Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ece87911-eb04-3f8b-b543-d4ec140b60d1.roa
File: ece87911-eb04-3f8b-b543-d4ec140b60d1.roa (raw, json)
Hash identifier: 64m9SmRikCnhSiHOC2pVAFmsx+rYYdbChFy8iKayUTQ=
Subject key identifier: FB:B9:EE:9A:D3:26:07:E2:DE:BB:A9:8E:73:FF:87:76:1D:D9:55:C6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2EBC2C8278F45E9D19B80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ece87911-eb04-3f8b-b543-d4ec140b60d1.roa
Signing time: Mon 07 Apr 2025 16:33:12 +0000
ROA not before: Mon 07 Apr 2025 16:33:12 +0000
ROA not after: Sun 06 Jul 2025 16:33:12 +0000
asID: 81
IP address blocks: 152.26.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:eb:c2:c8:27:8f:45:e9:d1:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:12 2025 GMT
Not After : Jul 6 16:33:12 2025 GMT
Subject: CN=4e606bd6-fd44-485a-8084-efc23e1f8d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:1a:a7:56:85:bb:9d:d8:db:42:cc:03:d9:
7c:79:b3:2c:2b:2b:41:89:d2:9b:3c:0e:e2:9f:63:
91:0e:19:53:8d:57:1f:88:30:29:f8:dc:41:35:da:
c6:2f:50:06:c9:57:cf:36:aa:28:6c:7f:79:e1:9c:
3f:c9:dc:f8:72:b1:31:db:03:28:7a:6f:fc:11:43:
ae:f9:af:ef:75:59:90:1f:74:50:fd:08:96:ed:ed:
2d:1e:8c:f5:8c:46:6a:af:76:db:53:c1:0a:ed:e2:
7b:62:af:89:6c:e4:52:40:d8:48:16:0d:86:19:13:
3d:40:3d:98:e6:e2:04:6a:fd:14:ab:c0:16:f2:11:
20:ca:0f:22:03:6e:75:67:d4:76:6b:3f:37:e3:8f:
ca:17:3c:ca:10:cf:c7:28:f2:5d:e4:99:19:6c:31:
8e:f2:9d:22:f8:dd:ce:49:1d:2d:e5:70:58:34:0c:
e6:fc:71:b5:d4:85:14:f9:ca:c9:c0:7e:17:0e:81:
97:1c:f3:69:89:41:85:0a:62:78:c6:5f:ed:9a:9c:
8a:ce:8d:db:d8:cc:e6:c3:60:a1:df:9c:08:2a:06:
46:d7:df:fb:dc:d4:c6:e9:65:a8:81:47:ea:46:ac:
9e:e5:d7:ab:4a:48:8a:0f:3c:3c:80:40:a9:6e:19:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B9:EE:9A:D3:26:07:E2:DE:BB:A9:8E:73:FF:87:76:1D:D9:55:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ece87911-eb04-3f8b-b543-d4ec140b60d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:0b:41:97:25:5d:74:1a:49:4f:f0:b7:7e:fc:1a:3f:03:39:
ad:af:fb:f9:0f:9b:2c:a6:75:fe:86:80:2d:3b:ae:78:c8:df:
ae:1f:ea:11:75:ba:88:dc:61:34:c1:2b:96:80:46:ba:27:97:
3f:89:f2:02:f2:c0:de:af:6c:45:fb:9b:72:1c:a2:16:11:c5:
fd:6a:a9:ee:f9:bd:2b:04:af:20:e1:8e:c1:50:3d:f4:b8:61:
90:5a:c7:38:7d:83:fe:81:53:40:48:f2:24:e1:90:4d:b5:3b:
42:84:58:32:00:28:ba:1b:55:e5:22:af:d9:3b:15:74:0f:e3:
13:65:63:ca:81:0a:e3:bf:65:09:44:15:a4:2e:02:dd:6f:f1:
6f:f9:e3:de:93:7f:eb:98:f7:91:5a:d3:c3:cd:99:7c:38:bd:
c0:ea:91:f2:38:52:fb:76:44:9b:5f:2a:cf:f4:92:a5:03:47:
3e:de:90:92:43:14:36:60:80:0a:61:62:f7:1d:3f:ed:7f:6a:
62:0e:68:ba:93:b5:10:ef:c2:70:38:fc:bf:bc:7e:20:33:4c:
81:97:cd:44:cc:de:56:29:df:4e:39:4e:3d:4b:6d:82:47:54:
69:1b:67:d5:76:8b:1b:f0:de:ee:21:44:cd:c4:ec:b4:d3:4d:
46:67:0f:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4uvCyCePRenRm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDQwNzE2MzMxMloXDTI1MDcwNjE2MzMxMlowLzEtMCsGA1UEAxMk
NGU2MDZiZDYtZmQ0NC00ODVhLTgwODQtZWZjMjNlMWY4ZDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDAap1aFu53Y20LMA9l8ebMsKytBidKbPA7i
n2ORDhlTjVcfiDAp+NxBNdrGL1AGyVfPNqoobH954Zw/ydz4crEx2wMoem/8EUOu
+a/vdVmQH3RQ/QiW7e0tHoz1jEZqr3bbU8EK7eJ7Yq+JbORSQNhIFg2GGRM9QD2Y
5uIEav0Uq8AW8hEgyg8iA251Z9R2az8344/KFzzKEM/HKPJd5JkZbDGO8p0i+N3O
SR0t5XBYNAzm/HG11IUU+crJwH4XDoGXHPNpiUGFCmJ4xl/tmpyKzo3b2Mzmw2Ch
35wIKgZG19/73NTG6WWogUfqRqye5derSkiKDzw8gECpbhkxkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPu57prTJgfi3rupjnP/h3Yd2VXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZWNlODc5MTEtZWIwNC0z
ZjhiLWI1NDMtZDRlYzE0MGI2MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFULQZclXXQaSU/wt378Gj8DOa2v+/kPmyymdf6GgC07rnjI364f6hF1
uojcYTTBK5aARronlz+J8gLywN6vbEX7m3IcohYRxf1qqe75vSsEryDhjsFQPfS4
YZBaxzh9g/6BU0BI8iThkE21O0KEWDIAKLobVeUir9k7FXQP4xNlY8qBCuO/ZQlE
FaQuAt1v8W/5496Tf+uY95Fa08PNmXw4vcDqkfI4Uvt2RJtfKs/0kqUDRz7ekJJD
FDZggAphYvcdP+1/amIOaLqTtRDvwnA4/L+8fiAzTIGXzUTM3lYp3045Tj1LbYJH
VGkbZ9V2ixvw3u4hRM3E7LTTTUZnD/M=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:18 2025 by rpki-client