Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7de7c42a-0483-35f7-8f92-b026218c0987.roa
File: 7de7c42a-0483-35f7-8f92-b026218c0987.roa (raw, json)
Hash identifier: prb3/sPg2o3NYBcDKXfNkrY//SWzmUABkM5K6n2eQes=
Subject key identifier: 32:61:38:1C:3B:54:8A:A0:70:82:D4:F8:07:67:31:3A:98:7C:62:B0
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2F4200E2D6C4263E139C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7de7c42a-0483-35f7-8f92-b026218c0987.roa
Signing time: Mon 07 Apr 2025 16:33:16 +0000
ROA not before: Mon 07 Apr 2025 16:33:16 +0000
ROA not after: Sun 06 Jul 2025 16:33:16 +0000
asID: 81
IP address blocks: 204.85.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:f4:20:0e:2d:6c:42:63:e1:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:16 2025 GMT
Not After : Jul 6 16:33:16 2025 GMT
Subject: CN=35316155-4d81-4c0e-95f8-77e4893a9fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:43:be:18:1c:18:67:b6:58:cc:94:c4:23:
2b:3e:a6:ac:83:41:74:cd:03:e2:08:8b:a6:9a:70:
ac:92:b2:14:84:38:e6:c4:6e:8a:9d:11:52:b1:a8:
03:c6:70:52:9e:3e:e1:54:b7:fa:9e:e1:fc:0c:4e:
1f:5d:10:67:05:d9:30:08:bc:5e:8e:5d:e8:50:25:
d6:41:df:28:4b:07:3a:52:10:b6:85:55:01:cd:ea:
a0:e2:3a:df:a6:81:1e:89:66:e2:a3:70:0e:46:10:
5a:c8:66:a0:89:54:10:91:ea:47:37:1b:51:72:e8:
94:e8:35:b3:6f:62:f5:c5:90:5d:7c:6d:3f:45:94:
5e:00:2d:81:9f:ab:73:67:f1:3a:97:fa:f7:18:9d:
38:23:b2:ca:71:4b:d4:06:4e:6a:ea:c7:ed:42:a5:
96:21:a3:fa:fe:a8:74:86:4b:db:c7:3d:d1:ff:1b:
95:d9:c6:02:97:8a:8a:8a:4b:62:58:22:ef:2e:41:
95:fb:56:01:0e:69:db:34:2c:9d:37:f5:f3:0b:4b:
7d:df:c3:aa:10:2a:86:66:b9:73:3e:09:07:a7:11:
64:f9:c8:c6:df:6e:40:bc:23:14:3c:84:a1:f9:f1:
90:c4:db:99:b7:dd:cd:0e:27:d1:73:5b:df:92:cc:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:61:38:1C:3B:54:8A:A0:70:82:D4:F8:07:67:31:3A:98:7C:62:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7de7c42a-0483-35f7-8f92-b026218c0987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:64:35:4f:d4:e1:1a:76:47:55:fb:44:45:4b:b0:f4:d0:a5:
c8:fd:cb:79:2b:9d:9b:ef:78:4a:12:80:95:fb:e6:b2:f8:d8:
f5:e8:ff:fe:6c:97:dd:93:0c:ab:56:af:99:14:82:a4:b1:0f:
fb:4c:bc:46:7c:b6:c1:40:3e:ce:61:09:ea:df:c4:b0:bf:30:
7b:2a:fb:ed:cb:6a:82:26:e4:b7:0a:f6:de:8c:f6:d8:ff:1a:
40:3c:30:38:58:1c:43:86:30:ca:b0:f9:be:4b:de:86:e3:e0:
a1:52:7c:00:66:84:b2:72:02:bd:a3:c4:a9:26:14:2a:d6:dc:
2d:0e:c9:a2:2b:66:2e:88:f5:e6:f2:12:e0:c0:e0:af:27:ed:
58:53:f7:80:8f:6f:57:19:84:a6:4d:f6:c9:14:28:e6:62:58:
cc:a4:4a:8f:7b:aa:44:f8:2d:39:ab:84:4e:4e:28:6c:32:6b:
a2:25:c8:14:52:7b:9f:95:9a:08:21:ff:3a:76:80:81:b5:59:
36:48:69:28:4a:0e:5c:67:a8:23:88:6d:ae:a0:d2:cd:34:45:
55:40:27:3e:74:d1:09:70:97:f8:9c:b8:40:aa:db:5c:b6:dd:
72:cb:20:e3:0e:e5:06:c5:75:91:47:e4:c5:e8:b0:73:bd:5f:
e7:6d:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:26:28 2025 by rpki-client