Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d7c908-13e6-3dfa-a12b-0f90b264981e.roa
File: 89d7c908-13e6-3dfa-a12b-0f90b264981e.roa (raw, json)
Hash identifier: TkIZxkcGyHio+PFb9FWmdsZ+39hsZw//OwC+vb/UrsQ=
Subject key identifier: 9C:B5:F1:3F:C8:8D:FF:05:4E:C7:EC:6F:6A:C9:EF:D2:54:45:0F:CE
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848CDC755567AC05C651E71CC00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d7c908-13e6-3dfa-a12b-0f90b264981e.roa
Signing time: Fri 07 Feb 2025 13:09:14 +0000
ROA not before: Fri 07 Feb 2025 13:09:14 +0000
ROA not after: Thu 08 May 2025 12:09:14 +0000
asID: 22562
IP address blocks: 20.133.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:c7:55:56:7a:c0:5c:65:1e:71:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 7 13:09:14 2025 GMT
Not After : May 8 12:09:14 2025 GMT
Subject: CN=3555406c-2f56-446f-8a66-961f3781e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:a2:9f:26:70:2d:ca:c4:15:51:64:7f:48:
77:79:bf:87:94:2b:b2:6d:48:39:c3:14:11:fa:95:
8d:7c:b6:84:fe:32:c6:94:5a:34:0b:32:35:77:5e:
45:d4:aa:00:58:39:8c:6d:0e:4c:e6:4b:72:97:d3:
31:e9:e5:67:fd:db:26:d9:18:ff:39:09:06:7e:04:
a2:d9:d1:b9:62:65:c5:66:c0:fd:1d:e0:db:de:d7:
05:ce:af:6f:d4:8e:d3:ef:ba:8a:85:4f:47:f2:2a:
ef:60:cd:15:fe:cf:55:d5:54:c0:68:28:ad:13:14:
1e:ab:a2:57:d6:da:3b:50:c5:d5:fc:55:5a:c1:26:
8f:20:72:ca:f3:10:ef:cd:f5:b2:11:41:63:1b:c1:
bf:44:72:d2:2f:f0:09:dc:95:17:ab:67:ad:9d:b0:
42:03:c4:a8:47:7f:3a:bb:84:fd:de:69:47:af:fe:
ea:e2:2a:a0:ef:5c:ee:7e:d0:83:10:36:2e:67:b9:
47:32:a1:d4:62:c5:f0:aa:c5:57:52:c2:ac:ad:bb:
79:44:9f:d9:69:0b:f9:c7:11:78:20:a6:3a:d3:7c:
5c:70:61:41:40:74:72:e7:08:4f:20:13:8e:61:06:
10:2c:09:66:e8:8a:dd:76:c7:a0:21:c4:9e:53:66:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B5:F1:3F:C8:8D:FF:05:4E:C7:EC:6F:6A:C9:EF:D2:54:45:0F:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/89d7c908-13e6-3dfa-a12b-0f90b264981e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:6b:83:82:cd:a9:c8:61:62:57:51:e2:a1:4f:cc:f0:22:cb:
94:2d:1a:b6:a2:d3:05:49:c2:a6:b2:66:ff:6f:bd:e4:87:05:
c6:d8:65:c1:f3:bd:ba:ef:d4:bc:f2:5d:26:7b:3e:aa:27:de:
82:80:ed:a8:20:e1:ed:10:ff:35:10:48:9b:45:c0:e6:57:a9:
25:f8:b6:5c:d8:63:0f:2d:30:fe:51:aa:66:18:5d:71:27:54:
85:7d:8c:b0:dc:35:97:1a:21:30:3e:3c:70:9f:4a:15:f4:13:
a0:4f:5c:da:14:a1:fa:2b:ca:af:d6:23:9b:d9:33:3a:c6:2e:
ec:f6:49:a3:5c:ed:49:1e:79:b2:8b:4a:4a:82:2b:c0:ec:df:
cd:da:cc:16:9d:a5:ba:01:db:56:f3:df:ff:f2:51:91:5c:f8:
83:b7:60:ab:6e:bc:6d:c5:be:c5:4e:b3:24:69:a0:93:f0:fe:
f3:f5:a5:1f:ed:3d:13:69:f7:6d:ca:ae:7d:46:4c:95:87:a7:
31:61:0f:6b:db:6c:6b:60:0b:77:64:3c:6a:f1:c5:bf:32:f9:
d6:d3:05:44:73:da:b3:a0:49:aa:a3:76:33:d1:b2:31:e8:42:
64:73:d5:51:82:6c:df:da:19:54:80:5b:be:50:93:f7:2d:4a:
b7:e4:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:46:38 2025 by rpki-client