Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/258f90c5-aeeb-3616-b58d-9af6e3ef80e1.roa
File: 258f90c5-aeeb-3616-b58d-9af6e3ef80e1.roa (raw, json)
Hash identifier: 19l9fc50pw9iPO5w3daK+WGIn35jTPdY2O6hjjG3rdM=
Subject key identifier: 1F:ED:0C:D1:D8:B3:22:88:C2:12:15:C1:02:8F:06:E3:28:22:1D:70
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837E4E11727FDD9096900AF8980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/258f90c5-aeeb-3616-b58d-9af6e3ef80e1.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 12 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 207.167.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:e4:e1:17:27:fd:d9:09:69:00:af:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 12 05:00:00 2023 GMT
Subject: CN=eb7b6cb1-c001-492d-9474-01a1a42297aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:60:cd:98:01:18:e8:08:f1:d9:b2:72:9d:
df:51:d2:99:79:98:77:4f:f3:e0:9b:05:78:e8:2b:
ae:23:a8:25:44:43:ae:b1:f9:79:62:c0:8a:38:e7:
b0:4a:55:1a:49:47:a9:e9:1a:1b:0b:9d:79:b0:e7:
b4:ac:6d:18:8a:43:f2:01:71:4a:e9:70:a5:db:ac:
df:ce:e4:07:21:fe:ad:d5:1b:f6:03:10:41:ec:56:
19:ad:54:f7:6d:6c:3f:6d:e3:d1:92:39:a8:a1:d4:
3d:9e:eb:74:87:2d:a4:01:ac:2e:02:a9:97:5f:94:
94:63:c2:e4:f6:f0:d6:24:24:57:9c:e5:0e:7a:7f:
95:c7:e5:a8:11:05:d1:99:94:b1:62:06:e3:b1:66:
66:1b:ae:08:a8:d0:a6:61:fa:9a:f1:40:15:dd:fe:
22:b1:e4:5e:af:c2:93:d0:02:e0:2a:67:7a:70:07:
29:9c:30:e8:80:9c:b0:81:eb:7e:16:a3:4f:ad:db:
e5:64:c2:1b:ee:83:ab:e0:f5:b1:93:e4:86:31:05:
2b:54:79:bd:db:e1:18:6a:91:4d:f5:c2:6c:56:8a:
41:6a:6d:07:22:07:40:2b:81:8e:50:55:a4:8a:59:
98:41:1e:99:e7:f7:71:de:ae:9f:b7:b7:20:08:4e:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:ED:0C:D1:D8:B3:22:88:C2:12:15:C1:02:8F:06:E3:28:22:1D:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/258f90c5-aeeb-3616-b58d-9af6e3ef80e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.167.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:a8:56:38:78:49:21:5e:15:8c:f9:30:ac:08:cd:21:c3:31:
cf:dd:5f:d5:61:a7:75:2f:04:aa:d7:fb:47:4b:59:69:41:80:
ee:6b:e9:0b:7f:89:78:e2:fc:c5:1e:72:2b:e8:2f:2c:62:10:
23:9f:24:69:0a:5d:b3:d6:ef:5e:0d:41:67:7a:80:e4:17:97:
9d:4e:a8:ff:ec:d6:bd:76:2f:0e:a0:64:3b:62:63:99:6a:3d:
f3:e7:e9:95:d6:8a:92:78:d9:06:01:95:fe:01:21:e0:cd:1f:
ea:e5:a9:94:5b:3c:56:71:cd:de:96:36:ec:c3:1f:ac:e4:0b:
79:a2:6c:91:e4:d1:89:1c:25:3a:6e:7d:43:24:4e:00:fe:4f:
9f:89:b9:53:6f:2e:bb:9a:42:1b:5e:e7:55:f1:d0:74:59:59:
65:e7:be:65:20:92:e9:dd:fd:7b:0a:b8:ae:1b:d8:19:2a:6e:
fa:0a:62:ea:b0:9a:ee:99:a5:e8:b7:fd:c2:21:cc:ee:8e:73:
97:cd:a7:05:a3:39:02:78:38:a4:f7:a2:6f:d1:6c:06:5f:3e:
64:b4:31:34:dd:08:e1:dc:7f:b9:0b:d9:27:6e:99:eb:0b:27:
2d:bf:07:72:7c:89:76:b5:da:b5:93:10:d1:f0:11:3e:d5:ca:
bf:e7:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:18:19 2025 by rpki-client