Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/32722c45-afca-34bf-861e-77581ef3b161.roa
File: 32722c45-afca-34bf-861e-77581ef3b161.roa (raw, json)
Hash identifier: zMyM9prnpPvf3zr+PxZHH3V8HvnzXAvsFDzFsYaD3Uw=
Subject key identifier: 54:F8:18:F2:1C:EF:6F:0E:A5:18:A9:BD:AB:95:C5:09:7E:F6:53:E3
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837F7DCFDE50FDE4EC9752AEEC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/32722c45-afca-34bf-861e-77581ef3b161.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 172.219.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:f7:dc:fd:e5:0f:de:4e:c9:75:2a:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=7df9e665-b30e-47fe-83e9-31e52f69ac56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:5f:67:72:03:28:7b:b7:6e:00:54:47:74:
6c:8f:c0:b6:4e:1d:60:b9:af:f3:13:e5:43:0f:d5:
4c:39:0c:90:75:21:41:83:72:87:f4:a2:b2:7b:3d:
20:88:4f:80:6c:b2:ed:6c:4b:16:75:40:a2:71:dc:
95:57:3e:4c:9b:d3:9e:da:ba:35:82:f4:5a:f7:a6:
c6:a4:a3:13:72:40:a2:ff:4b:c6:0e:0f:1d:7e:94:
1d:17:11:7a:90:13:43:df:17:8b:e8:4e:62:99:a8:
eb:71:1b:2e:19:e9:6b:36:50:b5:a2:3b:a7:b9:b9:
c3:f8:2f:96:e4:57:93:b8:a6:20:41:1f:43:6c:7c:
cd:eb:c9:80:0b:ee:61:20:51:30:77:e7:3f:bf:1e:
a1:a1:f5:3b:54:aa:4b:1c:03:e4:4b:b1:22:c2:8b:
ce:2a:54:d1:bf:d1:5a:fb:ef:e8:fe:0a:9c:56:7f:
7a:35:ea:b2:dc:e8:4c:7c:a5:f5:bf:c9:4e:36:ec:
5f:c9:80:62:d3:62:76:5d:33:47:c4:3d:d8:19:7e:
a0:08:84:11:d9:1d:50:80:3b:7c:20:be:83:86:c4:
83:7d:df:3f:2a:08:37:45:bd:40:43:56:56:1e:62:
09:dd:b7:2b:a5:c6:e0:3c:ad:bb:a1:b4:33:d2:b2:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:18:F2:1C:EF:6F:0E:A5:18:A9:BD:AB:95:C5:09:7E:F6:53:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/32722c45-afca-34bf-861e-77581ef3b161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
172.219.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:06:9a:5d:6e:cf:23:58:cc:99:e1:45:7e:95:cb:48:39:b5:
96:84:c9:90:31:2d:67:c9:3f:55:e0:13:4e:90:32:00:4f:e5:
0d:57:a0:5b:87:ab:2c:70:f0:fe:77:0e:da:06:66:59:e5:39:
e8:81:46:a0:b9:ce:f4:9b:8b:ea:d7:bd:63:93:f9:0f:b4:e0:
f1:b5:85:15:ee:b5:e5:7d:58:db:cc:01:2c:21:c9:9e:c6:ac:
48:c1:5b:30:51:03:ce:f0:6e:df:4c:f4:fb:0b:16:02:24:76:
68:6f:31:b5:85:f5:c4:f9:80:6d:c2:e8:3c:cc:58:1f:5a:33:
e8:58:bc:0c:8c:7d:f2:a7:7e:c7:5e:66:c2:2a:1e:53:07:45:
e2:ba:95:78:a4:60:a1:68:65:03:72:56:a1:0c:1e:be:3e:e7:
4c:55:18:c9:28:b6:31:97:8a:4f:da:c0:cd:d7:fa:0a:67:79:
67:d5:43:8d:66:a2:5f:f2:a3:aa:c5:d6:01:48:54:14:0a:76:
bb:73:b4:64:8f:35:cd:f6:f1:24:c6:ff:ee:58:c9:48:cb:31:
b6:f7:d9:29:29:b7:ef:38:88:57:47:2d:8e:dc:1f:b2:b1:a1:
43:42:af:5b:ea:44:01:67:01:fd:bf:a0:25:99:f9:31:89:14:
4b:f6:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:26 2025 by rpki-client