Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/20b2e86b-e031-37a2-b1e9-6e21f532af8d.roa
File: 20b2e86b-e031-37a2-b1e9-6e21f532af8d.roa (raw, json)
Hash identifier: ux1RaCGQm5oUyZE+h3jIW9nitwLOTOp9A4mBP2Ek1w4=
Subject key identifier: 56:A3:10:49:53:35:22:9B:C2:57:E1:97:36:AD:D6:2F:44:95:87:84
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837F7DC2C0A5004017C6663B900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/20b2e86b-e031-37a2-b1e9-6e21f532af8d.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 154.11.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:f7:dc:2c:0a:50:04:01:7c:66:63:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=9e2a16c0-1d6d-45b0-8d93-c9ab13a62adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:74:9d:e2:7a:8d:26:69:a9:26:a9:92:c6:
c4:91:05:52:4e:60:da:83:e7:f2:f7:64:f8:66:31:
3b:c2:a3:72:44:69:4c:c0:db:a5:d1:fb:9e:4b:32:
19:ad:68:e2:2c:40:0f:4b:a6:54:72:81:c0:4f:71:
da:68:6e:a0:8c:21:f7:9f:f1:4d:0f:ed:81:91:06:
c5:c2:35:c4:6e:63:22:73:35:4e:9a:86:1f:2d:44:
44:04:13:50:42:31:5d:32:c7:6d:72:d5:46:1e:52:
3b:f5:ad:c1:0d:97:6e:bd:d9:90:97:41:51:71:bb:
81:8a:33:0a:a9:bc:68:ff:12:4d:66:36:27:e1:5e:
e3:cd:f3:1e:30:92:b2:85:a6:48:1e:d6:2f:f9:6d:
a8:c0:f5:c6:a7:dc:27:e2:2a:29:dc:4e:ca:10:0e:
f9:b9:12:7f:bc:73:33:9f:39:b3:e6:16:7b:26:74:
37:4c:c2:b7:13:15:80:be:4f:5f:df:62:fc:27:24:
a8:32:db:29:d3:d7:2d:bd:1b:c0:8e:1c:cb:b1:49:
d6:15:14:83:8c:4a:b2:58:b0:5f:a8:98:16:4b:5a:
e8:b8:eb:62:07:0f:0a:44:78:45:25:39:73:e1:89:
89:bf:fb:b8:97:c7:1e:f8:81:7b:5f:e5:9f:b8:75:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A3:10:49:53:35:22:9B:C2:57:E1:97:36:AD:D6:2F:44:95:87:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/20b2e86b-e031-37a2-b1e9-6e21f532af8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
154.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:45:91:f9:7a:32:90:78:44:9a:90:5f:78:00:f1:5d:4d:a7:
06:4c:0a:f0:13:b2:46:f7:af:e9:2b:d4:74:a3:06:2c:dc:cd:
e1:80:07:79:f7:cd:26:36:7c:7d:8b:12:37:fb:67:44:32:a6:
97:a5:67:69:95:40:b1:b6:26:f5:38:3a:a0:04:4f:e5:34:59:
1b:c2:14:90:2d:74:17:c5:e4:d7:8b:45:4b:bc:da:e1:3e:5f:
e4:e6:4d:a8:a1:75:25:6c:1e:a9:ff:9c:dd:05:57:2f:4c:18:
5a:d3:b5:f2:cb:4e:44:f9:da:ef:66:ca:23:7a:d6:65:6c:3a:
8b:91:9c:a7:6a:7a:d0:33:5a:e8:7a:0b:6a:2b:0b:e8:43:b6:
cc:b2:15:15:a7:c5:c2:91:08:3a:7f:70:7c:22:92:ea:ec:de:
49:36:ac:e1:eb:ee:ac:21:f3:e0:32:6a:0c:4b:26:d5:35:fd:
a1:2a:83:0b:de:ff:39:98:85:ce:b5:48:d0:18:93:ed:e4:8b:
10:81:b2:0b:ed:03:89:7e:3c:a0:b2:c7:49:4c:97:95:b8:31:
83:77:cb:be:da:3b:f4:0d:90:3a:9a:88:65:fd:d0:e2:f2:18:
71:04:75:65:d1:53:d5:cf:a2:f9:40:b1:68:cc:fc:ca:23:d0:
0a:9b:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:16 2025 by rpki-client