Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/91e9b7f7-eb58-36f5-bd34-bce86242a293.roa
File: 91e9b7f7-eb58-36f5-bd34-bce86242a293.roa (raw, json)
Hash identifier: gOfQJt2iyHCXJMGD6kFlSXdDU7FSAqu6A6jhGJcnaOQ=
Subject key identifier: 3C:D3:8B:DB:36:D4:74:CF:B6:6D:3A:B2:27:10:A3:78:3E:D5:46:C6
Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial: 010D0C9F4328576D51CC73C042CFC171403492A0
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/91e9b7f7-eb58-36f5-bd34-bce86242a293.roa
Signing time: Fri 03 Apr 2020 13:21:59 +0000
ROA not before: Thu 02 Apr 2020 04:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 11377
IP address blocks: 149.72.4.0/22 maxlen: 22
167.89.114.0/23 maxlen: 23
167.89.119.0/24 maxlen: 24
168.245.80.0/22 maxlen: 22
149.72.7.0/24 maxlen: 24
149.72.11.0/24 maxlen: 24
149.72.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:40:34:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Validity
Not Before: Apr 2 04:00:00 2020 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=918a0735-9069-4520-b3cd-d843a3675b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:38:8c:a0:5c:bf:df:79:d8:c5:fd:7f:64:
6c:94:07:27:66:be:2f:6d:c1:ad:fc:46:cf:de:12:
16:47:95:89:89:04:29:f7:df:f1:53:0e:98:b9:50:
83:9b:eb:e9:74:e0:88:9c:26:f9:79:e1:57:8b:bc:
2a:52:55:d4:7a:2c:c0:63:63:e7:5d:a3:4f:a4:d8:
29:a3:83:a3:41:de:81:a0:64:7c:9a:ab:19:c2:06:
ae:90:5f:f2:e0:05:98:fb:70:fb:5d:4a:e1:f0:af:
0d:b7:6e:ea:2c:69:9a:14:92:ac:5c:8a:9d:94:59:
bc:77:89:ed:cd:58:e1:a9:09:73:06:5f:e8:18:8b:
e2:bd:66:ba:05:b2:f7:4e:77:34:fd:5f:e3:ab:89:
e5:44:59:70:ac:cc:ef:35:a3:97:59:4e:46:8e:5f:
c6:ac:59:b4:36:6c:fe:43:ab:26:04:1d:fb:aa:7b:
ff:fd:4c:00:ec:58:15:13:9b:71:6b:8d:17:b0:d4:
85:4e:26:57:37:64:4d:4f:a7:2f:71:4d:22:97:be:
29:4a:56:5a:ee:90:91:e9:f8:59:0a:d7:9b:58:78:
a7:36:c1:44:6d:9b:e4:ac:b3:fe:f5:dc:20:b6:c4:
43:40:d2:32:19:1a:3b:79:0b:56:87:6e:94:5d:d8:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D3:8B:DB:36:D4:74:CF:B6:6D:3A:B2:27:10:A3:78:3E:D5:46:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/91e9b7f7-eb58-36f5-bd34-bce86242a293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
X509v3 Authority Key Identifier:
keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.72.4.0/22
149.72.11.0/24
149.72.15.0/24
167.89.114.0/23
167.89.119.0/24
168.245.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:95:5a:6e:05:33:f6:45:9a:f6:51:ec:46:cd:09:db:e7:09:
5d:5e:c6:a2:e4:53:5d:3b:97:62:c8:9a:a4:1c:22:42:10:88:
96:5f:28:ec:e0:ad:ed:38:08:77:79:9d:df:52:8c:d7:36:1b:
90:55:ec:6d:4a:aa:92:04:a2:3c:8f:ee:6a:d6:40:37:04:9b:
58:87:1d:78:96:27:05:7c:0e:cd:3e:fc:3a:36:91:29:48:d0:
1f:98:24:69:c8:92:72:cb:e8:34:17:0b:c6:36:e6:58:04:96:
09:0a:14:f3:64:d1:15:d0:ad:5a:78:49:2e:40:e6:20:f8:53:
bd:b8:ee:1e:5a:e3:91:bc:7b:24:3a:27:cd:1a:b9:82:27:e2:
a7:d3:40:46:73:b6:25:38:6f:01:3b:29:12:44:41:11:65:6f:
db:96:3c:1e:54:7f:89:59:eb:65:4f:84:2f:0c:cd:55:91:b3:
b8:b3:57:30:d8:5f:01:13:1e:1c:c2:26:c9:93:c3:80:dc:f2:
af:7c:e5:b0:d4:4d:52:14:5e:8b:ea:00:c6:34:8f:c6:d5:73:
56:fe:b0:88:d5:3f:4a:52:1d:d2:c0:6a:c3:96:77:1d:b4:25:
1b:bf:70:32:64:48:3f:f9:db:a1:cb:cf:56:c1:e3:12:cd:a9:
85:bf:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:07:29 2025 by rpki-client