Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b0568133-8a20-3759-84d1-b0239e19edd2.roa
File: b0568133-8a20-3759-84d1-b0239e19edd2.roa (raw, json)
Hash identifier: L4jal60iXn+7y3kcTh4AcHPKBh0A16c+dEzuKsKe+Cg=
Subject key identifier: CE:B6:89:05:61:70:14:6A:60:E0:7E:D5:A4:60:FF:96:2C:D8:FF:4B
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328576D51CC73C042CFC170F529714D
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b0568133-8a20-3759-84d1-b0239e19edd2.roa
Signing time: Thu 19 Mar 2020 23:38:18 +0000
ROA not before: Mon 02 Dec 2019 05:00:00 +0000
ROA not after: Wed 22 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 173.199.29.0/24 maxlen: 24
173.199.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f5:29:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Dec 2 05:00:00 2019 GMT
Not After : Jun 22 04:00:00 2022 GMT
Subject: CN=7bf61bd0-5de0-45c7-a2be-7c8981c70cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:58:c2:8b:a6:29:63:81:61:a9:5c:50:52:
ac:56:e3:08:47:34:bf:5e:ae:92:38:9e:3d:ef:79:
69:87:a8:d6:f9:52:28:a5:88:82:87:e6:7b:aa:34:
63:57:45:c7:49:c3:ae:2d:96:4e:ee:e2:85:51:e6:
2c:34:aa:5a:ba:1a:fd:69:b6:b3:65:0c:bd:ce:2b:
70:f5:d2:c4:64:c5:d0:26:f4:26:8b:64:36:de:53:
76:bf:db:9d:7f:68:6c:f8:bf:b8:b9:f7:f8:62:59:
b4:2c:e4:88:aa:da:dc:20:4c:81:3f:76:47:65:85:
8c:0d:8e:d7:05:f4:69:23:67:6c:b0:0a:d1:55:ff:
06:2b:dd:51:82:cf:43:0d:9c:d6:18:7f:af:54:eb:
eb:ac:f2:e3:d4:d8:9a:90:bb:52:34:e7:6f:ec:52:
c1:c0:ca:06:df:a5:fc:79:58:e1:46:3c:05:2c:7c:
b2:ac:0b:f3:4d:3b:77:0d:0d:e0:c0:22:4f:34:84:
9f:7c:0a:5f:ce:33:50:58:78:6e:47:25:80:1b:86:
94:be:31:44:a8:73:4f:78:9a:9e:5d:99:55:2e:80:
4c:67:d1:8f:32:6a:e3:fa:04:00:71:be:7d:7f:1c:
06:24:aa:fc:21:ff:80:46:09:3e:33:c1:4c:1b:40:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:89:05:61:70:14:6A:60:E0:7E:D5:A4:60:FF:96:2C:D8:FF:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b0568133-8a20-3759-84d1-b0239e19edd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
173.199.29.0/24
173.199.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:33:f3:60:df:bc:61:d4:8e:c5:f3:de:8b:03:d5:2c:07:f1:
e6:d4:c7:f9:5e:76:0f:b9:3d:95:d6:43:63:17:5f:60:2c:3f:
49:ee:cf:c8:df:9c:eb:d3:74:b1:f5:a6:e4:ad:08:e1:87:59:
fd:77:bd:f4:50:11:18:c4:e2:7c:b5:9d:b1:5f:d2:ce:be:15:
33:25:23:8d:ae:c4:65:4b:d1:df:27:88:5b:30:35:a2:55:06:
39:24:07:79:53:d7:df:3a:7c:a2:7f:c0:28:ef:c8:1b:b6:31:
6b:21:d6:ca:9d:d9:31:23:0c:2d:d7:86:fd:1f:b2:b4:22:85:
15:73:ac:fe:56:58:7b:e0:3f:64:22:fd:c1:d8:80:ee:aa:1c:
c7:34:74:2a:1a:95:61:87:12:c0:c3:3a:93:a0:33:22:81:d6:
03:d6:b7:41:96:87:1a:21:cb:e0:36:76:16:e2:55:fa:f8:b4:
30:c7:b8:bc:2f:7f:7e:22:36:f6:48:05:2c:b2:87:86:08:7f:
2a:b5:5a:cf:fe:04:59:a4:e6:c2:54:06:32:c2:42:b9:a9:03:
af:d4:e3:76:bc:3a:97:05:d9:ed:cf:be:cb:9f:38:9d:03:4c:
0a:a3:57:9f:e5:18:96:41:6b:3d:d1:50:fd:53:02:cc:20:1e:
41:ac:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:51:49 2025 by rpki-client