Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ba7a6b1-c367-3444-a02c-da14b516faa5.roa
File: 2ba7a6b1-c367-3444-a02c-da14b516faa5.roa (raw, json)
Hash identifier: i0gzc9XnTP9pUzfs4ZPHWxlKk2R4xbEhLlabyupGSVI=
Subject key identifier: E2:11:E0:EA:89:B5:F7:4E:D6:23:80:31:3D:8C:7C:13:24:10:F4:5D
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848CDC5A4303F3C6BDEF888A4C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ba7a6b1-c367-3444-a02c-da14b516faa5.roa
Signing time: Fri 07 Feb 2025 13:05:49 +0000
ROA not before: Fri 07 Feb 2025 13:05:49 +0000
ROA not after: Thu 08 May 2025 12:05:49 +0000
asID: 22562
IP address blocks: 20.133.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:c5:a4:30:3f:3c:6b:de:f8:88:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 7 13:05:49 2025 GMT
Not After : May 8 12:05:49 2025 GMT
Subject: CN=27d330ae-3bf9-4336-be75-0f2653ee3aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:00:a0:5a:f7:55:f3:70:65:b8:ea:93:9f:
5a:e0:0a:e6:cf:02:01:ad:07:2e:92:e4:c8:27:9c:
f4:26:c7:1f:7a:4b:da:23:f3:11:19:00:b2:53:4c:
da:2a:66:2c:4d:5a:43:15:78:34:fb:41:22:e8:c7:
eb:68:aa:20:b7:62:9d:f7:6f:7b:04:b1:6e:f2:0c:
c8:08:7b:7b:e4:5b:1b:7e:9f:f0:49:d7:cd:65:05:
e0:39:53:1e:1e:c1:73:ab:7a:6b:8b:d5:17:e9:78:
6f:1a:d6:27:0b:b2:01:cc:4e:3a:5e:3a:03:2e:56:
4d:21:18:a1:32:ba:0a:79:12:b7:e6:ad:75:26:71:
52:4b:c6:a6:32:14:c6:fa:ff:95:7f:5b:35:3e:84:
0b:7f:35:49:72:ce:ef:50:9f:02:50:3f:0e:ef:d3:
40:cc:d5:69:35:13:df:23:86:6b:e2:c2:91:d7:9b:
87:ba:92:22:4e:65:05:9b:52:e6:c2:e7:c4:87:a2:
14:f1:a7:4e:c4:09:0f:be:58:07:0e:9b:6e:f0:70:
83:85:0d:88:b1:b1:b2:65:a5:38:f4:83:de:46:a3:
d6:be:b6:6a:90:12:ae:07:0b:e4:7f:53:7f:5a:c5:
b7:7c:dc:c4:cd:29:f3:59:ad:1d:6d:0d:1c:21:e3:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:11:E0:EA:89:B5:F7:4E:D6:23:80:31:3D:8C:7C:13:24:10:F4:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ba7a6b1-c367-3444-a02c-da14b516faa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:63:31:34:da:c0:47:07:26:a9:25:49:73:cd:f1:af:70:4a:
e8:f1:68:da:38:fc:fb:0b:fe:d6:74:55:6c:19:59:c3:6b:7a:
e7:b5:51:bc:02:b0:69:76:63:fd:a4:d4:4f:b2:e9:eb:8c:68:
d1:cb:c1:ba:0c:8b:97:e2:72:99:1c:4e:59:90:61:4d:82:26:
2d:70:9a:ac:53:33:ac:ac:aa:52:a6:10:05:dd:33:ce:71:b3:
c9:19:bd:f8:e9:ec:f3:6b:8b:09:0d:67:d2:b1:8b:88:a2:fe:
83:ef:1e:31:3a:89:f5:a1:90:60:3f:cd:b2:72:8c:b5:90:df:
fd:56:75:f9:e3:f5:d3:6a:3d:f7:60:dd:e1:72:02:56:7e:3a:
b8:c7:a2:91:c1:0c:f4:11:f6:16:57:33:e0:14:6e:31:4e:3a:
d1:d1:4a:b9:b4:d1:6d:d3:f7:08:08:3e:42:85:d4:48:76:1d:
9b:92:8f:95:c5:b7:49:31:a1:fd:3c:5a:1e:09:e1:fa:fc:5b:
11:3f:a3:a0:a2:b8:b3:b2:50:60:41:e8:0d:22:10:8e:49:f3:
ba:a3:f5:25:92:a2:ba:9c:44:af:0c:a0:54:c1:b1:e4:15:42:
30:89:06:fb:82:65:8f:cc:ff:0e:ee:3d:66:7a:bf:4a:b7:1d:
8a:f8:ce:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:53:15 2025 by rpki-client