Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef0fa825-ee3c-3693-9703-a6c4afe5311a.roa
File: ef0fa825-ee3c-3693-9703-a6c4afe5311a.roa (raw, json)
Hash identifier: tHLjRN8b2whnZCWCioJfZDQJgHu68usUcgjZLlrwdq0=
Subject key identifier: 68:B1:55:18:F4:00:04:06:54:2B:32:FD:11:6D:9D:28:C0:19:E8:70
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1495D530B3FA42863F4500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef0fa825-ee3c-3693-9703-a6c4afe5311a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 108.59.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:95:d5:30:b3:fa:42:86:3f:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fa9a2403-8944-4f73-9094-ed11d856077b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:f5:64:5c:aa:fd:96:06:02:45:0f:e4:61:
bb:cb:ce:69:ec:4c:fa:80:31:ef:10:36:27:d9:5c:
66:35:46:89:64:ec:47:52:9e:02:90:33:4f:70:5a:
e7:bc:c8:8f:c8:65:be:fd:55:b9:13:68:51:74:9b:
3e:f5:0d:e9:91:31:48:d9:59:04:ca:38:e3:64:ab:
fc:38:78:f6:33:11:e1:a5:fc:34:78:59:ac:d1:ae:
19:3a:62:9c:5b:a8:c1:e8:28:2e:f3:86:d2:f4:f1:
b4:59:51:ae:69:cd:38:25:ec:2a:83:8b:a0:25:a7:
7c:d7:45:c5:fb:9e:1c:22:7f:4b:22:c2:b5:ae:2a:
3e:44:d1:4f:89:42:2e:ba:6a:75:54:b2:e3:0b:3f:
e3:f4:e0:00:c2:46:a8:81:45:63:d9:b6:aa:6d:e5:
8c:78:e5:a7:e9:14:c6:83:27:c1:ad:cc:8c:d9:42:
d9:80:c7:76:33:83:5d:3c:dc:f2:f3:6d:dd:02:f5:
9f:c5:7f:00:9e:5c:fe:03:11:21:c2:8a:55:c1:c2:
5a:7e:ce:e7:eb:0e:36:54:a8:40:11:c8:0b:72:27:
59:48:a4:26:03:a2:74:35:51:aa:96:fa:ae:cb:2f:
db:40:2e:96:c3:d4:01:b9:cc:b5:44:9b:25:1f:9f:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B1:55:18:F4:00:04:06:54:2B:32:FD:11:6D:9D:28:C0:19:E8:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef0fa825-ee3c-3693-9703-a6c4afe5311a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:c5:28:bb:c1:f8:24:b7:7a:8e:bd:49:ee:40:b3:9f:85:ca:
06:b6:f7:9f:3e:c0:d9:fd:80:ad:68:53:0e:ec:ac:85:6c:47:
93:ff:ad:54:66:c8:51:c2:09:68:e2:e8:fb:dd:ba:c5:ae:f8:
d1:64:2a:b0:51:5f:14:c2:a8:cb:b7:a5:81:d3:0d:cd:d3:5f:
5c:eb:c1:c0:97:53:d2:f0:14:ec:8d:72:c2:be:e7:a9:82:ed:
51:bc:55:bf:50:e1:14:4b:8b:70:69:12:e2:53:e5:85:bd:aa:
ce:16:ad:26:d1:65:03:a3:54:01:21:2e:42:b8:01:4a:4b:e8:
ee:57:be:a1:88:31:79:f4:aa:01:18:07:b5:a6:5e:4d:16:10:
69:22:a3:8f:0c:53:c9:cd:e3:12:b4:aa:78:a2:b7:2e:ab:90:
8e:5e:ed:d2:a9:97:17:4a:f4:70:c2:b5:e9:12:41:a8:0f:97:
5f:cf:83:ed:4e:c9:a4:4b:69:8d:63:f0:cb:54:9b:dc:e0:7e:
04:82:a7:31:46:66:fa:d3:d4:0e:bb:52:37:2b:c4:2c:0b:a7:
d0:ac:f4:77:27:f5:1b:55:ff:b8:fa:ea:e7:0d:68:51:03:5a:
9b:7d:23:80:57:d1:c1:ae:b5:57:e7:e4:7c:19:42:e3:85:97:
83:bb:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:49 2025 by rpki-client