Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/190cffe5-e9fe-30fd-bd5f-1a7ec84d5850.roa
File: 190cffe5-e9fe-30fd-bd5f-1a7ec84d5850.roa (raw, json)
Hash identifier: sVngoxBywgNn9WWIqrkGoK+BkJCyBo20oNRgVPz2AwA=
Subject key identifier: 65:68:04:45:61:59:A7:D2:8C:4D:16:53:24:B7:59:20:C5:B3:BD:A4
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837BDA8F45FECF429D448967900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/190cffe5-e9fe-30fd-bd5f-1a7ec84d5850.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 29 Jan 2023 05:00:00 +0000
asID: 25668
IP address blocks: 207.194.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:bd:a8:f4:5f:ec:f4:29:d4:48:96:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Jan 29 05:00:00 2023 GMT
Subject: CN=20c8b06c-80d2-4081-bf07-31c54f658f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:db:d6:f3:82:f3:54:91:bc:0b:2e:e4:8e:
17:d7:32:0c:19:72:61:5c:58:68:7a:19:b2:e1:b2:
e4:36:dc:98:9d:aa:94:b2:aa:50:2a:b9:4c:cb:5c:
68:3b:de:aa:b4:f5:65:d5:42:8c:01:49:53:b0:e1:
10:b3:77:52:82:64:95:bd:af:f9:8a:9c:d7:17:af:
a8:3f:e8:aa:14:3e:f8:89:0f:95:43:f0:b1:9f:53:
0f:66:08:a7:14:50:df:6b:9b:7f:77:42:9d:a8:01:
4c:e8:78:18:19:e7:19:7b:f3:9c:20:da:4e:11:19:
bf:0e:b4:4d:80:3f:6f:de:66:cf:2e:ae:7d:df:36:
3a:3d:68:8e:45:3f:69:e7:7e:75:e4:ea:a1:53:ea:
43:5b:ef:9d:a0:4d:5e:1e:8f:36:91:1a:27:fc:e8:
7e:da:7f:08:4f:0d:54:e1:a7:2b:b6:d0:16:3d:17:
1d:e1:94:fa:a6:54:60:be:0e:3b:6a:40:42:2a:45:
5b:0f:69:8b:22:e7:44:d8:26:78:51:f3:59:34:44:
f1:1a:55:57:d4:bb:9c:3c:56:ec:d4:0e:aa:1b:03:
4f:41:13:f2:a7:19:9c:87:0e:be:4e:13:bb:de:88:
db:83:af:26:b4:97:5c:98:89:c0:a9:2f:22:76:3f:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:04:45:61:59:A7:D2:8C:4D:16:53:24:B7:59:20:C5:B3:BD:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/190cffe5-e9fe-30fd-bd5f-1a7ec84d5850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.194.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:62:d0:1c:1b:d5:ec:de:8b:8d:fa:58:96:3e:4e:9e:6d:ce:
07:34:85:de:5a:23:57:be:fb:83:fd:e7:e8:c5:55:2b:37:26:
43:8a:4e:d1:33:cf:9f:45:5f:20:79:7b:92:d8:aa:9c:45:78:
ce:8c:72:4d:ab:39:c4:a4:0f:3a:f4:a1:d1:3e:10:b1:fb:8c:
09:37:88:25:4f:87:82:4a:0f:26:2a:b9:c8:0b:ae:9b:5c:6e:
5f:1c:f6:32:f0:0f:29:8c:d9:54:51:d7:2a:40:b1:e9:12:c1:
58:1f:a1:93:50:f6:e0:0d:a1:bf:c5:35:19:ac:ce:91:c8:81:
f9:ae:35:ea:55:9f:fb:71:1b:ce:b3:51:d9:7c:26:09:db:25:
fa:be:4e:98:f8:1d:0f:5a:83:a1:52:27:e7:67:b0:94:6d:c0:
68:2b:73:9e:aa:8a:ed:38:b7:35:a9:5c:13:05:6a:6e:4f:d5:
6c:32:6c:2b:aa:06:57:77:d3:4c:5a:c7:8a:e1:22:57:55:fc:
58:52:19:1f:a5:6a:23:b5:71:32:c3:32:ed:54:59:b6:d5:4c:
00:f7:ad:39:0a:83:2d:b6:3d:b1:80:e1:76:c4:97:ac:05:59:
6d:e7:f6:d4:3e:66:da:06:00:11:32:04:2a:14:2e:bb:05:55:
5b:65:8f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:50:35 2025 by rpki-client