Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/56c30a73-e50b-3528-a108-113a09129b2e.roa
File: 56c30a73-e50b-3528-a108-113a09129b2e.roa (raw, json)
Hash identifier: s4m7Q+tg0q9jszjpqGFC8IZAtw20J82RQfbJKWQYVXs=
Subject key identifier: 29:BF:A4:84:D1:EB:A2:73:59:5A:BE:1E:9E:CD:F1:E7:03:3B:A8:7B
Certificate issuer: /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial: 010D0C9F432858492E4F53E851E8825EB1954300
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/56c30a73-e50b-3528-a108-113a09129b2e.roa
Signing time: Fri 14 Mar 2025 03:00:51 +0000
ROA not before: Fri 14 Mar 2025 03:00:51 +0000
ROA not after: Thu 12 Jun 2025 03:00:51 +0000
asID: 22351
IP address blocks: 209.159.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:4f:53:e8:51:e8:82:5e:b1:95:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Validity
Not Before: Mar 14 03:00:51 2025 GMT
Not After : Jun 12 03:00:51 2025 GMT
Subject: CN=b81cfa4d-07ee-4f9e-9cd2-769db1770776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:ff:31:97:62:a2:9e:cd:f7:41:dc:a5:00:
63:38:24:23:12:4d:9c:03:db:d5:cb:b9:5b:09:3f:
65:71:04:d9:24:c5:5a:41:3f:7f:b5:bb:14:07:f4:
03:14:ce:6f:4d:9a:be:ee:ae:65:b7:32:6b:c3:0c:
72:10:8d:d3:6f:a3:18:99:6e:f1:20:e1:ab:6d:8b:
c1:73:6d:86:a6:32:1e:a8:b3:bd:59:fa:7f:36:eb:
44:55:2b:aa:9f:7c:6f:da:26:07:91:42:e7:1a:85:
ae:42:91:73:e0:a6:2a:de:b9:2b:f5:7f:cb:c7:fd:
e7:f1:20:49:a4:ef:48:23:63:a5:90:a3:fa:26:2a:
4b:e3:70:e6:ae:64:71:98:09:2e:e3:f6:9b:69:f3:
30:1b:36:30:a7:c1:e4:13:17:b8:a7:6d:7c:b7:26:
9c:cc:44:49:a8:ad:33:66:27:58:95:0d:03:bb:31:
f6:07:2c:4d:f2:c3:4f:55:c3:03:24:fd:82:d4:a4:
44:a7:74:1a:94:9f:09:bd:6a:2b:8a:dc:b4:d9:2e:
a9:88:da:d1:89:31:27:cc:da:6b:bc:a1:19:e3:50:
b5:f5:7e:59:eb:5b:4c:b2:11:b2:3e:94:53:3d:a0:
2d:b5:4f:29:06:39:81:6a:5c:ca:ea:5b:fb:e5:17:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BF:A4:84:D1:EB:A2:73:59:5A:BE:1E:9E:CD:F1:E7:03:3B:A8:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/56c30a73-e50b-3528-a108-113a09129b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
X509v3 Authority Key Identifier:
keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.159.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:36:58:73:8b:ef:b8:11:28:f8:c0:82:21:19:bc:5e:ef:df:
6a:02:c4:31:9e:c6:bd:c9:a1:a6:1d:2c:85:8e:22:44:13:18:
97:2b:04:00:ee:d0:1a:b3:48:f6:75:42:3a:bb:13:16:78:b5:
89:d1:81:71:ae:3a:7a:1f:c5:df:4e:66:35:bd:31:2a:7c:9f:
44:e2:f6:c9:b5:53:6c:2e:bb:2f:9d:77:d5:4a:6d:fd:87:64:
ac:a4:86:83:c9:f3:ca:2f:00:e0:dd:8c:28:4f:a2:a0:5f:2c:
87:cd:2d:44:e0:5f:65:77:76:66:6a:9e:2a:b0:7b:0d:0f:7c:
c4:b2:c3:84:1c:a2:8e:b2:02:85:38:c8:ce:41:cf:62:8c:4d:
30:7e:10:61:43:d9:57:e0:02:4a:1b:98:df:55:76:2b:d5:48:
23:8b:55:dc:b9:01:3e:f2:b6:86:d2:b1:c0:ea:33:69:df:bc:
c4:5f:da:36:53:25:bd:a4:d5:bf:8e:cf:2f:a0:2e:a7:13:66:
37:0d:34:2c:29:92:e1:c7:7a:f2:0d:bb:09:d0:0e:4a:fa:37:
86:bb:e6:e0:65:ee:33:dd:63:49:c5:dc:7b:c5:7c:29:2d:a5:
02:f2:31:1f:0b:a9:f0:08:ea:ca:72:32:91:14:9f:2a:28:09:
e7:fc:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:21 2025 by rpki-client