Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/66806eb7-d71a-3024-be2f-8ec1d91a7f4e.roa
File: 66806eb7-d71a-3024-be2f-8ec1d91a7f4e.roa (raw, json)
Hash identifier: AgRxN+RDFXkYLRpeSlIdlDX/iXb7HEaM7aJH+awloRs=
Subject key identifier: 34:D2:D4:9A:0F:59:DC:07:90:C5:DB:FE:FE:03:21:8D:C7:33:27:E4
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F4328584242B8843BC4C7C77156B5BD00
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/66806eb7-d71a-3024-be2f-8ec1d91a7f4e.roa
Signing time: Sun 18 Jun 2023 13:00:19 +0000
ROA not before: Sun 18 Jun 2023 13:00:19 +0000
ROA not after: Sat 16 Sep 2023 13:00:19 +0000
asID: 399150
IP address blocks: 23.234.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:42:b8:84:3b:c4:c7:c7:71:56:b5:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Jun 18 13:00:19 2023 GMT
Not After : Sep 16 13:00:19 2023 GMT
Subject: CN=a90fd1c5-303f-4462-a790-0a4b89c650a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:91:8a:c6:70:2c:ae:cd:a1:0f:a5:cb:3d:
c7:ca:41:17:59:35:f6:6d:2a:fe:5b:b9:7b:6f:b8:
c9:b2:1d:8e:22:93:9d:69:b8:2e:73:6e:1d:98:e5:
8d:64:94:08:80:9d:c3:5a:f6:48:ce:b9:6d:7d:6d:
73:cb:98:ae:92:be:27:9e:1f:af:0d:63:aa:f3:7e:
bb:7d:ab:02:ac:ce:e2:37:88:e0:67:12:a9:ba:bb:
77:66:eb:d2:d7:7d:2b:86:5c:86:e3:17:57:e5:03:
ae:6d:6b:be:2d:c7:bd:38:4e:d2:3a:8e:45:e2:d2:
0d:4b:5e:02:f6:90:e1:4f:a9:0b:52:d8:64:84:2e:
00:93:36:61:a2:0d:fe:6d:17:9a:4a:78:96:9f:ae:
e3:5e:e3:41:cc:0a:12:bf:ba:12:01:0b:76:d2:53:
ca:ca:c8:ce:18:de:83:80:90:4e:11:0a:ae:be:b7:
69:e9:69:eb:ae:2b:3b:44:4c:39:71:40:ce:36:a0:
43:6a:40:9d:a6:5c:c2:aa:8d:f1:d5:dd:99:97:06:
21:30:77:f4:f6:0d:37:ec:83:c5:3b:8c:63:09:9f:
f7:ff:11:01:da:71:67:5f:b6:0a:2d:bf:bc:4e:60:
44:bc:f3:ba:9c:6a:42:af:56:c4:68:b8:bc:cb:98:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:D4:9A:0F:59:DC:07:90:C5:DB:FE:FE:03:21:8D:C7:33:27:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/66806eb7-d71a-3024-be2f-8ec1d91a7f4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.234.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:df:0c:4a:ff:31:8b:f5:ec:35:44:98:2e:48:55:8f:76:70:
32:b5:cf:32:8a:5a:01:29:d5:bd:60:95:d3:fd:63:f7:ed:d3:
0a:25:2b:59:52:c4:a8:4a:c1:25:14:bb:3d:40:cd:22:f1:f7:
bc:a2:7b:06:ce:a6:13:37:a6:52:b6:b6:71:ac:39:34:4b:18:
5a:fa:01:e3:92:94:f7:e4:29:c0:c9:a7:08:00:e0:ad:55:7f:
9d:c1:a6:41:0d:76:11:75:03:f8:a6:86:db:e5:7e:38:ed:65:
1f:88:45:01:e4:93:2b:6f:3d:c9:f0:e1:f3:7d:f2:a6:77:18:
2f:6b:ac:36:85:d4:34:c0:f2:1b:5b:c6:d5:9d:1f:75:a1:ad:
cb:7e:e1:4c:37:ee:9c:c9:b3:06:3f:82:fa:a6:07:a5:cd:17:
9d:97:4a:97:61:30:a0:9e:cb:b4:e7:4c:01:f8:39:5d:a5:52:
72:95:0e:68:b7:0b:37:66:51:f8:14:ca:1c:3d:2c:d9:74:f8:
6c:b6:b9:42:72:03:86:89:e8:8e:2f:bc:81:9e:a0:51:99:9f:
b2:36:2d:a5:36:5e:85:ed:69:26:68:98:91:70:78:e6:91:6f:
a7:ab:80:60:de:48:c9:4f:4f:89:cd:80:df:b7:10:1b:d3:12:
93:f2:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:20 2025 by rpki-client