Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/96914cd5-9371-3178-8fe4-7ba280b4ff38.roa
File: 96914cd5-9371-3178-8fe4-7ba280b4ff38.roa (raw, json)
Hash identifier: z9aV/IIky1nkfB4UOARizt2O4vMzrX1tLJ+AqmeR+PM=
Subject key identifier: 4C:23:BC:A3:8C:2E:B7:80:CF:28:07:72:CC:85:91:47:A2:56:B4:25
Certificate issuer: /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial: 010D0C9F432858426365D03EF9B0B71569104700
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/96914cd5-9371-3178-8fe4-7ba280b4ff38.roa
Signing time: Fri 30 Jun 2023 05:55:26 +0000
ROA not before: Fri 30 Jun 2023 05:55:26 +0000
ROA not after: Thu 28 Sep 2023 05:55:26 +0000
asID: 398646
IP address blocks: 45.41.214.0/24 maxlen: 24
162.253.214.0/24 maxlen: 24
162.253.215.0/24 maxlen: 24
209.160.97.0/24 maxlen: 24
209.160.99.0/24 maxlen: 24
2602:fe6b:1020::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:63:65:d0:3e:f9:b0:b7:15:69:10:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
Validity
Not Before: Jun 30 05:55:26 2023 GMT
Not After : Sep 28 05:55:26 2023 GMT
Subject: CN=2580d13d-8b6a-48bf-a103-b31878c50e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:fb:56:e4:9e:02:4f:a8:56:d7:15:fd:ed:
2f:00:53:48:71:29:bb:d5:e0:8f:cf:eb:83:35:c9:
fa:3b:e1:05:24:8d:1e:3c:f2:f9:78:45:26:ae:5b:
dd:b7:9f:3b:2e:4f:85:30:8d:0c:68:a6:ca:76:aa:
50:5b:19:0f:a2:c8:88:a5:b3:06:bc:4b:c5:70:af:
08:f0:ab:45:de:65:c7:cc:82:68:4f:da:d2:87:0c:
ca:9f:38:7b:69:17:cc:83:9d:d7:a1:97:b2:4c:c5:
4a:02:4e:42:2b:ff:0d:40:7d:52:ff:36:f0:c0:0d:
88:7b:15:2f:6a:4e:7a:90:bc:62:2f:6c:b9:bb:69:
da:04:e5:69:79:4e:d1:b0:ef:e5:75:01:b3:70:63:
48:72:a5:43:c1:81:ae:a5:39:c6:5a:61:b5:a5:f1:
44:82:da:c4:af:1f:3b:ac:3c:06:43:ae:7a:7f:6c:
9b:4d:b9:8e:65:22:b7:25:3e:48:b6:f6:41:ae:12:
ab:75:1d:a6:ce:22:6a:54:6d:65:d4:30:8d:64:1c:
b4:3d:25:b1:30:33:68:86:4c:5b:3b:98:d5:a4:e5:
db:12:45:4f:44:78:06:e7:25:a0:de:9a:36:06:cb:
8a:c4:44:a9:4a:1e:74:2e:03:f7:58:67:92:d9:f7:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:BC:A3:8C:2E:B7:80:CF:28:07:72:CC:85:91:47:A2:56:B4:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/96914cd5-9371-3178-8fe4-7ba280b4ff38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
X509v3 Authority Key Identifier:
keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.214.0/24
162.253.214.0/23
209.160.97.0/24
209.160.99.0/24
IPv6:
2602:fe6b:1020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:07:60:fa:a7:ca:d0:f0:78:6d:3d:cd:48:ea:44:26:2e:07:
73:f1:4a:6f:21:73:ae:df:ce:cb:50:d3:7a:65:1b:93:ec:f1:
ea:db:cc:5e:97:60:e9:28:74:cf:8a:b3:72:72:76:b8:07:00:
50:94:b3:ad:0b:d1:90:ca:01:78:5f:f1:e0:51:09:9d:d1:f4:
80:03:1d:e1:0a:9a:9b:1a:60:d4:f1:c2:1e:e8:34:12:98:44:
45:bf:8b:4b:fc:15:1b:a1:66:2b:47:ac:10:6f:84:a3:12:7b:
bb:87:ab:db:5e:5f:30:23:da:76:58:f0:df:9e:35:e6:61:81:
71:72:50:41:ff:45:ef:c5:c2:f7:9f:62:9a:b6:41:b3:4d:b2:
57:a4:1c:78:0a:3c:b6:48:29:13:c0:e9:db:c0:75:a4:ab:2e:
d1:74:d4:37:61:15:11:05:c6:4b:b3:08:64:7a:fa:2c:04:ff:
f9:d7:22:8c:17:38:18:da:69:e6:54:76:13:53:53:f9:04:e0:
01:c5:b0:55:5b:43:c1:ba:56:b3:44:7f:ed:8f:11:f0:14:72:
6d:36:a3:41:89:29:64:2d:a7:0c:75:0d:e1:1c:25:73:61:52:
f8:a6:99:8d:40:1f:12:25:16:7f:48:a2:94:78:ee:3b:78:9a:
5f:7e:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:35 2025 by rpki-client