Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70a4910c-cb2f-317f-b247-7237258fd397.roa
File: 70a4910c-cb2f-317f-b247-7237258fd397.roa (raw, json)
Hash identifier: dfHCPrW9rv96yMsVf2LT85zmE1WAnmo/ZIZ0fE+jMw8=
Subject key identifier: 5D:29:53:33:96:E8:04:8E:B1:CE:4B:99:4C:62:7F:24:6E:0B:22:C2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C27CFE40FF335816C6BF38600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70a4910c-cb2f-317f-b247-7237258fd397.roa
Signing time: Thu 11 Dec 2025 21:30:02 +0000
ROA not before: Thu 11 Dec 2025 21:30:02 +0000
ROA not after: Wed 11 Mar 2026 20:30:02 +0000
asID: 19905
IP address blocks: 173.20.198.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:27:cf:e4:0f:f3:35:81:6c:6b:f3:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 11 21:30:02 2025 GMT
Not After : Mar 11 20:30:02 2026 GMT
Subject: CN=90467e6f-a2ec-4306-b82c-b4248021f2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:d3:5f:61:3f:b6:bc:de:03:ff:aa:aa:3b:
a3:55:c2:e8:90:19:70:2c:23:5f:e7:65:c1:72:32:
1c:34:3e:ec:7a:57:4c:59:45:12:1b:00:fe:2d:7c:
d7:6e:75:9b:10:36:cf:2a:47:da:f2:ae:02:fd:0c:
0e:6a:ec:fc:17:f6:e4:88:d0:ae:3e:03:47:67:4b:
b9:9f:4f:91:04:2e:b2:cb:1d:42:53:ee:99:18:68:
08:1c:0b:42:94:28:fa:6c:9e:16:5f:f1:ae:cd:7d:
15:eb:ce:95:37:e9:e4:e7:bf:ec:d3:a4:a9:53:57:
0f:c5:9c:f4:0e:18:d6:dd:a3:b7:d7:24:33:47:53:
c0:36:03:47:10:6b:30:80:e7:61:51:8b:a6:35:5d:
22:da:35:ef:57:4d:a3:e7:49:8d:44:c8:e8:2f:40:
3f:6b:bf:34:05:b9:42:63:0b:82:84:e9:7b:73:67:
52:f0:59:c6:e9:d7:df:9d:e3:bb:39:78:63:68:bc:
b9:67:d8:d7:c4:89:59:ba:be:e7:72:4f:8f:41:5b:
35:85:a9:64:d5:f5:c6:64:a2:e9:6d:38:3e:fa:f9:
87:54:c3:ab:1e:68:1e:4f:bf:f8:8d:a0:33:1f:44:
d5:bd:a9:63:33:a4:fd:dd:87:33:c6:16:51:e3:6c:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:53:33:96:E8:04:8E:B1:CE:4B:99:4C:62:7F:24:6E:0B:22:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70a4910c-cb2f-317f-b247-7237258fd397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:92:36:b2:f6:da:78:06:e3:5f:f5:32:63:87:71:50:a3:42:
12:8c:e4:e8:4d:4b:a8:ec:17:c5:b6:35:d0:6a:92:d4:0a:14:
04:e9:f3:39:5a:29:99:4e:b3:fb:1b:e5:a1:43:56:a6:f9:b9:
fe:ec:1a:73:39:d9:08:00:35:1a:8e:7b:a9:ee:6a:23:00:5a:
14:a8:d4:b6:4e:c6:fc:78:35:22:9a:c4:dc:44:fa:d8:ca:37:
4b:f9:6e:8e:9a:6e:d1:d5:6d:0a:c8:1c:76:53:b5:34:d6:19:
4b:23:de:89:44:97:e9:46:24:b9:17:5f:01:67:c2:76:0b:d6:
76:79:29:c6:77:e7:21:c0:75:98:42:28:ab:c4:22:50:08:66:
af:da:12:46:c8:29:f9:dd:02:e1:ce:42:63:d8:e2:38:77:89:
9e:c4:c6:87:5c:0c:a8:bb:32:49:0a:da:a3:d8:6b:57:5b:55:
c5:ec:ea:99:5f:f6:6c:a5:89:c0:a0:f5:f6:73:21:c7:4e:46:
4a:fc:a3:11:26:d4:94:8d:7b:23:cf:97:30:ba:a6:79:9d:f8:
7f:07:3c:11:a2:75:6d:2a:74:09:fc:2f:08:f3:07:30:ca:39:
3e:e6:47:79:64:61:8e:52:9e:3b:b1:2b:21:70:33:a4:09:d0:
b7:8e:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:48:59 2026 by rpki-client