Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/d38817b9-49f4-39ff-a95c-255202b56422.roa
File: d38817b9-49f4-39ff-a95c-255202b56422.roa (raw, json)
Hash identifier: AP1M/g/BX/blpUQb863UpS2WHT/0RZ4NAt9QhWSPYIs=
Subject key identifier: 89:42:B4:2C:9A:0D:87:AD:5F:35:B8:9A:46:E5:26:EB:91:D0:80:27
Certificate issuer: /CN=4cf61af5-37b2-4fa5-a702-19a29bc38904
Certificate serial: 010D0C9F4328576D51CC73C042CFC1705F3934E9
Authority key identifier: C2:93:DB:5A:3C:9C:45:CE:29:9C:C9:08:2C:DD:60:34:01:4C:58:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/d38817b9-49f4-39ff-a95c-255202b56422.roa
Signing time: Wed 19 Feb 2020 20:52:29 +0000
ROA not before: Tue 18 Feb 2020 05:00:00 +0000
ROA not after: Tue 24 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 67.20.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:5f:39:34:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf61af5-37b2-4fa5-a702-19a29bc38904
Validity
Not Before: Feb 18 05:00:00 2020 GMT
Not After : May 24 04:00:00 2022 GMT
Subject: CN=e37016f7-2034-4f43-b744-8521ca0fc121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b8:30:a2:80:36:ae:8c:e2:63:6a:34:28:78:
88:3a:b0:43:f7:58:9c:59:a3:57:e2:cb:92:59:79:
29:51:52:a8:14:36:96:39:72:a5:21:56:b9:95:00:
01:49:2b:07:d7:89:24:03:db:64:43:f0:9d:36:f9:
e8:01:b1:e0:57:1e:70:94:32:55:10:23:96:83:92:
74:94:83:bb:06:5c:a9:eb:62:b0:ef:04:91:4e:ab:
26:a2:a5:1b:c1:61:b1:d8:48:71:27:83:99:94:dd:
1e:a5:9e:be:e7:03:02:10:d4:c2:c5:c2:75:4d:fd:
68:1a:43:82:30:33:88:c1:6c:67:dd:c3:e8:b9:d0:
5c:39:6f:52:56:67:37:32:7c:69:48:fe:b7:8c:3f:
a6:aa:cc:6c:af:ec:54:be:6c:53:36:e8:c8:b7:e2:
42:87:39:cc:9a:03:c2:cc:ad:78:21:2d:17:e0:76:
d1:5c:c1:4f:9c:f5:f0:2f:86:8e:85:77:50:01:72:
e2:53:bf:4e:79:e8:d6:12:49:e3:d1:48:c8:9f:0a:
48:cb:0e:08:42:14:d2:c8:e2:99:ea:34:a6:fa:0a:
3f:59:34:08:22:9b:49:72:51:bc:54:68:aa:d6:7f:
38:5e:76:99:a2:35:f4:32:81:91:93:d6:d1:df:c0:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:42:B4:2C:9A:0D:87:AD:5F:35:B8:9A:46:E5:26:EB:91:D0:80:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/d38817b9-49f4-39ff-a95c-255202b56422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/4cf61af5-37b2-4fa5-a702-19a29bc38904.crl
X509v3 Authority Key Identifier:
keyid:C2:93:DB:5A:3C:9C:45:CE:29:9C:C9:08:2C:DD:60:34:01:4C:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904.cer
sbgp-ipAddrBlock: critical
IPv4:
67.20.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d1:be:a9:67:03:f1:01:98:7e:8e:5e:f3:df:1d:9f:b3:7a:
88:7b:6d:41:2d:91:84:de:87:4c:ca:95:bd:b3:ec:4a:8a:1a:
41:c4:49:3b:78:15:b2:53:e1:1c:c7:fc:75:a1:40:12:ad:4a:
0a:1b:77:34:89:6b:0f:02:70:7f:15:21:4d:76:28:f1:1d:a8:
e0:6f:d4:8c:76:c0:8b:86:19:25:a5:32:0c:fa:8e:30:31:6d:
18:55:da:59:df:fd:b9:db:13:0d:53:33:16:cf:cb:0d:93:f1:
f9:5d:a0:c0:ae:01:99:ff:c4:73:d3:a6:72:eb:f9:68:43:f0:
04:68:f4:43:34:b2:cf:18:2c:2f:a0:41:d5:4f:26:d9:bf:53:
1d:4f:fd:9c:a9:ed:61:80:76:15:d2:c1:6e:34:96:95:59:91:
0f:4c:ab:02:fd:a6:2b:7c:bd:79:d1:55:4d:68:3d:29:73:c6:
7b:d0:d0:1b:0e:61:3a:15:f0:49:78:95:6c:37:2b:e8:4f:8c:
f5:c8:01:29:78:8c:c3:d2:c4:89:81:29:c9:08:dc:e8:bb:17:
62:04:f2:9a:9d:a0:89:58:5d:8a:7c:41:6d:f3:fa:b3:1f:5d:
46:c9:d1:9f:e7:c7:3e:42:ae:54:58:c4:b3:dd:7e:3e:e9:ef:
a8:ef:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:29 2025 by rpki-client