Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/41f9fbd7-175f-3938-ae89-fabee53ec46d.roa
File: 41f9fbd7-175f-3938-ae89-fabee53ec46d.roa (raw, json)
Hash identifier: krTEMlbaqCBU8KFHiy8LftkHrHKPVl/LvOCws2wJFpc=
Subject key identifier: 95:EA:16:9E:68:B3:B4:2D:C3:60:5F:6B:16:F4:65:14:55:73:F2:3E
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848CDC67625037C89975F63C8E0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/41f9fbd7-175f-3938-ae89-fabee53ec46d.roa
Signing time: Fri 07 Feb 2025 13:07:28 +0000
ROA not before: Fri 07 Feb 2025 13:07:28 +0000
ROA not after: Thu 08 May 2025 12:07:28 +0000
asID: 203
IP address blocks: 20.133.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:c6:76:25:03:7c:89:97:5f:63:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 7 13:07:28 2025 GMT
Not After : May 8 12:07:28 2025 GMT
Subject: CN=a37f2eff-12d0-47a4-8cb8-953cdfaaba12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:41:bb:40:ec:1c:02:5a:ae:3a:59:18:56:
ca:98:4d:b9:fc:3a:71:73:04:4e:a0:01:60:85:a3:
de:35:29:0d:f1:8e:e7:0c:4f:36:4f:a9:d0:93:d4:
9e:35:6c:dd:b6:ba:8c:75:36:0a:f3:64:7e:97:ab:
84:a8:d6:15:00:93:69:35:80:64:4f:69:c3:08:66:
43:87:a4:17:0b:02:bb:e5:eb:97:6a:c9:64:8e:ca:
d8:4d:3b:29:cc:85:73:29:59:df:f1:49:f9:c5:09:
8d:c6:5e:bc:46:8c:76:e5:33:93:b5:47:de:11:e9:
d8:33:3d:ec:0b:a0:44:71:c4:7c:3e:67:2a:b0:64:
49:49:f3:d8:24:b2:b8:9b:5b:a4:bf:1b:54:6a:cf:
e9:3e:6f:02:84:6d:87:a4:79:2b:64:f3:55:d7:ea:
2d:a9:7b:9a:3c:81:4a:c0:8c:70:e4:87:0a:61:fb:
fa:67:12:5d:72:80:2a:ea:ee:1a:51:e5:13:32:d2:
7c:62:15:90:45:f4:1a:29:3d:52:4a:d6:73:6d:35:
dc:1b:a4:ba:27:da:70:7a:f6:85:af:f8:16:e8:a9:
98:dc:94:12:5d:70:5f:52:15:d8:3a:5e:55:f1:77:
d9:09:20:e8:50:01:72:83:e8:72:44:6f:47:ce:28:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:16:9E:68:B3:B4:2D:C3:60:5F:6B:16:F4:65:14:55:73:F2:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/41f9fbd7-175f-3938-ae89-fabee53ec46d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:7e:d6:d5:77:f9:8f:6f:1b:8d:61:51:40:aa:d6:9b:c2:73:
28:f9:e3:e7:e5:f0:2e:e4:37:13:80:04:b1:99:f8:10:bc:35:
22:ea:ac:9b:84:0e:05:34:aa:a6:40:07:82:f6:58:f6:c3:9e:
6f:fe:ba:07:ea:cd:96:de:2d:10:ce:6b:86:56:03:82:d1:b5:
f0:81:42:71:97:35:12:b2:2a:f2:63:69:a8:01:9f:53:7c:ad:
fa:ac:e8:e9:ba:3b:4b:3e:be:0f:c5:bd:4e:03:ac:01:57:0e:
1b:f7:d0:58:3c:f0:ac:97:46:d1:e0:4c:ae:de:bd:8e:f4:f3:
53:6c:59:3a:a2:99:22:49:2e:5b:31:9e:14:a4:05:65:0a:dd:
a5:ff:15:b0:6d:3d:b4:d2:00:63:57:01:1d:f6:e4:66:15:2f:
8c:d7:7f:28:21:80:d6:c8:4f:1a:6b:74:40:03:51:10:0a:e0:
92:bf:eb:55:a0:04:42:74:8d:06:93:85:7f:b6:30:74:e2:df:
1b:29:30:f3:0d:9e:25:c4:08:9e:c9:8f:1e:79:dc:15:db:04:
ca:bc:0b:28:f0:cd:11:99:d6:d6:7c:29:87:b9:f8:5c:66:92:
e8:21:66:1c:4f:f0:d2:b0:97:05:74:70:69:2e:14:65:8a:60:
ca:99:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:29:31 2025 by rpki-client