Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35ad1c9c-77e3-3132-9ad9-2821477e60fa.roa
File: 35ad1c9c-77e3-3132-9ad9-2821477e60fa.roa (raw, json)
Hash identifier: ceuxkl8YZvODfyaOqQLTrk36Y/vN0DSt8EyGMCdpCZg=
Subject key identifier: 2F:CC:3C:B4:D8:BB:3E:CC:A8:6E:0D:CC:30:C3:18:4A:42:4D:5F:1A
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837EA52A4C2F9453AEA2DE13358
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35ad1c9c-77e3-3132-9ad9-2821477e60fa.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 173.181.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:ea:52:a4:c2:f9:45:3a:ea:2d:e1:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=34b16966-7721-4243-9b93-b202245a61dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:76:6f:81:bc:7c:b9:69:ed:05:5a:76:f3:
ab:65:b0:e1:6c:24:ca:88:cd:7e:b3:57:a5:8a:a4:
b0:51:d0:06:3e:a4:b1:3e:f4:96:7b:11:6f:69:75:
69:54:5e:7a:aa:c7:1e:2b:a8:f7:8f:0e:cc:a6:e1:
77:62:48:b6:93:e6:80:59:60:fd:fd:97:f4:a2:5d:
c6:12:03:ee:09:1e:26:69:a0:24:9d:d0:0d:2e:47:
02:5e:de:21:8b:e9:e7:bd:98:80:cf:e1:43:b8:e3:
c6:be:46:f2:e1:bf:57:25:cc:58:f4:5c:1c:c8:36:
55:c3:4e:15:19:92:99:61:f3:7b:1f:7d:26:94:35:
57:97:13:06:1b:d4:69:81:2c:db:15:20:87:10:04:
98:27:f2:c1:e7:38:8f:7b:e8:3b:e5:10:d5:4f:a3:
21:90:35:02:4c:2e:7c:71:a3:1c:b5:bf:69:34:13:
c7:5e:82:f2:d3:a0:4a:e8:ca:99:f7:db:25:9e:19:
93:f9:ee:36:e2:df:3a:90:c7:43:3f:83:d6:64:ca:
2e:81:24:3f:bb:4f:b9:12:06:a0:64:50:8d:bb:69:
03:d9:44:44:6c:a7:27:5d:f2:38:de:4e:11:90:19:
73:59:d8:ca:c2:1a:ae:f7:8b:ff:a8:e5:81:6a:11:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:3C:B4:D8:BB:3E:CC:A8:6E:0D:CC:30:C3:18:4A:42:4D:5F:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35ad1c9c-77e3-3132-9ad9-2821477e60fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
173.181.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:26:72:3f:04:82:ed:b6:62:5c:68:52:c3:04:c3:20:0a:45:
07:2b:51:e0:2f:be:bd:2b:2f:2f:0c:9d:f3:3b:81:b3:f9:b9:
f2:67:2f:aa:98:14:e4:b9:9f:eb:f5:39:0d:8e:f6:6c:bc:af:
c7:7c:a5:47:99:1c:65:61:f2:5e:ee:f9:74:ff:f7:5d:57:03:
bf:c6:f0:d5:1f:ca:5b:76:b7:8e:fe:86:ad:cc:71:bb:22:54:
3c:7a:81:80:20:f6:fa:80:89:1f:96:1d:b7:c7:e0:45:64:5f:
bc:95:39:50:04:93:81:03:26:89:f0:94:38:8f:c0:e2:fd:bc:
23:ff:c1:6a:89:6c:ef:df:04:a5:10:0a:a9:c8:77:87:56:a2:
79:0e:6e:3d:67:d1:70:19:b7:d1:6a:db:52:e8:f4:a7:d1:f6:
04:f3:81:70:ac:e1:6e:6e:85:fb:55:33:b8:85:f9:2b:64:9b:
7d:bf:c6:19:cc:39:1f:d8:a3:db:1b:dd:a1:f7:4f:3c:9b:e2:
46:16:fb:63:4f:9e:88:dd:57:c0:a9:7f:f1:d3:52:ce:60:8c:
ba:04:c0:f0:9d:b0:25:16:8f:9e:40:55:9e:fb:33:32:1d:88:
b0:65:93:5e:7e:c8:d4:42:f3:4c:5c:e9:15:73:ac:a2:12:df:
f4:df:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:44 2025 by rpki-client