Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b453e704-14a4-3e2d-8ef4-6f3f70929be3.roa
File: b453e704-14a4-3e2d-8ef4-6f3f70929be3.roa (raw, json)
Hash identifier: 9Rv2j83QT17IQKfheMEQbqK6PMbAhNCIvCiSPZc9sHY=
Subject key identifier: FC:85:8D:D4:56:B5:92:6C:7C:6A:A9:30:9C:27:21:D9:3A:03:F3:5F
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2EA578D47ACC631B1EFC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b453e704-14a4-3e2d-8ef4-6f3f70929be3.roa
Signing time: Mon 07 Apr 2025 16:33:11 +0000
ROA not before: Mon 07 Apr 2025 16:33:11 +0000
ROA not after: Sun 06 Jul 2025 16:33:11 +0000
asID: 81
IP address blocks: 128.109.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:ea:57:8d:47:ac:c6:31:b1:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:11 2025 GMT
Not After : Jul 6 16:33:11 2025 GMT
Subject: CN=15d04d90-e1ae-48bf-82d7-104493726ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:35:be:ca:f9:10:00:5b:34:4c:68:3e:e9:
9b:18:bb:21:fe:3e:4e:a6:3d:a4:6b:5d:cf:89:74:
c6:97:66:5a:e8:4e:5c:4c:05:58:93:aa:6c:26:48:
3c:98:ed:78:1e:28:eb:9f:36:d9:fc:fa:f4:ea:8c:
b2:4e:b7:7b:80:71:27:50:e6:3a:37:24:86:0f:48:
b5:86:76:09:9e:ff:ea:a8:95:ea:14:5e:a0:2b:5f:
64:92:10:cc:42:b3:4b:d5:d1:f4:40:ab:e3:e1:77:
0f:f2:4e:17:a7:e5:c7:a4:15:03:0d:38:1f:a2:3c:
74:7c:13:6d:f4:b4:b0:8b:0c:10:01:40:a8:ca:63:
1a:dc:ce:9b:97:ac:53:b5:3c:c0:40:9a:ed:63:72:
19:79:b2:a4:62:2e:6b:6f:d7:1d:4f:d3:60:23:3a:
ac:10:9d:28:51:9b:95:91:d1:79:50:ca:1c:36:26:
1a:56:72:d8:d9:2a:2b:dc:fa:b7:de:05:84:37:c9:
20:01:67:99:8b:39:25:95:84:c1:e3:2d:c4:4a:e9:
3f:bb:7e:63:b7:0e:26:82:cf:cb:24:3f:d3:b0:19:
a5:f1:01:1d:21:ac:fd:a0:50:ae:20:5d:59:4e:3f:
66:49:40:cd:79:a1:db:7b:7e:ef:26:a0:0c:92:ae:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:85:8D:D4:56:B5:92:6C:7C:6A:A9:30:9C:27:21:D9:3A:03:F3:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b453e704-14a4-3e2d-8ef4-6f3f70929be3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:93:6d:93:92:d2:82:c9:f6:48:10:63:5a:33:d9:bd:ae:99:
69:12:4e:d8:8c:1c:86:df:77:b5:f2:7b:69:e3:d8:b7:c6:d8:
ee:f0:8f:d5:f9:3a:44:45:89:b7:f2:ab:70:4c:a3:38:93:87:
43:0a:f7:d5:d6:e2:85:23:ab:6d:cd:f1:65:4f:69:6c:59:dd:
bc:6d:bf:86:ac:a9:04:67:77:04:9c:59:a9:14:e3:43:c5:ca:
16:b7:07:5c:80:d2:5d:07:0a:0a:49:70:d1:61:40:bd:ce:4f:
36:2a:6b:60:19:c4:40:ab:6a:e0:13:78:fa:dc:35:d2:95:48:
e4:50:c5:8b:4c:ff:80:af:04:5c:8d:fc:e9:41:e4:da:be:47:
ea:f2:a9:89:2d:74:df:92:7e:fd:a8:92:17:38:f5:c9:61:df:
7b:3b:cd:4f:0c:3c:0a:f4:e5:41:28:1c:b9:51:b0:f5:36:cf:
db:30:da:8d:15:32:bd:12:cc:29:f4:ce:a7:7d:94:fa:e2:1d:
93:01:0b:7b:2c:10:ac:9b:43:4e:b1:bf:a5:56:a2:7b:9a:5d:
b5:d1:f0:82:f9:bc:22:cd:8a:fb:1a:6a:e5:f5:e4:cb:b1:98:
cc:3d:f9:bb:73:75:9d:78:06:61:3b:84:5f:86:b7:58:2e:71:
87:69:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:25:16 2025 by rpki-client