![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/6a871036-5cb4-3649-9eb2-1bbafb2537e0.roa
File: 6a871036-5cb4-3649-9eb2-1bbafb2537e0.roa (raw, json)
Hash identifier: V1Z2bZBX02JOVDMy1ANvFa0NEZOwSeJrq8Ha8FXP7FE=
Subject key identifier: A4:83:D3:1F:7B:4F:2A:9D:81:D0:DA:90:5E:7D:9D:B8:03:B4:E5:21
Certificate issuer: /CN=d28e4965-df1a-4ee0-91f8-24c72779af73
Certificate serial: 010D0C9F4328576D51CC73C042CFC170F322E62F
Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/6a871036-5cb4-3649-9eb2-1bbafb2537e0.roa
Signing time: Thu 19 Mar 2020 14:11:55 +0000
ROA not before: Wed 18 Mar 2020 04:00:00 +0000
ROA not after: Wed 22 Jun 2022 04:00:00 +0000
asID: 21709
IP address blocks: 173.225.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f3:22:e6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73
Validity
Not Before: Mar 18 04:00:00 2020 GMT
Not After : Jun 22 04:00:00 2022 GMT
Subject: CN=af4b981e-0ef7-4390-b92e-7df0f8f4e48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:dd:f7:40:0e:92:9e:50:da:2c:92:8f:87:
59:28:fe:fc:e3:bc:e8:aa:87:26:b6:d1:5c:cb:16:
9a:82:41:dc:f1:81:0d:5b:ef:09:93:29:1f:0c:57:
e7:dc:30:b3:84:e5:e6:e5:89:d8:b4:b6:a2:97:6f:
1d:50:c1:2c:9d:66:1a:8e:3d:ec:24:e5:c4:47:bb:
44:78:50:23:b3:1a:a3:c2:5a:34:c4:a3:eb:f6:32:
cd:43:04:23:d8:5d:c9:27:7a:4e:bf:8f:97:c1:cc:
f5:be:ca:69:61:f5:6b:a4:3a:97:3f:63:52:43:6c:
ab:b7:7f:ff:8f:71:24:42:46:dd:1c:68:5b:c9:4d:
31:30:4d:f1:91:8c:a1:95:19:a4:00:7c:f8:96:ad:
f4:2f:0d:64:ed:61:db:ce:ca:85:29:bd:0a:a9:5b:
bc:72:86:52:a3:50:24:65:09:c8:27:90:dd:0e:78:
86:25:38:6c:90:41:ef:2b:63:90:c8:d4:76:f3:d7:
63:2c:fe:b1:b9:eb:96:29:eb:61:4c:b1:cc:bc:29:
21:3c:eb:20:97:70:46:f0:e7:b2:65:59:ec:7a:fb:
9b:53:5a:f6:e8:d8:6b:70:df:4f:ae:94:8c:09:3c:
ab:bf:fc:67:21:4f:03:05:7c:74:7e:da:e3:c2:04:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:83:D3:1F:7B:4F:2A:9D:81:D0:DA:90:5E:7D:9D:B8:03:B4:E5:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/6a871036-5cb4-3649-9eb2-1bbafb2537e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl
X509v3 Authority Key Identifier:
keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
sbgp-ipAddrBlock: critical
IPv4:
173.225.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:92:d6:d9:85:d9:ee:56:ac:35:82:18:c0:2f:b1:f7:de:52:
c3:f1:ea:90:33:4a:6d:c3:df:9a:62:c9:16:e9:4a:3c:65:56:
b0:48:55:a8:3c:f9:96:90:20:31:6d:0d:97:59:77:4a:2a:b5:
e1:d0:b4:5f:f9:50:99:3a:b2:08:bd:f9:18:93:b5:1b:d1:70:
b0:f6:9e:46:03:69:76:d1:da:1e:14:4c:90:32:cd:2d:46:6a:
25:b5:66:fa:58:03:cf:33:07:fb:a3:1c:4f:96:5a:95:3c:fa:
5d:e4:27:5e:ff:79:ca:9c:fd:27:30:5d:87:0f:26:ac:26:7f:
11:7e:c8:7e:f9:20:26:31:d5:4d:d0:3c:7d:cc:fe:f8:13:ae:
14:19:66:f3:6e:fc:1f:7e:1f:88:df:b0:aa:40:07:04:78:4f:
ed:14:fb:26:11:f8:9b:70:ff:59:44:ad:48:70:87:4d:40:23:
68:ab:93:d2:5a:1b:65:74:c8:5b:85:b9:9a:34:51:2d:c0:6c:
af:81:78:42:a6:fb:1d:37:78:d0:04:a6:8f:e9:a4:2f:29:92:
85:f0:cc:b3:75:d7:0b:c3:94:ea:5c:ee:f7:e6:60:08:55:10:
d7:6c:7a:4f:4a:82:98:c7:72:5c:77:96:5a:b8:d2:d9:d5:cc:
58:88:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:20 2025 by rpki-client