Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d72c53b0-9742-3f41-8a6a-ab89292176d7.roa
File: d72c53b0-9742-3f41-8a6a-ab89292176d7.roa (raw, json)
Hash identifier: yiVsd5IHKxRd1fJDl4pDqA5BZsepOE2A9+YQyLWZdsQ=
Subject key identifier: 0F:AF:D9:9B:8F:AA:AA:BB:67:88:93:6A:BD:96:E7:F1:99:44:3E:9B
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837E4E19CD1F14CFE2F54C5F7C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d72c53b0-9742-3f41-8a6a-ab89292176d7.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 12 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 209.115.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:e4:e1:9c:d1:f1:4c:fe:2f:54:c5:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 12 05:00:00 2023 GMT
Subject: CN=acd0cae9-18ab-4116-83e9-c0e0acb2d7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:a3:bd:ef:44:5f:2a:8a:5f:b2:16:1e:cb:
3a:ad:35:5c:74:9b:9f:0d:74:dd:70:fc:0b:60:19:
65:dd:01:1f:9b:43:85:7f:de:04:3e:38:78:f4:88:
dd:b9:4d:f3:9c:a6:8a:a0:aa:3f:c8:6d:15:46:4d:
b0:c2:ce:12:1d:bb:64:8a:94:45:51:d1:b6:66:25:
0c:2c:1c:70:d2:f9:74:a4:74:98:08:7e:df:b0:76:
3f:8d:56:cb:bb:f8:13:25:74:5c:bc:3b:5e:ac:21:
e9:4a:dd:95:51:6d:18:dd:84:0c:9e:f0:ba:03:b1:
3f:95:5c:fa:8e:e4:75:36:c1:de:4d:27:62:04:6d:
f9:0a:ef:c6:2b:00:eb:ea:3f:0f:fb:54:ff:2e:cc:
71:57:c5:a4:c7:91:aa:ad:de:84:c1:27:f5:14:5d:
28:e3:bd:f3:88:2e:f3:2a:ea:2d:61:59:ce:c9:f2:
a1:7f:74:1a:7a:5d:25:cc:b7:dd:e0:1e:c8:15:db:
22:c7:d9:31:97:fd:17:5b:09:ab:41:04:17:d9:c6:
f9:ed:90:44:ff:6c:eb:42:73:1a:08:1f:0f:ba:88:
f1:ef:4f:e5:64:20:d4:f5:7d:ca:59:0a:3c:26:e4:
1c:cf:ce:9b:17:38:5b:a4:c7:f1:31:e9:6e:a4:e1:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AF:D9:9B:8F:AA:AA:BB:67:88:93:6A:BD:96:E7:F1:99:44:3E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d72c53b0-9742-3f41-8a6a-ab89292176d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.115.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:82:8c:e5:c5:90:bd:22:51:6f:4d:f1:1e:3a:86:4d:a6:b1:
42:a8:8d:0f:db:c4:c6:1b:ef:a1:ff:90:1c:52:e9:ff:be:04:
84:cc:0d:10:8e:f6:5d:a2:62:43:35:d4:d5:14:b2:5f:31:1b:
7e:d7:bf:c1:65:52:0c:22:49:57:47:09:5c:fa:f3:43:96:db:
9c:29:5e:2b:af:26:dd:5b:8e:32:89:ad:80:c6:7d:e2:7f:a0:
bb:b1:f2:48:f1:51:5a:14:82:0c:61:dc:d6:3a:b9:44:f5:72:
75:06:49:98:be:62:07:c8:92:48:90:46:6e:8d:93:79:0b:9e:
7b:df:b4:33:c9:79:ac:2a:0c:ad:4a:b1:e8:a5:ab:33:c7:ef:
d9:01:c2:88:ed:cb:cb:60:21:9e:c9:e7:b5:66:c3:9b:24:87:
38:bc:75:92:9f:9b:6c:96:26:2e:90:f5:ad:7d:a0:30:d1:7c:
85:6f:c4:d8:d9:59:0f:3d:87:20:94:c2:13:1f:ec:06:96:b7:
91:69:35:13:c7:15:ae:28:cd:75:f6:4b:5b:a9:9b:bc:59:e0:
d0:f5:c4:e5:38:cd:5f:15:23:6a:1d:26:4c:e8:a7:59:90:f2:
77:db:ca:b5:37:e7:e8:68:b5:85:fb:ed:16:ff:02:58:b6:e8:
b5:b6:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:28 2025 by rpki-client