Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/105499d4-5546-3dd7-82a5-a612dd72ad66.roa
File: 105499d4-5546-3dd7-82a5-a612dd72ad66.roa (raw, json)
Hash identifier: ZDZ3oM18gBppDBdJTetA37PWCGjn45PeyO2EarKMHUQ=
Subject key identifier: 42:44:BD:3E:CA:2F:05:D7:BC:A7:88:E7:E9:10:CD:75:B3:7F:05:92
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848CDC6409633951EABD7A72D40
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/105499d4-5546-3dd7-82a5-a612dd72ad66.roa
Signing time: Fri 07 Feb 2025 13:07:03 +0000
ROA not before: Fri 07 Feb 2025 13:07:03 +0000
ROA not after: Thu 08 May 2025 12:07:03 +0000
asID: 202
IP address blocks: 20.133.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:c6:40:96:33:95:1e:ab:d7:a7:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 7 13:07:03 2025 GMT
Not After : May 8 12:07:03 2025 GMT
Subject: CN=4cfa80c3-56a4-4824-ae53-3425947c49f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:e7:68:1e:69:9c:94:4c:c1:72:9f:e3:15:
9f:1f:b8:9c:84:9f:e5:95:c8:04:de:50:f5:43:87:
b6:9f:a3:4d:a0:a9:7b:02:37:35:dc:d2:59:93:dd:
8c:41:6b:4e:3a:2b:a1:a8:f7:42:97:89:2c:64:52:
5b:63:66:a8:11:3b:c8:6d:ed:27:a5:68:c1:11:1a:
87:7c:c4:9f:fd:03:a7:0b:3e:f8:f7:19:ba:9d:49:
85:11:d8:29:e2:85:ad:39:84:4b:4c:0a:90:b3:32:
86:d4:84:05:0a:a9:f2:03:a8:1e:1b:44:98:3d:61:
dc:35:51:3a:55:47:15:42:f0:6a:2a:d3:33:f1:c8:
97:5a:56:8e:af:a9:35:23:33:62:43:5f:18:b4:b2:
61:6e:65:4b:7c:bd:15:9e:67:54:65:40:2e:c4:12:
da:3e:64:47:ac:46:cf:2e:a1:f1:33:e2:d8:1e:26:
9a:ae:89:66:97:6d:25:a9:c5:9b:83:59:76:cc:3f:
79:9e:66:bb:72:3b:42:aa:b8:ba:00:b7:05:73:b8:
7a:8e:1a:8c:3e:6f:07:72:72:26:b7:4e:ef:ea:7c:
9d:e1:8a:b2:2b:56:87:53:e2:1e:55:a4:08:38:29:
c8:7b:ea:fb:6c:25:63:87:97:11:52:05:1a:e2:bf:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:44:BD:3E:CA:2F:05:D7:BC:A7:88:E7:E9:10:CD:75:B3:7F:05:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/105499d4-5546-3dd7-82a5-a612dd72ad66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:e9:0a:f9:b6:31:21:fe:78:93:0b:f7:99:cf:f3:1b:c5:89:
4c:da:ab:77:ef:8f:99:2f:f0:46:15:cf:4e:44:a8:50:29:fa:
6a:a9:6d:7d:d9:97:09:91:ad:85:39:72:3c:1a:f3:b2:bb:5d:
da:20:f5:6e:f0:55:74:52:69:0b:8d:f0:a0:82:7e:a0:25:0e:
39:b1:c3:10:e1:cb:1e:80:79:bc:24:82:75:2e:d7:f2:3e:ac:
6e:4d:b9:bf:01:c6:0e:b9:a4:8a:85:c9:fb:4e:3f:32:41:93:
7a:64:0f:0c:3c:a0:ed:15:e6:ac:73:10:35:39:a2:93:6f:85:
c5:e2:8e:46:51:16:6b:2b:a6:8c:b0:78:36:52:9c:98:74:2f:
65:ef:3e:b9:9e:37:eb:6d:10:1f:2a:43:80:2c:92:2c:49:0c:
d8:af:46:18:f9:38:c3:d8:f2:a5:ac:b6:25:59:ce:45:7b:ac:
93:29:b5:e2:88:c9:54:13:d5:83:6e:15:53:9f:89:64:bc:02:
29:55:82:45:b5:a9:11:38:7f:9c:eb:c1:2d:ae:d4:da:14:3a:
c3:46:4a:f3:f4:d6:33:53:8f:72:7f:50:c6:7f:ff:49:45:4d:
c0:45:d4:62:7f:59:46:06:1c:d4:4f:bc:9b:f5:81:91:62:12:
00:66:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:07:51 2025 by rpki-client