Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb8b34ea-df8c-38a4-b925-08edeb46e678.roa
File: fb8b34ea-df8c-38a4-b925-08edeb46e678.roa (raw, json)
Hash identifier: qkoVMyY8hzIIk/hIQRozy+MB9nEBdmMFUqhHHi5urt4=
Subject key identifier: 09:A5:EA:54:FA:9E:54:F8:BF:60:FE:27:54:1F:06:D7:CA:3E:0D:BA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A12B1DAE437BFD095B69B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb8b34ea-df8c-38a4-b925-08edeb46e678.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 107.167.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:b1:da:e4:37:bf:d0:95:b6:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f66b74c9-ee72-4e4a-9da4-6118cf844ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:0c:e9:8a:d9:f3:04:8e:47:3f:50:41:e8:
b4:b3:97:c4:2d:c7:d7:15:7e:84:d9:6c:f7:d9:a1:
5d:87:bf:11:a6:b9:4e:4d:06:0d:66:c7:56:48:ef:
ec:e8:ce:8f:79:4e:93:ce:c2:bb:0c:05:3b:89:d4:
bc:f3:20:86:fd:57:84:dc:73:d1:3b:dc:92:80:65:
1c:20:68:86:1e:d5:b4:d7:a9:76:51:eb:b0:95:66:
71:07:ba:79:51:df:a4:15:44:fb:c0:0c:4b:c4:2d:
4f:89:63:41:f4:08:27:cd:2c:33:1a:33:6e:e2:38:
79:93:c3:97:66:8f:00:87:75:50:2c:e1:49:66:ad:
2b:68:cc:5d:47:ca:d1:23:ad:d8:72:78:d8:58:17:
24:c4:84:2d:79:57:55:3f:77:8e:00:bb:ad:02:66:
bd:b9:e5:79:ec:3a:2d:cb:11:45:80:43:1f:44:f7:
62:5f:18:53:94:c9:9a:e1:60:53:24:c2:34:b8:88:
e3:8e:75:09:b8:66:08:c1:bb:ab:27:12:54:85:36:
ab:65:70:23:b5:21:2e:70:69:62:58:fe:21:84:a6:
ba:ea:1f:c6:a3:54:1a:da:54:91:f8:c8:3f:e4:d4:
6e:18:56:6e:42:28:00:5f:05:94:5c:fd:69:25:62:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A5:EA:54:FA:9E:54:F8:BF:60:FE:27:54:1F:06:D7:CA:3E:0D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb8b34ea-df8c-38a4-b925-08edeb46e678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:06:e5:d3:78:5d:32:32:9c:70:93:7f:36:a4:d6:dd:5c:f0:
70:5c:bd:32:3a:36:da:85:fa:88:89:23:94:b5:11:09:44:08:
9d:ea:c8:61:cd:84:64:f2:f7:e3:e4:f2:25:eb:74:84:72:49:
12:a0:ea:09:9a:e1:2b:3d:9e:f6:15:b8:f9:26:59:ce:e3:79:
1f:34:6a:76:ef:01:43:8f:11:ff:66:05:ba:2b:95:8c:89:90:
74:62:19:c3:c1:7c:66:6d:a7:09:f4:e9:8c:7d:d4:90:5e:3b:
f1:83:7d:63:db:e2:d5:5d:be:c8:03:dd:70:71:0a:4e:1e:7d:
db:cf:26:e4:3f:48:f0:dd:2d:11:da:aa:ba:14:ea:73:67:ef:
f6:5c:14:0d:94:f5:f9:bf:02:8d:0e:94:07:8d:31:1a:69:f3:
dd:3a:1c:88:d9:f1:25:cc:a1:b8:0c:0e:0f:f3:14:01:5c:0a:
3e:f2:b6:68:d2:1f:88:1c:6e:09:72:7d:c6:a8:94:ba:6d:70:
28:2e:b6:d8:14:c0:7a:86:44:a1:32:73:2f:77:fc:55:3a:5e:
64:a4:6c:44:8a:bb:4e:1f:a8:36:e2:61:95:ef:cd:7d:21:18:
bb:ce:99:60:21:3d:75:f7:ea:21:b1:b2:8c:b3:72:6c:af:6b:
9f:4f:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:41:41 2025 by rpki-client