Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecfa4cb3-a0b7-3bbb-b239-63c3c31bceed.roa
File: ecfa4cb3-a0b7-3bbb-b239-63c3c31bceed.roa (raw, json)
Hash identifier: FvjFc2/WV9liHfX4EObrSzzD6kpAlSehwk04PLpzOCU=
Subject key identifier: 42:BE:DC:1B:88:F8:F7:0B:78:D0:77:BE:6B:39:7F:F0:0D:9C:BB:53
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8CCF0E43A92062542246880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecfa4cb3-a0b7-3bbb-b239-63c3c31bceed.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 192.158.30.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:cc:f0:e4:3a:92:06:25:42:24:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=f4e7f415-19e3-4348-ade2-8de4458c4fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:89:9e:1b:c2:e8:db:79:89:7e:8c:c4:e1:
9c:62:02:f8:ae:bd:f1:ac:8a:f9:55:cd:8c:b2:7c:
d6:af:04:3a:54:d7:08:37:2d:8a:f5:0c:47:f8:5b:
a6:22:e6:bc:d6:b3:28:f5:a7:ad:69:64:33:d8:35:
ac:4c:33:1c:41:96:6c:7d:09:db:47:57:88:31:db:
9d:8b:4a:98:b1:f4:5c:19:4a:5d:10:48:9f:45:8e:
68:a9:02:b6:21:f7:be:fd:48:5b:40:a9:f7:f2:5f:
11:b8:bc:f9:72:ca:f4:1a:50:ec:85:1b:1b:04:08:
f2:d0:38:e6:95:c5:60:be:c6:3a:bc:90:8b:fe:4b:
74:ec:dc:07:18:4e:f4:42:b6:b4:af:b4:11:5e:bc:
17:ec:c7:1b:f0:1d:59:2a:f2:14:81:4a:5d:87:6d:
9e:f3:41:f0:71:05:9f:1f:68:e9:34:ae:2c:c6:08:
85:30:c5:1f:8f:a7:b2:ee:d7:66:ef:dc:4c:1b:04:
33:5e:9e:e8:5b:37:b8:a6:0f:27:f3:46:34:b6:c1:
a4:15:70:e1:a8:61:29:26:d6:a1:cb:8c:63:f5:cf:
8f:84:3e:d7:00:b1:dd:20:9a:33:d8:b4:82:bf:3d:
3f:b5:f0:6f:9a:d1:35:e9:52:d2:50:fa:4b:10:e2:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:DC:1B:88:F8:F7:0B:78:D0:77:BE:6B:39:7F:F0:0D:9C:BB:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecfa4cb3-a0b7-3bbb-b239-63c3c31bceed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.158.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:1e:08:0a:1e:d9:55:12:df:b4:6a:fc:95:82:f3:c2:e6:d0:
2a:1a:7c:ba:da:50:2c:e5:cc:6b:43:a8:ab:b4:2f:36:c4:9e:
44:cd:13:e9:fc:4f:00:98:fc:60:ed:d3:5a:43:ee:5d:cb:7a:
76:eb:30:bd:f5:2f:b5:1c:00:b6:38:70:a5:0d:3e:5d:78:78:
48:ac:91:73:68:39:8b:d8:92:81:1f:3e:75:1d:67:a0:09:e4:
cc:a9:4c:ab:2a:78:62:fa:91:0f:15:e3:5b:57:4c:2d:c2:be:
f3:8b:23:3d:ea:de:7b:f6:e4:dd:b4:29:c1:a4:af:2b:9f:69:
00:8a:4f:bb:4b:be:7c:a2:a6:d8:23:97:a0:39:5e:ed:55:9e:
78:51:35:3d:b7:dd:4d:78:31:0a:f2:d8:b7:5c:41:3f:28:0e:
5d:c0:29:96:23:36:1c:f0:5e:07:18:59:13:85:ea:e6:bb:eb:
f2:78:af:59:7d:03:f5:75:ab:f8:10:8d:b8:3e:6c:32:6a:76:
ee:51:f5:da:58:8b:34:5c:da:11:eb:f6:d1:de:f7:fd:3b:d0:
0f:3e:68:e7:71:ea:bd:a7:fb:37:aa:b7:bc:2b:36:01:18:6d:
48:46:f1:ee:f1:8f:b1:86:0c:38:93:e9:5b:ad:4e:79:ab:f8:
de:5d:47:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:24 2025 by rpki-client