGTb9ntQt57TT+QCZykLNjUriOO6mfrExPyhBnVtx3VISteVK+UXfq3h7
O3sOgaucr3iLiXlAt2GvXeDdWMxR+xUbdV2UHLT7/crT/AgTH+6T54/sSeHGJYqe
FssGH5VlE3c8k1g/NrY3RicMXL6Bo9OfwOuv1DmhFHIVzt1IcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuSTnxwJ9vzITtdZ1zn32gHt+kqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTA2MjU3ZTctMjM3ZC0z
NzZmLTlkNTktYjc5NTVkZWY0ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA96Dp1v0NrsqoKvNi7Lu2xEr82/E/zsAiMwhbYYsJv7JJH0R0kLRnij
MPhlHeKMamRbENSx+fBod1aSNdIgnsG83dKOcvXSMBGkxieWUWfmsIyhgK3wLdL9
gyyEY6FKt46v+5GhNIavA3HuLRYEf2nWmIYq/Ex9TU/5zb+06hc51HeMcEeovu6t
3SbviZNXccV8hsUExtNCN9uANhQ8W4Zyp1RIqPeygMuZwGAbLvuTDvXxLmQv53m+
Myuc9W+/mN+UMGOJs1g57IjFI9sXBH0fWiwBm6EdwcX2JtdAmUotqFIGIyBAu7ko
wDq4mP8ZZ1Arp+YiR0nK/V6md1MzK0c=
-----END CERTIFICATE-----
Generated at Sat May 10 12:47:36 2025 by rpki-client