Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e6cf3e0-36a4-33ab-b1a4-62a1c36c32fc.roa
File: 3e6cf3e0-36a4-33ab-b1a4-62a1c36c32fc.roa (raw, json)
Hash identifier: zceWvLNu1O7YujOW2NwWJCZ8W/x5+ucBf4Ub56hvTlE=
Subject key identifier: 44:82:EC:0F:BE:8B:0F:30:9F:27:39:1D:15:93:CA:1C:C6:0D:84:48
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BE3AB890AD2EDCB4D64A40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e6cf3e0-36a4-33ab-b1a4-62a1c36c32fc.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:be:3a:b8:90:ad:2e:dc:b4:d6:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c3d7636f-e403-4658-8c03-f9ba095231f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:58:b6:8c:db:40:4d:a4:3b:51:2f:46:c3:
8e:01:fb:09:40:1a:5e:02:ed:b7:bc:ba:8a:7c:eb:
5b:e8:02:05:78:34:11:e1:64:03:d0:00:22:43:67:
71:55:86:c9:5f:ad:b2:cf:78:ac:24:fc:6e:86:4c:
09:b8:4a:78:dc:7e:7d:d3:32:0b:8c:7e:40:2a:9a:
2f:6f:54:3d:4c:40:61:76:8d:aa:fc:74:12:b1:cd:
6a:0b:52:19:af:9c:1b:f1:8b:c5:84:57:f3:cb:47:
36:c3:db:45:36:2c:50:66:fc:4f:d4:64:ba:a5:4d:
99:86:63:42:6c:85:fd:a4:ca:e1:2a:63:f3:0f:89:
2d:86:70:a6:70:2d:c2:e6:18:d6:2c:32:1e:e7:ab:
77:11:06:2b:51:2e:23:87:ba:44:97:07:8c:af:27:
92:4d:33:76:64:e8:13:35:51:56:5b:c6:3a:7c:7d:
d9:75:d7:d5:c6:08:7e:51:d0:84:90:8d:98:8e:bb:
fc:26:3c:b8:ad:50:68:ff:a9:01:58:0b:96:a4:cd:
a4:0f:93:d2:35:b5:82:ae:f3:fc:87:9d:23:a1:55:
05:9f:1c:7f:8f:35:0b:64:f3:b8:58:91:07:1d:1e:
f1:51:13:b7:0d:83:8d:38:a1:90:1e:4e:6e:ec:b9:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:82:EC:0F:BE:8B:0F:30:9F:27:39:1D:15:93:CA:1C:C6:0D:84:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e6cf3e0-36a4-33ab-b1a4-62a1c36c32fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:66:66:4a:c1:81:6b:50:0f:68:62:a2:c2:7c:12:14:8e:89:
58:70:f0:78:e5:9f:af:90:80:00:7a:d7:45:de:62:a2:b5:d2:
aa:5d:a2:95:4d:4a:ee:0f:5c:ba:53:47:71:89:d9:84:dc:50:
e3:fe:4a:e0:69:8e:c1:7b:37:98:b5:cf:14:38:9a:77:ef:f1:
91:53:c9:db:a2:7f:77:ca:ee:9d:2e:48:59:09:33:f3:b8:c5:
39:1c:4c:c5:4a:60:95:15:0a:89:8f:f2:a5:8f:7a:bc:aa:40:
27:62:96:34:44:52:c0:97:04:06:6b:c4:a3:96:11:2f:db:c0:
8e:ae:9a:9c:d7:aa:3e:19:54:30:9b:65:52:3e:85:94:8a:82:
dc:b8:d2:94:01:09:c2:78:db:89:7c:f5:93:a7:e8:6a:ca:e5:
ec:35:1e:f1:98:5b:36:7f:47:58:b7:96:a2:6f:4b:18:85:d5:
c8:7f:2c:7e:c9:12:77:a5:5a:b1:5d:1a:28:64:73:9b:f5:e5:
7a:3a:f6:36:b9:77:2a:05:05:a5:a4:14:7a:c4:b7:b9:da:b8:
94:fc:8a:2b:98:11:9b:18:ae:61:06:fd:aa:43:dc:da:36:c0:
38:6c:9e:71:7c:93:76:ec:d0:f7:17:ca:b3:0f:86:8a:6a:07:
da:bd:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:10:33 2025 by rpki-client