Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f94b3d0e-62b0-3ea2-911b-d0d5c2294854.roa
File: f94b3d0e-62b0-3ea2-911b-d0d5c2294854.roa (raw, json)
Hash identifier: LUxRXK20MybtIfSVodvArv6qcs1XCvi+TkZYHWt2ZBc=
Subject key identifier: 87:A1:7C:A6:3E:93:F0:4A:2D:60:09:1D:25:FC:2B:94:A6:C8:E8:C7
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C27CFE164E240CF1C6C8AB400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f94b3d0e-62b0-3ea2-911b-d0d5c2294854.roa
Signing time: Thu 11 Dec 2025 21:30:01 +0000
ROA not before: Thu 11 Dec 2025 21:30:01 +0000
ROA not after: Wed 11 Mar 2026 20:30:01 +0000
asID: 19905
IP address blocks: 173.20.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:27:cf:e1:64:e2:40:cf:1c:6c:8a:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 11 21:30:01 2025 GMT
Not After : Mar 11 20:30:01 2026 GMT
Subject: CN=7b400de3-8893-4b27-843a-5f18e1a22369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:01:86:b2:96:53:60:15:8b:c0:33:d5:8d:3c:
f9:c0:d0:b1:6d:89:9f:c3:38:ac:64:3e:09:df:80:
f1:dd:d9:79:31:da:f5:5a:bf:d3:5b:6f:79:3b:58:
41:4a:bf:91:9b:ae:d5:13:0e:97:36:17:33:a9:f2:
2b:d3:29:74:8e:96:fe:f6:c3:6e:e0:7f:7d:e6:8d:
4c:94:fe:42:52:6e:6a:49:eb:d9:b9:ad:c9:07:7c:
f2:ca:d5:ad:bb:ca:9d:b2:40:dc:fd:4c:ce:e5:9b:
4d:8b:73:b4:35:ac:14:13:84:f6:ce:ae:1a:7f:d5:
9b:2b:38:03:7f:1e:8b:49:76:25:56:44:7b:09:3d:
1d:c6:d4:94:6d:75:3e:9d:8b:2a:5c:58:c5:10:83:
f9:21:46:05:b1:98:5a:58:d4:e8:84:cf:98:51:e4:
26:6d:a9:7a:44:33:17:5a:3d:4a:1c:f6:31:a6:0f:
ef:57:fc:3e:94:27:ee:81:d5:73:fc:39:04:22:ae:
61:36:36:59:16:ca:29:e4:50:a1:00:40:7e:91:a6:
60:6f:02:8e:19:d7:b1:bb:f7:c8:5f:1f:c5:87:94:
4c:34:77:a9:58:83:24:00:5d:ed:3e:8a:f6:2c:1d:
85:c3:b9:7f:bd:ed:46:eb:8e:9c:bd:09:b7:34:a0:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A1:7C:A6:3E:93:F0:4A:2D:60:09:1D:25:FC:2B:94:A6:C8:E8:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f94b3d0e-62b0-3ea2-911b-d0d5c2294854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:d3:ec:7b:5a:48:67:4c:f7:c2:20:7a:21:30:c7:46:3e:76:
e1:8e:58:42:83:01:0c:ca:d5:d9:4f:ee:77:8b:34:19:6a:ab:
9e:b2:11:bf:ea:0b:f0:7b:b0:6b:21:9f:14:a8:cd:37:6b:e6:
87:65:65:96:69:2e:71:5d:d9:84:fa:fe:0d:fe:3f:24:08:dc:
56:b2:72:33:d7:4a:d7:b0:71:b3:e4:b2:b6:f9:0b:26:9d:0d:
dd:08:7a:0a:00:6d:b7:77:75:b3:96:b1:58:d6:e5:5b:22:ab:
d6:18:21:bf:00:0d:e0:2e:4b:75:e1:f4:2e:23:3d:44:82:e7:
c8:04:9b:12:55:db:61:66:fd:69:79:92:7b:54:64:6b:22:11:
ba:cf:c3:92:23:53:a6:bb:4c:ff:f1:37:ba:64:b7:0e:b4:4c:
bd:b0:f7:c4:53:2e:bd:ef:ad:79:5d:1f:bb:a0:1c:0a:a0:7c:
48:c3:1c:a3:39:3d:fe:f1:f8:75:00:0a:64:04:c2:9b:0d:1e:
80:de:c4:79:ad:4e:4e:0a:67:04:8c:be:d1:ec:3d:6a:32:2e:
00:a5:b7:45:e7:16:0d:b0:52:5d:8d:eb:d1:4a:af:04:12:6f:
26:4b:bc:cc:40:f9:bf:71:71:5c:9b:c3:13:c0:b6:89:f3:44:
52:2c:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:48:13 2026 by rpki-client