Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/222e34f8-f902-3257-b72f-a2ea4ac10590.roa
File: 222e34f8-f902-3257-b72f-a2ea4ac10590.roa (raw, json)
Hash identifier: lVk8LLJmfbRe+Mzd/vy8+SEbbpq0/ITjrmjyvEAP2sk=
Subject key identifier: 44:ED:4C:22:07:D6:55:B7:9B:8C:FE:52:78:2E:17:8C:A0:86:83:DB
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837F7DF66C3727CDCA6038D7F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/222e34f8-f902-3257-b72f-a2ea4ac10590.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 209.29.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:f7:df:66:c3:72:7c:dc:a6:03:8d:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=92e4a554-a320-449e-b919-e8f3f986e844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:3d:92:09:17:fe:ae:25:c4:a4:e5:d9:04:
91:98:a2:c9:03:95:55:bf:31:2a:87:53:c9:86:df:
ea:a5:b5:b3:5c:c6:e4:89:80:0d:3b:36:7d:cd:f2:
ee:6f:48:60:0b:d5:8c:52:f1:d5:11:5d:c7:d7:b0:
d9:06:18:fd:ff:e8:9a:49:78:1d:1b:e4:db:f5:4c:
42:34:6a:5b:0d:96:ff:a7:c6:ea:8f:fb:62:67:0e:
52:6f:86:f8:42:3a:de:3f:52:05:a4:e5:37:69:73:
02:bd:8c:37:95:e5:3b:56:d3:fa:51:92:10:ed:f0:
96:95:43:e2:90:2e:3e:66:76:83:73:2a:15:4e:d9:
5f:4c:a7:ef:60:4f:77:42:2e:7b:fa:bc:54:12:87:
85:3d:ec:5b:56:a1:ba:2d:b3:13:b2:e7:4d:f9:44:
cb:1d:68:61:7c:e5:f2:9c:5b:b3:29:12:f9:05:07:
cf:cb:92:84:2e:23:ca:1a:c5:16:45:5d:1d:83:c5:
6c:86:4d:85:60:a9:a2:dd:18:e1:ab:34:f0:00:03:
17:c1:17:d7:c8:6c:a4:c0:ab:d1:76:23:cf:16:e1:
b9:aa:ca:fc:15:21:29:2e:a9:05:b9:14:da:15:a3:
90:c1:38:8d:94:d8:76:19:ce:43:a1:f8:f6:f2:b9:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:ED:4C:22:07:D6:55:B7:9B:8C:FE:52:78:2E:17:8C:A0:86:83:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/222e34f8-f902-3257-b72f-a2ea4ac10590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:79:05:45:e2:4f:87:9d:1a:10:4e:44:8f:26:dd:71:28:b1:
20:15:04:8c:ae:53:3a:90:78:ed:fd:f5:6f:76:30:f4:35:74:
da:c5:d6:62:18:58:6b:1c:b9:6c:02:06:6c:4f:3b:83:5a:86:
95:b5:84:4c:49:93:29:a2:cd:c7:71:4d:1e:17:cf:7a:d7:b2:
a1:8d:01:58:7e:f3:dc:09:8b:3b:b5:d1:84:0f:1a:56:65:f2:
37:c1:f4:d8:1c:9c:a2:58:58:69:09:4b:6d:ae:8b:5b:62:9e:
12:36:c9:38:d8:10:5a:d6:b1:55:9f:8e:bb:7c:3b:53:3b:b7:
0f:e5:66:e5:5f:a9:a9:ca:43:a1:53:cb:8d:0c:37:02:04:22:
2d:e4:16:b6:33:26:48:87:e6:17:98:5e:9f:7a:b4:3b:90:84:
d6:b7:c0:bc:b3:b7:a9:8c:fa:b8:9b:44:59:f6:73:0d:bb:d0:
1c:88:2a:9b:23:a2:ed:99:72:5d:17:ae:db:66:2e:07:96:46:
a3:ae:3d:b0:f7:cd:19:4f:4a:e3:b0:53:b4:26:f8:30:80:e4:
19:b3:98:32:ca:c1:1f:22:27:c4:40:18:04:43:8c:24:55:c9:
b6:cf:28:3b:25:f3:19:4f:e5:7e:ef:67:1a:6a:e2:1b:b4:af:
3f:73:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:11:05 2025 by rpki-client