Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/84c5febb-8030-3250-9aba-289355c4407e.roa
File: 84c5febb-8030-3250-9aba-289355c4407e.roa (raw, json)
Hash identifier: FVcJe4ABFKjAGwOVvRR+V6UC0SBijGccIK0SzV3Ilxw=
Subject key identifier: C5:44:B4:21:67:3F:0D:A8:34:8E:7D:7C:03:62:49:24:3B:FB:8A:43
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848CDC306027EE8330A68A3C900
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/84c5febb-8030-3250-9aba-289355c4407e.roa
Signing time: Fri 07 Feb 2025 13:00:33 +0000
ROA not before: Fri 07 Feb 2025 13:00:33 +0000
ROA not after: Thu 08 May 2025 12:00:33 +0000
asID: 202
IP address blocks: 20.133.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:c3:06:02:7e:e8:33:0a:68:a3:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 7 13:00:33 2025 GMT
Not After : May 8 12:00:33 2025 GMT
Subject: CN=451b38e3-e13b-4727-8850-011894d66b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:d5:e8:c5:59:a2:12:40:d3:d5:18:d2:22:
2b:0e:92:e6:d9:39:fb:f3:d5:0d:f4:e8:f2:62:2d:
fe:0f:67:c3:07:1a:27:ad:f1:d7:1d:45:98:9d:f6:
e6:f0:1d:05:b1:4a:73:95:a7:99:1b:59:bd:d5:06:
dd:33:64:07:ea:13:d7:b1:4a:fc:8f:f6:d8:e6:8e:
40:33:d0:74:3e:12:6c:33:87:01:7f:64:4c:98:53:
17:86:ad:a8:38:c3:b3:24:d1:22:ec:eb:ad:a9:bc:
b5:0c:b4:41:d1:e7:83:97:9a:d6:87:f8:2e:e0:28:
28:70:15:f1:10:ea:1d:58:f4:b0:ba:14:90:8b:b2:
bd:b7:64:b4:03:a8:14:6b:92:5e:36:5a:45:57:27:
98:ad:25:94:30:6b:d4:48:88:88:f9:01:28:4f:f2:
a7:a4:7c:85:ec:cc:7d:24:16:eb:34:16:3c:89:bc:
96:ae:b2:97:79:69:32:65:19:72:17:6e:fc:73:06:
d1:4f:40:81:ca:4e:c5:f5:0d:29:48:e7:92:ce:b0:
1b:c7:7c:78:e8:9a:64:09:ce:0c:49:8a:e1:50:d8:
12:86:8c:ab:f9:51:d4:73:7a:c8:6d:c9:07:d6:26:
d1:8f:2c:31:1e:11:b5:75:df:bb:99:b8:96:05:a1:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:44:B4:21:67:3F:0D:A8:34:8E:7D:7C:03:62:49:24:3B:FB:8A:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/84c5febb-8030-3250-9aba-289355c4407e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:00:ed:d6:ce:a8:5f:21:d0:88:5c:c6:7a:2d:f9:75:41:f2:
36:ff:b6:c1:da:04:18:b7:af:0c:00:2d:fd:f5:5f:c3:5d:d8:
34:c8:b8:f9:f8:2b:ab:8b:a9:6f:57:1c:99:ee:90:34:23:0f:
4a:28:cf:a2:81:06:8b:a1:8e:52:cc:16:22:f4:f4:43:bf:1d:
d4:a4:e1:de:12:05:e6:e2:40:8d:28:e9:33:d9:b0:6a:ce:2b:
b4:51:fb:14:dd:36:f5:8c:f2:d9:6b:b5:24:60:25:00:c7:09:
a5:3d:46:27:19:ff:eb:36:e3:55:32:4c:eb:a5:b8:79:79:db:
ef:f4:21:37:c2:c3:cf:8f:f3:09:18:d3:c7:57:92:6d:1a:98:
fe:66:e4:eb:51:64:7b:f7:0d:ec:8c:72:3c:6c:be:ed:c3:43:
50:cc:35:18:fa:38:13:74:ad:91:73:33:e7:b7:c5:4d:b5:88:
6e:00:b3:7f:3c:6d:22:b1:02:82:b9:e0:0c:f2:3e:92:df:1a:
7f:a9:73:4a:be:55:4b:2f:95:83:57:fc:e7:62:ba:95:96:6e:
8a:b7:6d:b8:4f:fe:4b:b6:31:2a:83:53:9a:3e:c4:95:30:e0:
fd:2c:93:e0:ef:e0:ef:a9:33:0a:7b:2e:d5:c0:98:39:fb:35:
c4:48:52:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:39:08 2025 by rpki-client