Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/888955cb-0100-30a3-be9e-61229e79d2e8.roa
File: 888955cb-0100-30a3-be9e-61229e79d2e8.roa (raw, json)
Hash identifier: zUInImX+OCK7k6dbDd8JtnK8Gv6wXRQJPMihhO6xHW8=
Subject key identifier: 32:C0:F9:3D:32:74:50:39:93:22:34:00:DF:A5:DF:DA:3B:72:82:3B
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328583AA7AFE61FAFD6D5F0C4F5E2A0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/888955cb-0100-30a3-be9e-61229e79d2e8.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.110.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:af:e6:1f:af:d6:d5:f0:c4:f5:e2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a11a2b9e-0a1d-4385-bfe7-d2e0ae2ff0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:5e:34:0a:f4:fc:f2:cd:19:b5:14:28:3d:
2a:c3:ee:e2:35:27:91:f7:cb:50:75:4f:e5:e5:3d:
5d:a9:0b:e6:77:04:68:bb:54:f5:a6:88:cc:86:a5:
00:1f:59:60:39:1c:ef:02:b5:cc:b1:25:cf:d0:57:
9d:49:13:7c:11:89:ef:5a:ee:70:f8:66:b5:98:01:
af:fa:d3:b0:44:0c:e7:06:78:22:6b:5e:76:d4:0c:
5a:89:ab:80:9c:39:ca:0a:5e:60:06:95:0d:8a:fc:
7a:b1:3a:a6:67:95:00:47:b2:7e:f9:bd:03:91:49:
df:8d:3e:3e:bd:f3:95:d4:f1:82:75:87:6b:42:4a:
31:88:17:a4:05:b5:ea:41:ee:dd:79:f7:f8:bf:19:
f6:82:cb:b0:79:fd:d2:0c:be:ff:c5:f7:15:8d:43:
f7:0d:b2:e0:6f:ea:09:60:21:57:40:15:9e:37:00:
22:da:f7:a6:10:0f:46:33:88:b7:9c:ae:1c:05:22:
fb:9c:f3:1b:03:c3:89:2e:62:b5:f1:a1:20:e8:36:
60:82:13:3f:15:a3:e1:a6:5a:78:b4:62:b3:14:3b:
aa:a0:c5:b0:03:7b:5e:c3:22:3a:59:51:65:48:79:
06:21:22:ef:c9:25:dd:39:4f:5e:c4:e1:39:95:76:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:F9:3D:32:74:50:39:93:22:34:00:DF:A5:DF:DA:3B:72:82:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/888955cb-0100-30a3-be9e-61229e79d2e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
172.110.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:e7:1e:0b:8f:f1:02:14:16:f5:59:46:65:14:93:d3:f5:dd:
e0:29:36:cd:5b:48:69:54:06:aa:f4:f4:60:eb:28:b3:d8:72:
52:b2:6c:be:79:2a:04:c9:fe:a2:45:16:05:eb:6c:64:8b:ca:
df:07:82:58:0e:f0:19:d6:24:26:da:ac:b6:80:aa:74:b1:8f:
2c:60:2c:13:8f:e3:00:d3:6e:4a:c1:85:03:78:ef:de:60:dc:
4a:91:ce:a7:ec:6e:e4:9e:16:44:ce:4d:4b:8b:8c:b4:cb:2a:
77:df:6c:a2:9c:9b:b2:20:dd:bb:90:4a:2f:49:86:30:0e:e3:
99:a1:2e:14:73:0e:2c:b2:70:02:39:76:88:1f:79:ed:2a:c5:
0e:54:88:81:01:22:b0:33:67:38:b7:5c:ee:d8:4e:06:2f:6a:
41:94:2b:a2:72:cf:8f:18:96:8e:ac:f4:6e:30:22:e3:06:ee:
57:b1:52:9a:a6:6f:5f:a3:95:f4:ac:40:ed:05:15:fe:e1:dd:
58:60:96:03:9a:16:2d:9b:3b:bb:91:5e:a2:b5:4d:0a:e7:57:
d3:a0:96:9d:f2:54:69:95:f9:65:f7:73:61:7e:e1:e1:fc:a2:
3e:2b:b8:8e:31:97:3d:ce:8d:17:6f:f8:f3:1b:63:78:3e:e3:
06:b3:91:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:14 2025 by rpki-client