Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a800aba6-6a2f-3481-a67f-727d82c58667.roa
File: a800aba6-6a2f-3481-a67f-727d82c58667.roa (raw, json)
Hash identifier: 8Ile4eOYComeSJrQ9XuHdz+uYWIE8m3GcVl04pmpvmY=
Subject key identifier: E2:11:F3:34:AF:AE:AE:F7:DE:85:FF:5B:80:9E:C5:42:B5:CC:3D:8C
Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial: 010D0C9F43285848F3911E5FC680C36B62E83280
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a800aba6-6a2f-3481-a67f-727d82c58667.roa
Signing time: Fri 21 Feb 2025 02:00:39 +0000
ROA not before: Fri 21 Feb 2025 02:00:39 +0000
ROA not after: Thu 22 May 2025 01:00:39 +0000
asID: 401395
IP address blocks: 192.157.36.0/23 maxlen: 24
2602:f7db::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f3:91:1e:5f:c6:80:c3:6b:62:e8:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Validity
Not Before: Feb 21 02:00:39 2025 GMT
Not After : May 22 01:00:39 2025 GMT
Subject: CN=e6da84a4-a8f1-4cd9-9ded-8575927833c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:74:62:29:30:33:1e:be:a6:a5:8f:f6:fb:
9f:c5:96:eb:91:d6:a2:2e:ac:c6:a4:b2:7c:cb:16:
81:11:2b:de:cf:48:a1:b9:2c:f6:8d:8b:01:e2:0f:
2d:9b:b2:cc:66:70:f7:e5:e3:8e:12:dd:df:68:7e:
b0:a8:94:3c:ab:d0:36:d0:53:8c:45:e4:0c:c0:01:
6a:1b:c8:db:39:f2:b9:90:28:22:56:ca:38:d6:f6:
a3:93:45:25:a5:24:e1:04:5e:9d:9b:89:77:9f:96:
39:20:c6:c7:19:d1:5d:08:81:d2:7e:0d:e0:c7:8b:
e4:a3:bb:ba:f3:a4:d6:ec:b7:c9:3d:78:d2:25:db:
34:f6:81:99:02:ad:fe:c5:34:14:43:bd:f2:5a:2d:
47:25:0d:ad:24:d0:3d:78:67:f7:6e:65:fa:a4:e8:
5a:df:24:5a:61:68:22:36:90:4a:04:48:2d:c0:85:
95:3b:2b:73:5b:5b:18:23:95:4d:a3:20:39:00:b8:
90:f7:76:29:17:4f:7f:08:c6:7a:32:2f:a5:6b:76:
94:45:4e:2f:3b:a6:ad:a8:16:a4:6b:95:1c:a4:ab:
5e:3b:89:87:51:00:82:b5:80:76:6b:ce:28:db:33:
fb:c9:da:a6:67:c7:c6:be:39:f2:61:b5:21:3e:df:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:11:F3:34:AF:AE:AE:F7:DE:85:FF:5B:80:9E:C5:42:B5:CC:3D:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a800aba6-6a2f-3481-a67f-727d82c58667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
X509v3 Authority Key Identifier:
keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.36.0/23
IPv6:
2602:f7db::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:6c:41:ef:5f:87:a4:cc:da:91:73:2a:75:22:cf:6a:aa:62:
db:4b:87:24:ee:c7:12:77:95:88:82:5e:aa:1d:c6:0a:93:df:
5a:98:1c:86:97:43:ab:11:0d:94:2a:8d:8f:46:5c:56:c7:b7:
ab:a3:3e:23:33:46:1d:28:c3:84:88:45:9e:33:f9:93:17:5f:
7d:c4:38:9d:d5:d9:af:44:8b:90:ec:0a:b1:cb:eb:d6:a0:a5:
e1:77:c7:4e:41:8f:c2:9d:b0:f7:a4:13:30:08:79:74:f6:f2:
6d:70:dd:e6:7a:cf:a5:9e:9d:85:d0:2a:d0:4e:24:73:1f:dc:
e6:54:63:2c:59:9f:ee:ba:51:17:50:3c:8e:88:86:69:63:d5:
54:f3:6d:24:4d:34:76:1c:8c:15:7c:91:5a:c9:78:ce:aa:65:
0c:64:42:43:48:e5:43:7d:90:91:48:cd:40:21:13:ac:18:d5:
da:4e:b6:14:fe:d8:8d:35:b4:b1:86:c4:a4:89:8f:5d:39:f0:
e0:76:1e:bd:a7:ec:e2:db:44:b8:67:da:9a:20:f8:17:d2:87:
44:5b:a6:74:25:4e:e2:ad:55:04:6e:53:65:b6:27:43:0a:1c:
16:d9:4f:70:67:b1:31:e4:0c:ec:c3:a9:d5:1c:37:c0:17:ee:
81:6a:20:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:12 2025 by rpki-client