Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f13529fa-8eb3-3795-82a2-3ed9856bc0db.roa
File: f13529fa-8eb3-3795-82a2-3ed9856bc0db.roa (raw, json)
Hash identifier: BSZcE1C04+BKzkF0J6IJdVYHBeygGIpKhxGXr3d3iaU=
Subject key identifier: 2E:70:32:71:D9:00:04:FD:AE:DF:34:9E:CA:59:7E:AB:5C:D9:C6:4D
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837D7058552A6C393FD84A63E76
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f13529fa-8eb3-3795-82a2-3ed9856bc0db.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 208.181.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:d7:05:85:52:a6:c3:93:fd:84:a6:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=30eb477f-27c8-4e5a-b5d4-9e9255c6631a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:76:e9:14:82:62:da:b6:72:09:61:c0:62:
a4:13:00:80:cb:64:ce:ee:2c:a6:50:20:93:a1:50:
94:4a:6a:4f:4a:cf:88:3f:ea:f0:ee:7c:b9:17:dd:
71:26:10:0b:82:52:ee:eb:ab:8c:c0:26:b9:38:e5:
47:cf:18:24:fd:4f:df:6d:11:e8:05:98:ea:a1:bf:
d7:32:94:51:4c:0b:17:34:c6:a2:e3:33:67:4c:cf:
b9:92:a7:d3:2c:03:27:dc:c1:fa:a7:40:ff:f5:11:
50:73:29:0e:9e:ef:ac:8a:a0:8e:2f:4b:45:7b:0b:
bb:a7:de:bd:dc:2b:ef:57:26:5d:69:5c:16:6d:4d:
6e:1c:06:0f:b0:8e:74:42:d6:1d:d1:cc:e6:8f:00:
82:54:03:2b:7a:82:93:0e:25:b4:80:02:73:c3:7f:
65:6f:28:08:fb:6a:a3:ae:bb:a5:51:40:bb:ac:c5:
c2:89:3d:bb:57:f8:26:2d:94:06:14:6f:45:60:fd:
cc:b5:c4:a7:66:43:ef:8b:9a:ea:9c:f6:0f:53:16:
4b:99:da:4f:ab:7b:32:89:19:47:49:16:a2:a8:fa:
9d:34:ab:96:76:82:fd:5e:3b:62:8f:d1:10:66:af:
54:1e:1b:4d:71:8b:9e:a3:4a:79:8c:e3:7d:11:9e:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:70:32:71:D9:00:04:FD:AE:DF:34:9E:CA:59:7E:AB:5C:D9:C6:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f13529fa-8eb3-3795-82a2-3ed9856bc0db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.181.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:03:28:8f:e4:b4:69:9e:52:a1:77:d3:6a:78:ba:7a:aa:8d:
a5:f5:0b:06:73:2a:75:15:ca:ad:3e:ba:7a:f1:5b:8e:f3:cb:
53:ed:9a:25:95:a7:44:5a:54:c6:c9:84:34:76:55:60:4c:b3:
74:f6:f6:7a:3c:55:13:5f:cd:08:93:86:9d:c8:87:6c:3d:38:
22:02:de:86:1c:97:c4:ef:c6:7e:41:d6:4f:e5:3a:32:12:f5:
cf:71:fc:bb:c7:29:9b:45:f7:02:93:08:41:c5:98:e3:c2:64:
28:4e:f7:b0:3b:96:35:1f:ec:f0:d4:ce:85:95:cb:85:f2:fe:
7f:cf:92:80:cf:81:86:90:14:12:45:82:f4:8c:9b:b0:dc:ef:
8b:0c:d0:0d:77:45:58:ca:0a:85:0a:1b:ad:5a:e7:23:77:4f:
7e:ba:a6:66:ad:4a:9c:a8:08:9d:ff:76:c1:71:8b:b6:fd:03:
81:b2:a2:ce:1c:d3:35:c6:af:6a:84:75:b6:5c:11:61:ff:8d:
fe:5a:b4:3a:05:ba:fe:86:67:d4:16:2a:f1:b9:85:90:69:1e:
90:dc:b4:17:21:11:43:a3:4d:63:e1:b6:54:5c:19:c4:eb:e9:
a6:a9:80:b5:7c:4a:36:4b:4d:9e:eb:75:ca:2a:57:c0:ed:2d:
12:b7:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:11 2025 by rpki-client