Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3933d8d3-30f4-36f1-bf76-e39e0af2c284.roa
File: 3933d8d3-30f4-36f1-bf76-e39e0af2c284.roa (raw, json)
Hash identifier: 2xke5Rp5wRUlH+NoxnmJHCr5nXogyhJuTBE5W7EFA0g=
Subject key identifier: 0D:19:EB:37:9B:88:CF:6D:45:A2:20:DD:78:27:E5:AB:8B:37:2F:FB
Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial: 010D0C9F43285842C3240056AD67EAC78E178E40
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3933d8d3-30f4-36f1-bf76-e39e0af2c284.roa
Signing time: Thu 03 Aug 2023 13:00:19 +0000
ROA not before: Thu 03 Aug 2023 13:00:19 +0000
ROA not after: Wed 01 Nov 2023 13:00:19 +0000
asID: 20473
IP address blocks: 45.32.0.0/16 maxlen: 24
45.76.0.0/15 maxlen: 24
45.63.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c3:24:00:56:ad:67:ea:c7:8e:17:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Validity
Not Before: Aug 3 13:00:19 2023 GMT
Not After : Nov 1 13:00:19 2023 GMT
Subject: CN=de5924c6-805d-41f0-9a61-36fcbf1ca184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b4:d8:9f:ba:6d:04:f0:9f:5b:dc:68:74:9f:
83:bf:45:9c:b0:3c:18:df:fe:46:25:d4:d4:6e:6b:
1d:69:9b:ab:c8:58:aa:0a:9c:12:60:68:59:f9:bd:
78:1a:e2:0a:71:34:9c:9b:8b:e7:7e:46:95:c9:88:
2b:67:cd:3a:f8:34:3a:b8:04:83:58:e9:51:b7:ba:
0e:8b:77:57:e7:1a:c7:c3:fa:c9:59:79:28:e9:9b:
02:de:71:4e:54:cf:fc:0b:81:20:42:6d:b3:a0:0c:
07:d1:07:0b:97:c4:ed:4e:35:4a:34:07:53:00:0a:
a5:7d:73:5e:8c:9f:b9:4b:a2:42:d7:06:32:6a:b2:
72:34:19:2c:70:da:20:e8:be:82:ea:9a:d5:b5:a9:
82:49:b7:61:4b:6c:4c:8a:92:07:e5:48:3a:31:5b:
ed:0c:54:08:41:e8:cb:14:44:f2:8d:54:d6:88:90:
ef:6a:34:5f:d8:6c:3a:92:32:2e:61:16:ea:26:7f:
3e:86:65:a8:44:af:0e:2c:81:23:e3:70:33:b8:8a:
5c:11:53:65:f2:16:97:db:b4:6e:08:6e:59:4d:10:
62:e2:8e:e6:04:fb:b6:d1:d0:cf:10:e5:cb:7d:cf:
6a:7e:3e:af:bd:9c:39:f6:2e:7e:b6:d0:99:d3:a2:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:EB:37:9B:88:CF:6D:45:A2:20:DD:78:27:E5:AB:8B:37:2F:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3933d8d3-30f4-36f1-bf76-e39e0af2c284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
X509v3 Authority Key Identifier:
keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.32.0.0/16
45.63.0.0/17
45.76.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:c4:63:3d:73:5f:a7:53:9f:37:22:50:6d:27:95:e7:2d:97:
72:62:15:d0:06:de:35:a9:6c:62:b4:18:a2:29:21:00:f6:29:
56:b0:5b:68:bc:e0:8b:e3:53:7b:ba:16:7b:49:2a:fc:9d:a5:
e4:4e:04:37:8a:57:b3:bd:dc:48:e1:b7:a5:78:25:e1:f1:72:
b8:3d:9a:c6:54:3c:83:27:b0:27:d5:4c:2f:df:9b:7b:e1:2e:
27:6e:88:c3:fb:18:a8:ed:f2:e8:27:af:3e:28:49:6f:d1:c2:
94:00:71:01:e5:7a:fe:f6:a9:27:92:28:87:04:bc:36:db:cf:
21:5b:5a:d4:83:f5:cb:11:97:b5:71:81:a5:79:d5:d5:e1:7d:
44:b4:3a:6c:10:43:3b:a3:59:a6:77:f2:45:d5:bb:17:a0:01:
f6:36:dd:3a:53:99:a3:9c:a9:e8:94:81:cd:f1:74:98:aa:69:
a8:30:86:3a:96:ef:9d:3c:1f:3f:39:42:8d:4b:d8:25:cc:8d:
c9:4f:dd:ec:34:01:8a:f5:6d:65:b3:2e:88:ab:59:53:d4:98:
3f:7d:1d:d4:f4:e1:32:37:ea:de:93:a1:2a:1b:42:47:2b:f4:
ad:4c:51:84:6c:ac:d6:79:cf:7d:a1:b8:9a:7b:4f:9a:40:d7:
da:19:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:25:23 2025 by rpki-client