Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b52904b4-a2ca-343f-98db-aa07f7c1e7d2.roa
File: b52904b4-a2ca-343f-98db-aa07f7c1e7d2.roa (raw, json)
Hash identifier: DD74DJKgFKoAbEWyPavf8RjpkNlBAAfbr6Z+BCCGunQ=
Subject key identifier: CD:47:8E:B5:AD:E6:5D:C0:D3:88:DE:EA:15:EF:01:8D:53:6E:CE:AB
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2F343F9327126F5796C40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b52904b4-a2ca-343f-98db-aa07f7c1e7d2.roa
Signing time: Mon 07 Apr 2025 16:33:15 +0000
ROA not before: Mon 07 Apr 2025 16:33:15 +0000
ROA not after: Sun 06 Jul 2025 16:33:15 +0000
asID: 6559
IP address blocks: 204.84.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:f3:43:f9:32:71:26:f5:79:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:15 2025 GMT
Not After : Jul 6 16:33:15 2025 GMT
Subject: CN=870e2a92-78eb-4b64-a92d-10ce1df70613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:5d:82:63:e4:95:e5:ff:6b:10:17:be:fd:
39:bb:b5:c3:8d:45:41:15:7c:41:44:ed:9b:8b:c7:
34:6c:73:f5:97:74:47:99:71:bf:db:c2:73:e0:d6:
52:d3:b4:94:4e:ea:a0:2b:c3:80:05:f3:20:f4:9d:
fa:19:6b:bb:ba:4a:e1:6b:8d:a8:ac:4d:7e:da:21:
0c:60:58:cb:6d:a7:53:31:e6:4e:01:f7:00:db:34:
c9:27:d1:ce:9a:b8:0c:37:87:08:8d:b9:12:4d:1d:
7a:05:4f:aa:6a:e9:f0:ed:7e:e1:4d:dd:c2:77:51:
2b:2e:3d:fa:c5:b0:61:a1:60:96:48:e2:4e:87:32:
ec:c6:1e:0b:d6:ea:08:8a:ce:9e:50:a0:d4:9d:8f:
ba:1d:07:c3:28:a7:24:5c:aa:6a:73:a8:cc:0a:85:
a9:5c:6e:ce:d4:d0:b8:ca:5e:ce:4f:47:c9:31:07:
3b:2c:a4:9b:1f:78:10:50:e1:e0:ef:2a:d2:50:30:
f6:b2:99:ee:82:58:6d:7a:19:ae:51:fd:6b:3e:c2:
51:c3:a6:31:cf:06:fa:8a:d8:7b:29:9a:fd:b0:6f:
a3:91:a3:aa:b0:b6:85:a0:b9:7e:ee:45:59:6c:35:
cc:eb:c9:af:2c:f5:81:3c:c7:20:0b:be:ce:f8:93:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:47:8E:B5:AD:E6:5D:C0:D3:88:DE:EA:15:EF:01:8D:53:6E:CE:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b52904b4-a2ca-343f-98db-aa07f7c1e7d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:b1:24:45:e1:2a:be:48:0f:33:ab:8a:5d:d9:e7:e8:a6:aa:
73:7f:49:1f:cd:97:73:a1:38:d4:b4:f4:29:38:04:62:42:d1:
3a:7c:00:d4:16:37:f7:fe:c0:dd:00:6e:3e:3e:75:1f:95:a6:
7c:2e:ab:13:29:d0:c9:72:17:f5:d8:7a:64:b3:8c:55:06:e4:
88:0a:ad:05:46:1c:49:7e:24:43:a0:28:b6:d5:6e:76:59:49:
71:cb:7a:3f:21:3a:bb:67:d3:88:5a:e3:ea:35:e1:82:7b:4a:
f3:7a:45:24:be:c9:d7:cb:75:ef:1c:50:ca:c0:78:a3:c1:bc:
51:69:cb:b9:c2:ec:e0:10:8c:e7:c9:39:1a:44:0c:81:7f:6a:
33:2b:3f:ea:79:bb:00:44:f4:b4:3d:70:1c:c2:6e:0c:c0:84:
ff:3d:80:c2:8d:d8:76:aa:6c:6c:26:7b:0c:d0:fb:e3:db:d7:
69:e2:54:a0:00:5a:1b:f1:33:98:48:6f:81:60:3a:f3:64:16:
97:15:1b:a6:79:a3:e1:62:9a:0c:81:45:3b:74:1d:00:14:48:
8e:b7:24:11:11:a8:b3:2e:7f:8b:c3:2f:36:1e:ff:91:24:9a:
ec:bc:c4:0c:7f:d7:44:f0:11:26:7b:2f:0b:55:d6:1e:4a:10:
8c:a0:6f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:01 2025 by rpki-client