Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3dd64389-3164-32e9-a95b-1b24b5f1555a.roa
File: 3dd64389-3164-32e9-a95b-1b24b5f1555a.roa (raw, json)
Hash identifier: saE9ZFvDNPYB1QZh9DD6TabGg7W9d3vDzdboakhJR3c=
Subject key identifier: 7E:EC:1F:A6:37:E0:9D:5A:3C:B8:7F:7A:0C:B2:C9:53:CF:72:CE:02
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285841E9A61AB0D338789E5EBD2340
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3dd64389-3164-32e9-a95b-1b24b5f1555a.roa
Signing time: Wed 17 May 2023 15:16:21 +0000
ROA not before: Wed 17 May 2023 15:16:21 +0000
ROA not after: Tue 15 Aug 2023 15:16:21 +0000
asID: 834
IP address blocks: 200.229.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e9:a6:1a:b0:d3:38:78:9e:5e:bd:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: May 17 15:16:21 2023 GMT
Not After : Aug 15 15:16:21 2023 GMT
Subject: CN=6c4bd159-439c-4070-9f30-320e788ab4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bf:3d:e4:96:f2:1f:35:69:04:07:73:b4:be:
14:43:99:53:67:a5:11:48:2c:95:2b:92:b8:16:8d:
c8:ea:02:a2:71:b5:d2:2c:34:ef:4b:fc:ac:63:10:
6f:f4:d9:38:b7:6e:63:c8:74:4d:88:65:56:57:d1:
e6:29:a2:fb:55:73:a0:12:7a:c9:32:33:91:52:e6:
12:2a:77:14:79:ee:0a:78:2e:74:98:8f:cb:cc:8d:
bc:e4:b0:be:c1:05:ee:f0:5c:3d:c9:cf:bd:b1:e5:
9a:0e:77:48:80:34:0a:da:87:81:50:69:ad:e3:4c:
1b:d5:e2:22:2c:63:7c:e7:c5:ad:5e:b9:c4:ef:c9:
14:9f:1f:6d:fc:f8:74:ea:ca:c1:82:65:23:de:ff:
5a:e4:ae:a3:48:f8:c6:a9:7e:4a:cf:35:60:ab:1d:
28:99:a2:57:2a:68:1a:9e:dd:29:8a:7c:6c:de:1e:
ba:f9:18:0e:8a:5b:09:17:8b:56:c1:78:cc:95:9b:
8d:1f:69:7a:12:a5:68:d5:97:6a:85:22:9b:b0:f9:
18:55:bc:ea:05:a8:93:d2:01:4e:ae:d9:88:4e:23:
ee:59:41:8f:8e:bf:31:7c:f4:28:ff:c9:57:56:e8:
27:3a:55:c8:c9:48:ee:92:39:ba:8a:62:15:9c:76:
b5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:1F:A6:37:E0:9D:5A:3C:B8:7F:7A:0C:B2:C9:53:CF:72:CE:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3dd64389-3164-32e9-a95b-1b24b5f1555a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:b7:39:30:11:1d:38:ba:41:4f:58:7f:f8:9c:b9:57:7a:1f:
ac:d9:03:8f:b9:be:fb:e1:47:cb:93:01:3b:58:37:96:da:1b:
c0:27:89:8e:19:8f:e4:a5:0a:dd:58:fc:de:df:be:bb:a7:73:
5c:d8:ec:3c:d0:64:4b:be:4b:87:bc:81:fc:e5:e9:a8:94:be:
2d:59:66:d9:c9:ad:cd:37:54:cc:82:cb:bb:53:4a:72:5b:5a:
a3:03:19:6e:d9:96:c1:16:ba:3c:d3:e7:25:ec:ce:be:ec:7d:
ab:58:1e:2e:2c:68:1d:90:68:a3:87:e7:92:69:02:da:c0:0e:
b4:f2:ac:c2:c1:f2:6f:e8:cc:cf:2d:72:72:24:54:66:5a:ce:
84:fb:8b:97:04:32:6d:19:0e:9e:12:fc:45:3b:2b:d9:ed:56:
f5:05:3c:25:09:b5:36:12:b6:fe:ba:ac:b0:d4:05:04:79:6f:
af:01:c3:9e:78:6f:cc:24:d7:63:d8:09:f4:58:33:16:42:d1:
3d:ce:04:18:28:67:9b:bc:a7:33:dc:c4:36:81:36:21:4a:d9:
ac:01:35:d6:e8:fd:3e:dc:49:91:03:e3:2d:20:27:ea:95:57:
1e:2c:d2:7a:1c:a1:4c:08:86:84:15:02:9d:a9:51:b8:a9:4b:
5d:6b:91:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:44:26 2025 by rpki-client