Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81d8207f-0927-30a3-8816-d575a2ccb424.roa
File: 81d8207f-0927-30a3-8816-d575a2ccb424.roa (raw, json)
Hash identifier: NxayckdH28ySmvxYi8lrcJqR9bUG0uhR1/67xPkxPVM=
Subject key identifier: 97:EA:A4:5B:B7:82:F4:DA:D9:2C:4C:0D:2E:52:D9:24:E2:F0:62:50
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848CDC7E4B22BD63FA8E04B3F30
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81d8207f-0927-30a3-8816-d575a2ccb424.roa
Signing time: Fri 07 Feb 2025 13:10:22 +0000
ROA not before: Fri 07 Feb 2025 13:10:22 +0000
ROA not after: Thu 08 May 2025 12:10:22 +0000
asID: 202
IP address blocks: 20.133.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:c7:e4:b2:2b:d6:3f:a8:e0:4b:3f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 7 13:10:22 2025 GMT
Not After : May 8 12:10:22 2025 GMT
Subject: CN=f67229fb-8a46-4bad-82f7-c7626c4ca50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ad:d8:e3:7a:95:07:a3:85:ed:77:8b:9b:a0:
96:fe:89:63:76:40:a1:f9:a9:c6:83:3b:58:80:cb:
4a:37:0c:1f:ad:15:de:7e:3e:81:40:29:ba:22:0e:
ec:ca:11:c7:e6:66:c9:c1:75:16:7e:51:a5:e2:43:
ad:0e:fe:f0:d5:fe:64:02:b3:a9:3d:e6:aa:91:66:
16:10:fa:bd:cf:22:0f:26:65:1c:ad:48:96:45:97:
6e:cd:67:e0:11:16:15:2f:33:c6:73:6d:f1:66:76:
1f:45:fe:f2:4f:a3:bb:41:65:e8:3d:c6:6a:27:9a:
4d:b4:b2:63:8b:2a:be:dc:72:71:b5:0f:30:ca:e8:
09:b8:8d:a7:0c:96:c5:98:91:8d:95:06:9b:9c:28:
d2:d8:8d:5b:59:62:18:a1:e8:9c:04:e2:41:a8:1c:
36:98:12:97:30:bc:fb:35:45:77:fd:32:ee:32:10:
3b:7c:07:1c:a8:cf:07:e0:c0:73:b2:0b:3d:30:5b:
d2:e1:90:d1:48:27:48:66:29:20:23:f9:3b:84:82:
8f:02:62:1d:2a:5e:a7:2a:72:53:91:18:b5:ba:71:
76:05:44:14:2a:ea:d4:8e:0a:79:39:a2:fd:5a:e4:
3c:ce:22:16:f8:aa:a3:10:74:61:03:f5:5f:5a:f8:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EA:A4:5B:B7:82:F4:DA:D9:2C:4C:0D:2E:52:D9:24:E2:F0:62:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/81d8207f-0927-30a3-8816-d575a2ccb424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f9:57:6f:d5:ec:15:16:5a:bc:d5:04:bf:c0:bd:15:b9:11:
76:3c:4b:11:6e:1f:1e:2d:f2:c6:4c:60:d5:c1:1e:d1:e1:49:
85:11:61:c8:a9:d5:5a:6a:82:15:b2:d5:53:98:16:21:1f:16:
18:53:96:ed:32:3c:92:63:00:5d:3d:bf:5d:af:80:d8:49:18:
65:b2:bd:7f:14:e1:99:11:ec:ee:d5:57:c1:9c:11:4a:8c:02:
6b:51:83:2f:dc:b0:8b:11:ef:98:96:ed:af:6b:ef:05:d7:c5:
6c:ba:44:2c:23:70:bc:e3:27:6e:69:86:b1:b4:e3:e1:cf:03:
83:4c:86:6d:01:f7:e2:5f:25:a2:21:4d:51:37:16:ca:fa:5c:
20:f3:77:77:36:33:be:f2:ee:8f:27:c9:23:95:9f:38:f5:1b:
9d:2c:6c:a1:bd:75:ef:c8:d5:c0:27:45:b2:44:01:45:4b:bb:
70:88:4a:22:84:03:e7:9f:75:2d:6e:17:e1:86:ac:33:ee:d3:
a1:8b:c2:90:fe:4c:49:b0:4f:b4:b7:2a:50:9d:e6:03:a2:9a:
3e:24:89:ce:4b:29:bb:27:e5:6a:75:80:9d:a8:b8:a6:e9:1a:
04:5e:a2:97:44:1b:41:5f:0a:ee:19:55:f7:d7:32:59:69:25:
88:2b:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:05:14 2025 by rpki-client