Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/d22035e1-884a-39eb-a97a-f3f2ca134d6d.roa
File: d22035e1-884a-39eb-a97a-f3f2ca134d6d.roa (raw, json)
Hash identifier: cO6ya8ccdIFlWekuhOoTivwk62a7HSQWOc0zlzknYcc=
Subject key identifier: D1:ED:5B:7D:30:14:AB:B8:29:43:17:1B:97:D6:04:07:BF:E4:3B:A4
Certificate issuer: /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial: 010D0C9F43285842D4BEF46298D6B38A5EB69B80
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/d22035e1-884a-39eb-a97a-f3f2ca134d6d.roa
Signing time: Wed 09 Aug 2023 20:21:23 +0000
ROA not before: Wed 09 Aug 2023 20:21:23 +0000
ROA not after: Tue 07 Nov 2023 21:21:23 +0000
asID: 399628
IP address blocks: 209.188.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d4:be:f4:62:98:d6:b3:8a:5e:b6:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Validity
Not Before: Aug 9 20:21:23 2023 GMT
Not After : Nov 7 21:21:23 2023 GMT
Subject: CN=fb5e5b55-b37e-463f-8147-639185739e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:4d:6a:40:cd:06:a5:c0:f7:b7:f2:dc:ea:
fd:00:a1:b0:ec:15:be:e4:c3:44:13:ae:2f:bd:fe:
7c:1c:2b:47:ce:55:83:5c:b8:00:8c:48:c0:a7:85:
32:c6:f1:3b:2d:e5:e9:8f:df:a8:11:46:0a:15:62:
30:b1:8e:58:fb:45:9c:f3:bc:0d:88:25:4f:22:6e:
ef:c2:b4:83:e6:12:41:c6:2f:de:26:aa:8e:ff:97:
92:14:90:cd:29:06:6a:ed:5f:d5:40:51:d6:a0:8e:
ad:25:70:c0:6c:2a:be:60:1e:1d:4e:f6:ae:c1:86:
cf:00:00:60:6e:d2:a5:fd:ac:87:13:93:43:e6:dd:
70:a7:27:76:f7:a9:20:9d:3f:0a:89:f7:7e:de:cd:
57:94:03:1c:bb:1f:49:87:bb:f6:c0:11:2c:65:d1:
3f:9a:04:08:d0:9f:c1:f4:87:d5:2f:b6:28:0b:d5:
72:e6:7a:f1:4e:d7:86:7c:56:dc:82:a8:01:9b:1f:
79:3d:56:de:cb:e3:48:cd:dd:ff:3a:d8:1e:37:9c:
f7:d6:14:75:0b:9e:b9:b7:dc:35:b8:cc:ed:32:28:
ff:f0:79:d6:ed:fb:e3:54:6e:c2:f5:2d:73:ab:f8:
94:a7:bb:d4:7e:31:02:74:04:1b:e7:8f:54:64:7a:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:5B:7D:30:14:AB:B8:29:43:17:1B:97:D6:04:07:BF:E4:3B:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/d22035e1-884a-39eb-a97a-f3f2ca134d6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
X509v3 Authority Key Identifier:
keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
sbgp-ipAddrBlock: critical
IPv4:
209.188.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:d5:f0:f3:9b:e1:be:72:40:61:f8:5e:a3:70:a6:ad:1c:5c:
24:f1:3e:9c:2b:f0:cf:1f:66:ba:7c:20:f6:75:80:00:a6:47:
aa:c1:50:eb:e0:67:03:a3:1e:ed:9b:58:26:ce:44:0b:57:5e:
25:c6:b1:03:1e:80:1c:6c:b2:54:05:bb:cd:e5:d7:c6:dc:fb:
66:23:ca:19:1e:17:37:2f:e0:32:d6:70:ec:81:0b:c2:39:19:
38:8a:34:9a:37:e8:bd:3a:36:b8:41:c1:f5:5f:67:ed:75:91:
53:37:ec:5f:6a:ed:9f:19:43:4a:a9:07:c7:e4:7b:a1:a2:53:
30:e6:f5:dd:a4:a7:8f:72:23:1f:04:1a:3d:b4:78:8b:57:66:
e4:d7:3e:d9:3d:ba:b3:74:58:a0:4c:fb:70:08:5d:13:46:b6:
67:23:9d:ec:c7:42:13:3c:a1:12:55:34:4f:06:62:01:19:64:
d1:bf:23:7d:e8:61:cf:2c:a9:0c:d2:e0:05:4a:85:ae:f7:f7:
e6:5d:00:6e:96:7a:31:56:b8:12:fe:39:d4:47:60:37:3a:24:
35:0c:75:c5:c1:b7:f8:18:9d:98:20:d3:34:4d:92:98:18:0a:
58:bc:15:fe:41:52:7d:38:64:71:74:24:19:da:35:4b:e3:73:
58:c1:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:21:21 2025 by rpki-client