Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/3ee2ee19-8baa-34fd-9f94-9825e9622080.roa
File: 3ee2ee19-8baa-34fd-9f94-9825e9622080.roa (raw, json)
Hash identifier: ZeowJNl50o5XpEXI+vFvi8yEf9B1dU9qxWazkPjQ3b4=
Subject key identifier: E5:67:A8:0F:87:64:A9:70:80:D9:34:DA:6D:9E:12:FA:0D:73:55:AA
Certificate issuer: /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial: 010D0C9F4328576D51CC73C042CFC17377ABA2A0
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/3ee2ee19-8baa-34fd-9f94-9825e9622080.roa
Signing time: Wed 22 Jul 2020 17:56:43 +0000
ROA not before: Wed 22 Jul 2020 04:00:00 +0000
ROA not after: Tue 25 Oct 2022 04:00:00 +0000
asID: 55064
IP address blocks: 162.210.128.0/22 maxlen: 24
2620:a0:4000::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:77:ab:a2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Validity
Not Before: Jul 22 04:00:00 2020 GMT
Not After : Oct 25 04:00:00 2022 GMT
Subject: CN=167f81f7-7b99-4873-8d9b-d05e2781ca1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:da:a7:47:e3:6d:65:30:5c:95:9a:8b:2b:
ef:cd:ac:59:4b:c5:ad:a6:60:a1:0e:42:eb:84:27:
52:37:31:8e:9b:33:ec:44:01:a2:44:a1:30:17:84:
6f:68:29:1c:88:33:5c:d3:a3:36:8f:8a:44:65:28:
5d:cb:6d:6e:11:b7:79:64:a3:17:33:0f:4e:a9:39:
6b:9e:1d:2f:22:e0:a3:93:d0:26:31:dd:dd:ff:d4:
a0:d7:41:7a:90:f0:85:50:ca:c3:5b:95:9e:6c:cb:
48:e2:0b:86:8e:8a:54:f6:95:24:d7:b6:56:a3:6e:
e2:37:d0:90:a7:d9:54:ff:4b:cd:81:be:50:7f:73:
6f:c0:20:ce:4d:c1:11:fa:e9:93:6a:10:46:29:a0:
5f:a0:7e:41:10:ad:35:88:1e:ae:89:8f:b7:35:1d:
98:f6:4a:af:32:b8:d6:9a:78:bd:fb:ff:c9:a9:58:
71:43:cc:0b:f6:5e:83:26:eb:bf:97:e0:57:13:c5:
25:a2:cc:10:ff:02:43:b0:20:ea:d6:6c:bc:1a:a4:
cf:2e:dd:ab:15:51:71:53:89:3b:09:09:36:74:13:
6d:96:79:08:92:28:a4:90:d3:a6:10:76:42:6e:a4:
ec:65:72:9f:bb:a1:fe:fd:06:e6:35:9c:32:7f:13:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:A8:0F:87:64:A9:70:80:D9:34:DA:6D:9E:12:FA:0D:73:55:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/3ee2ee19-8baa-34fd-9f94-9825e9622080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
X509v3 Authority Key Identifier:
keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
sbgp-ipAddrBlock: critical
IPv4:
162.210.128.0/22
IPv6:
2620:a0:4000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:ec:7c:13:87:f0:f8:aa:4d:21:7e:16:d3:9f:17:34:de:4b:
99:d9:0e:d1:d0:f8:e0:46:3a:3c:fe:8e:87:c6:84:78:03:85:
81:98:2c:e3:1e:3b:fd:84:23:b1:49:7c:8a:28:5c:f4:52:81:
71:13:30:7f:04:3d:2d:7a:28:56:05:a7:57:ee:69:07:7e:2d:
3d:85:c0:bb:7d:d5:70:9d:8f:4d:10:99:bf:ea:60:ba:1a:a7:
66:44:27:07:84:df:64:1a:92:b7:37:06:ca:bd:c9:13:36:d0:
46:d2:e1:bd:d6:ee:ca:a2:42:d3:d8:ed:fb:db:60:e1:dd:80:
be:28:0c:f6:97:fe:4b:b4:c4:28:19:2c:05:da:29:a9:b0:84:
48:9d:77:6f:86:64:40:91:a8:09:96:a9:85:57:b9:7d:10:69:
ab:68:cb:b4:a7:40:93:b4:dc:dd:17:c0:48:c7:e0:67:e0:7b:
c1:d4:be:51:38:ec:88:82:62:1e:e7:ce:02:6c:2d:1e:28:c4:
63:f8:25:d5:00:43:fd:81:53:d7:c1:ac:75:13:8a:57:f3:6d:
f2:3c:b4:b2:77:e2:5b:4b:f1:b2:1f:99:0e:25:ff:bd:dd:50:
1c:90:95:51:bb:a0:e6:ac:8b:9b:7e:37:bd:62:48:0b:2f:33:
f4:be:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:22:59 2025 by rpki-client