Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/29d9b54c-0ced-3701-b7c1-dd748c1aaf28.roa
File: 29d9b54c-0ced-3701-b7c1-dd748c1aaf28.roa (raw, json)
Hash identifier: W9TaOgstf2oboc8owvyimBC3chHhRY7Y2K84x+4KGJY=
Subject key identifier: CA:EE:64:B3:C0:71:8D:4F:14:23:E5:E3:5E:BC:78:BE:DC:51:6E:28
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848CDC2CECB304208BB15BE1300
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/29d9b54c-0ced-3701-b7c1-dd748c1aaf28.roa
Signing time: Fri 07 Feb 2025 13:00:07 +0000
ROA not before: Fri 07 Feb 2025 13:00:07 +0000
ROA not after: Thu 08 May 2025 12:00:07 +0000
asID: 3356
IP address blocks: 20.133.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:c2:ce:cb:30:42:08:bb:15:be:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 7 13:00:07 2025 GMT
Not After : May 8 12:00:07 2025 GMT
Subject: CN=ad4e247e-5440-4ba0-9e67-64726aa6e96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:2f:77:2c:7e:4e:10:c3:76:b9:c9:58:d8:
5e:39:43:d1:1b:dd:a5:a7:e7:41:cf:3e:cc:35:4c:
6d:ce:4d:26:89:70:01:29:92:84:ad:0d:04:88:3b:
4b:36:d0:ca:f9:19:79:f0:f1:40:07:a4:b1:b6:c3:
cf:3d:40:7d:0b:bf:bd:6d:d7:33:fb:f5:9e:7f:28:
61:b0:7b:e9:81:05:f5:ca:92:ad:ec:ee:42:30:1f:
2e:68:9a:89:e7:75:41:24:95:4a:bd:1b:ad:32:8c:
a9:87:3e:8d:6b:ca:7c:37:9f:a0:9e:31:aa:f0:e8:
d4:84:b4:e6:56:09:2c:82:ea:1b:eb:0f:38:be:36:
dd:01:19:e6:3d:c6:56:8e:a8:cb:f5:e4:3c:f0:2b:
d2:33:e0:98:8f:3c:38:92:01:63:ab:cd:b7:36:90:
c1:80:f7:14:bd:a3:b7:f7:b0:a8:75:a2:24:e6:7f:
16:08:f5:20:6b:7d:cf:7d:aa:a4:67:8f:b6:f6:65:
6b:b1:3e:f7:db:ca:d2:76:4e:e0:86:6a:35:b5:c5:
8f:2a:ab:de:f6:b4:e8:6e:7f:6a:ae:cc:4e:c2:8f:
be:db:f3:91:39:1f:1b:03:b2:46:c8:17:00:53:09:
97:77:18:fa:70:40:9d:89:6a:01:78:31:9b:60:bc:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:64:B3:C0:71:8D:4F:14:23:E5:E3:5E:BC:78:BE:DC:51:6E:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/29d9b54c-0ced-3701-b7c1-dd748c1aaf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:9a:fd:c1:07:98:3d:0f:7b:81:1b:72:be:db:86:6d:97:0c:
07:25:db:1f:a1:49:9b:78:54:d7:31:fa:2d:d6:fc:43:5b:2e:
7e:37:82:7a:7d:0a:b5:e6:62:65:12:08:51:ef:23:c1:0e:b9:
eb:09:ee:78:3c:1a:da:41:59:e2:31:2d:86:85:73:88:79:a1:
cf:20:d4:85:8a:e4:88:31:41:15:e0:54:7e:99:04:15:a8:5e:
c7:70:9f:58:04:4f:2f:43:06:12:87:54:43:97:01:ca:3c:97:
61:78:e4:bf:36:62:cb:4b:23:6e:13:ae:b6:84:49:ca:ab:18:
2f:dc:97:88:b1:2b:b4:9f:98:36:e3:49:64:d5:fc:7e:e5:5f:
5b:7c:97:f2:81:4d:87:0f:a9:0f:c6:ff:6d:8d:73:77:01:76:
92:d2:3b:26:b0:93:c4:76:86:f5:b0:42:32:d4:b9:3c:cd:87:
63:8c:af:5e:5e:bc:38:ad:9b:c8:8e:08:44:10:04:f9:3c:8f:
4c:76:c3:ef:40:b8:a4:3c:89:7e:78:e8:e5:25:bf:c0:30:9f:
e1:3b:69:d0:39:52:db:78:71:35:23:bc:52:74:8d:34:f0:58:
a6:98:71:47:66:40:e5:9e:d4:20:0d:88:6c:51:5f:3b:c5:54:
eb:59:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:01:40 2025 by rpki-client