Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f2b737a-eef9-3680-bbef-f6ab831d116a.roa
File: 4f2b737a-eef9-3680-bbef-f6ab831d116a.roa (raw, json)
Hash identifier: RvR4CKWEOOVtY+NTmd9fYX5TneiUuqEeZ6ckCmZKdpc=
Subject key identifier: 4E:3F:9C:1E:D1:0B:61:2A:66:39:66:13:DC:AE:74:75:85:B6:45:FC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2612D3EF90B5E83931E3F40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f2b737a-eef9-3680-bbef-f6ab831d116a.roa
Signing time: Mon 03 Feb 2025 11:09:30 +0000
ROA not before: Mon 03 Feb 2025 11:09:30 +0000
ROA not after: Sun 04 May 2025 10:09:30 +0000
asID: 30036
IP address blocks: 173.26.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:2d:3e:f9:0b:5e:83:93:1e:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:09:30 2025 GMT
Not After : May 4 10:09:30 2025 GMT
Subject: CN=71d91dbb-01cd-4605-a0ec-0d394a12dd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:30:49:44:97:4e:ad:36:0a:52:a7:7a:19:
67:b7:c6:89:42:92:3f:6a:db:be:a7:f6:9f:e4:73:
aa:ea:3d:56:e6:4d:6f:dd:90:b7:88:db:32:c2:bc:
6d:30:dd:2a:aa:04:9f:07:8e:7f:6d:cc:6f:cc:e4:
ca:c9:d9:21:31:07:7e:4d:fa:6e:03:f6:dd:fe:4c:
cc:31:01:17:bb:a7:0a:56:6d:f7:d1:d9:20:fa:55:
f6:fc:9b:d5:51:2d:a6:3f:42:19:0b:8e:bb:a6:2e:
fd:ec:d0:2f:81:ef:2a:92:89:83:d5:5b:34:4d:84:
fc:81:2d:b4:dd:a6:80:cb:ac:a5:9c:e2:5c:76:47:
8b:65:4c:b2:fb:29:95:bb:c9:27:eb:29:e9:d9:52:
fb:22:83:aa:66:a5:4e:d5:e2:ce:c5:84:1f:7c:64:
f0:d2:de:c5:47:9c:6d:e6:bc:9e:49:93:c4:29:68:
cf:4e:96:d2:68:a1:aa:ad:c4:93:ce:4b:f6:94:63:
5d:3e:2e:62:b9:a5:9c:cd:20:df:45:d0:c9:77:a5:
5d:71:19:f6:0b:a2:5c:c0:9b:36:a2:0e:b6:48:87:
23:cc:63:81:a7:12:a9:1d:f5:b5:51:9b:a0:2e:b8:
e7:e9:6e:a3:cf:86:b7:65:6b:56:a9:2c:20:ff:4a:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:9C:1E:D1:0B:61:2A:66:39:66:13:DC:AE:74:75:85:B6:45:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f2b737a-eef9-3680-bbef-f6ab831d116a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.26.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:17:53:63:50:7f:2c:75:4f:77:bc:78:40:1f:21:b2:88:39:
23:f5:42:42:9a:20:99:bc:16:0d:64:1c:48:a6:c9:41:7b:34:
7f:59:df:f4:78:e7:5b:43:1e:74:eb:71:a6:93:c6:11:0b:bb:
18:ee:62:c4:93:d4:3a:80:30:1a:09:e3:74:90:85:31:81:f6:
6e:a7:e5:e8:06:e6:d8:c7:60:96:a9:dc:2c:9e:eb:d4:33:eb:
15:83:05:96:39:4b:cd:cb:84:d1:54:e5:50:6b:c5:65:4a:7f:
43:31:b5:5b:42:b0:4a:f9:0e:79:8c:0c:51:ce:6c:14:80:98:
2c:45:84:6e:84:e2:c6:0c:6f:6e:cb:86:b5:3a:a6:6b:8e:2b:
51:51:17:a5:c3:82:e9:69:54:b2:cb:1a:07:16:0d:c0:63:87:
5c:ee:c7:f9:aa:2b:20:ce:48:61:88:88:16:fb:23:d3:04:bd:
fc:c8:18:0f:72:1a:bb:39:ee:3a:65:0f:03:cc:34:ea:13:c6:
06:b1:0e:87:60:89:bf:54:8d:8b:52:6b:21:8a:02:8d:9b:e7:
f0:67:7c:a5:55:28:bf:0d:8d:08:fa:bf:b5:cc:cb:12:a9:bb:
af:85:65:6d:e4:47:9d:49:58:2c:1d:03:b6:c4:2c:e5:35:76:
c2:01:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:55 2025 by rpki-client