Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c606622b-6f44-3643-8f06-b6443b12d216.roa
File: c606622b-6f44-3643-8f06-b6443b12d216.roa (raw, json)
Hash identifier: kAM9JO1xvQmrOtiWv33vZXMep4xQdSrWQsAJSidvefE=
Subject key identifier: C4:7B:12:ED:B6:81:3E:28:73:3F:2B:88:C8:FD:6A:8A:DA:4C:25:98
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2EA95610C24F84F322780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c606622b-6f44-3643-8f06-b6443b12d216.roa
Signing time: Mon 07 Apr 2025 16:33:11 +0000
ROA not before: Mon 07 Apr 2025 16:33:11 +0000
ROA not after: Sun 06 Jul 2025 16:33:11 +0000
asID: 81
IP address blocks: 128.109.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:ea:95:61:0c:24:f8:4f:32:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:11 2025 GMT
Not After : Jul 6 16:33:11 2025 GMT
Subject: CN=cc930f59-bf78-4ee3-a009-77bc4d546f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:96:6f:f0:ee:8b:4a:a5:17:44:8b:5d:41:
36:08:cf:27:a7:2a:2e:7f:ca:6b:45:4a:4a:74:88:
39:54:00:bb:08:91:22:cf:04:f9:78:42:bf:bb:e2:
96:87:6e:b1:d9:66:66:b8:43:0f:a4:c5:28:5b:e7:
a7:c1:78:e1:10:eb:2b:dd:72:70:6e:fb:cc:f1:2e:
25:65:e0:b6:61:0f:80:b9:01:db:79:56:e5:d6:4d:
36:21:bd:64:e7:e6:cf:bc:67:9f:63:14:09:4e:f1:
fb:d2:fb:98:e7:df:22:99:e4:48:91:05:34:ea:09:
6c:a2:56:55:da:b3:8c:c2:82:a3:5f:c5:35:89:22:
f5:a0:9e:cf:66:2e:36:dd:33:2e:40:aa:df:2b:b4:
e6:d8:a0:63:e8:86:aa:2c:36:43:7e:83:10:b2:66:
3f:71:5c:5e:58:25:46:c1:7e:1a:51:4e:4f:37:73:
76:48:c4:c2:3d:6d:02:3e:6c:b0:c0:b1:9a:c9:00:
d2:4c:b8:62:a7:e3:df:0c:f8:52:64:59:e9:72:4c:
82:3f:56:a6:03:e3:28:97:a5:2a:dd:17:97:9c:0e:
68:91:fd:b9:c0:9b:44:16:82:02:d5:ff:25:9f:77:
38:ee:b2:ba:1d:ca:66:ac:fb:22:b0:ff:b3:00:d7:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7B:12:ED:B6:81:3E:28:73:3F:2B:88:C8:FD:6A:8A:DA:4C:25:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c606622b-6f44-3643-8f06-b6443b12d216.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:7d:e6:34:2a:47:d3:77:57:70:ca:74:5d:09:5c:98:15:7a:
d0:45:37:c3:b7:40:c0:63:ad:e5:29:b0:fc:66:bb:04:b5:1a:
5c:72:1e:57:c0:e0:d0:63:73:75:22:0f:b5:3c:b9:f5:81:5a:
68:f9:d6:b9:0b:d5:ac:bb:35:b6:c8:7f:59:b6:50:8b:b4:f4:
75:f1:d0:6f:ec:e4:61:1b:8d:3b:08:23:ad:93:ce:c1:59:6c:
3e:55:bc:1a:3a:6e:4a:1b:88:82:e1:13:33:7c:34:58:b3:54:
ed:14:68:35:fc:e0:d5:88:09:80:15:39:24:4a:c4:bf:43:74:
8d:6e:64:63:42:01:f8:5e:14:70:32:8e:b6:4a:9d:57:cf:eb:
65:fb:40:15:22:2d:90:03:7c:31:1c:a8:83:1f:35:a0:e8:1b:
5f:27:ae:43:05:22:cb:f7:08:4b:20:0b:f8:ec:c3:25:e3:e3:
fc:c6:0f:1b:40:23:b7:b1:a7:60:78:69:9a:b2:e0:30:1e:ca:
7c:f2:bc:fe:1c:82:91:a7:30:e8:8e:82:c5:3f:e3:15:ea:d0:
c9:fe:86:e6:fc:e4:74:2e:18:be:ee:cd:38:c2:66:ba:a6:4c:
0a:1f:ab:aa:b9:ea:d8:0b:90:2e:d9:fd:b8:2a:41:1f:73:38:
36:66:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:11 2025 by rpki-client