Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35023989-e506-3bde-b36c-ea2a9b9db547.roa
File: 35023989-e506-3bde-b36c-ea2a9b9db547.roa (raw, json)
Hash identifier: ZZ5D3XW6Ric3nzjQ4FbOFLcgk/bQPmXZk2RiSqxdyUE=
Subject key identifier: 64:12:E6:ED:84:E9:4D:C2:7E:AC:27:5B:F5:70:4D:0C:20:88:9A:D4
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858499DBF33559AD35E39832D2BEE
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35023989-e506-3bde-b36c-ea2a9b9db547.roa
Signing time: Wed 23 Apr 2025 01:00:46 +0000
ROA not before: Wed 23 Apr 2025 01:00:46 +0000
ROA not after: Tue 22 Jul 2025 01:00:46 +0000
asID: 2159
IP address blocks: 192.57.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:9d:bf:33:55:9a:d3:5e:39:83:2d:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Apr 23 01:00:46 2025 GMT
Not After : Jul 22 01:00:46 2025 GMT
Subject: CN=ec7436e7-561a-45fa-9151-329bdb82795d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:0a:ca:65:7d:36:03:3b:80:9c:50:fd:14:
ce:c9:91:c2:37:ad:58:20:b8:10:03:4b:85:90:f9:
da:59:c1:bd:57:7e:47:e2:46:c5:06:b7:10:2f:77:
c2:9b:10:65:18:46:06:46:91:37:52:bc:82:57:7b:
fa:11:b8:9a:07:9e:4b:cb:c7:a8:88:ed:c2:47:e6:
c9:f0:cc:dd:49:02:09:32:bc:08:5b:75:ca:0e:3c:
e0:80:b7:6d:f0:ff:c9:71:fb:ac:ef:69:df:d7:8e:
3a:b8:65:50:da:97:cf:da:29:37:1b:fd:4d:91:a3:
b9:0d:a7:a9:6c:1a:82:d6:6c:76:56:cd:68:22:88:
d5:48:a6:36:e2:fe:e7:43:e3:42:31:92:7e:0e:fa:
39:4a:07:0a:ee:a8:37:ea:14:20:35:0b:6d:d5:ea:
80:d7:5f:29:fc:f5:49:6f:1e:f1:ea:ad:78:b1:34:
e1:6f:39:4a:22:01:65:e1:9c:e6:e5:a1:17:9d:a7:
e8:df:32:7c:c7:e0:4e:ae:e8:34:9a:1c:24:08:4b:
c4:01:e0:53:50:82:f1:84:f2:d2:91:ce:95:c2:8b:
f1:43:fd:6f:e7:b8:e4:b1:a1:42:c9:8b:15:15:6d:
77:a0:6e:27:0b:57:b4:17:47:51:a3:f1:8b:ac:93:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:E6:ED:84:E9:4D:C2:7E:AC:27:5B:F5:70:4D:0C:20:88:9A:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35023989-e506-3bde-b36c-ea2a9b9db547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.57.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:67:ab:91:44:ce:7c:27:90:1b:36:55:12:52:f4:3a:49:7b:
fa:6b:f5:6d:cc:ae:43:68:32:3b:12:76:20:ae:1d:f7:7e:10:
52:ff:f1:d5:f6:4f:59:f9:5a:98:7c:b8:c9:d4:d5:1d:44:98:
14:da:92:17:9b:3c:0f:25:c4:d5:2a:76:8b:a3:c8:1f:c9:30:
d3:42:1b:9c:7d:b0:d9:27:1c:81:19:85:11:55:8a:78:c3:e2:
d1:86:8d:71:79:3f:aa:a1:a4:90:36:3f:58:7a:d9:3b:19:d4:
dd:0c:73:35:59:9e:40:f0:e8:72:3d:c0:f8:4b:d6:52:bb:20:
2d:ba:b7:ef:1e:3f:26:5a:7c:28:43:e8:66:4d:bc:7b:bd:c6:
c7:b2:36:c5:c3:ed:90:88:8a:a7:d7:4c:64:e2:44:0f:c4:1b:
4c:4f:65:af:22:e6:86:c5:86:a6:a0:f5:fe:c8:bc:bd:82:bf:
f0:0f:fd:c2:b6:ad:79:8c:4c:49:01:fd:d0:ba:96:85:9c:bb:
73:cf:b3:00:e6:01:d0:c2:4a:2f:15:ae:e3:f4:3b:0e:55:24:
6f:0b:b3:de:97:0c:c4:23:21:e6:d0:ee:d2:14:b5:fb:19:74:
bf:43:eb:6c:7b:f3:70:2a:80:6e:41:a0:71:cc:3c:4c:15:5c:
88:25:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:42:27 2025 by rpki-client