Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/a3503ba6-7b04-3c80-962c-4eb5aadc7794.roa
File: a3503ba6-7b04-3c80-962c-4eb5aadc7794.roa (raw, json)
Hash identifier: zcqSLWVmeXKoLQWucAc0Hb+UPc5/G6YXyh+FtnfzcaQ=
Subject key identifier: 9B:2A:02:7C:11:5A:FA:B0:A7:45:9A:FA:FC:6A:9B:65:66:24:6A:C8
Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial: 010D0C9F43285841E9B3926BFA73C7868D912D66
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/a3503ba6-7b04-3c80-962c-4eb5aadc7794.roa
Signing time: Wed 17 May 2023 15:43:29 +0000
ROA not before: Wed 17 May 2023 15:43:29 +0000
ROA not after: Tue 15 Aug 2023 15:43:29 +0000
asID: 63351
IP address blocks: 208.91.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e9:b3:92:6b:fa:73:c7:86:8d:91:2d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
Validity
Not Before: May 17 15:43:29 2023 GMT
Not After : Aug 15 15:43:29 2023 GMT
Subject: CN=069d55f7-a7bd-49f7-8184-9455d1b6cccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:a8:a5:6f:da:35:1e:a5:8e:75:26:71:40:
a0:b8:e9:17:bc:3f:da:0a:dc:08:c5:c2:dd:08:93:
b6:30:83:33:3b:19:95:70:65:e9:a3:2e:51:f5:38:
4d:f8:f4:e9:02:1b:09:1b:46:7b:6e:83:9f:0e:e7:
7e:27:fd:da:de:08:e8:9c:8c:64:13:2d:bb:04:6d:
58:50:ea:42:db:4d:b2:6a:5b:4d:b0:db:d7:0f:3f:
ec:65:23:05:6c:34:3c:44:47:68:82:02:31:92:e4:
6a:63:00:bb:97:3f:57:b3:05:2d:b0:57:ca:10:9e:
61:f8:af:5f:02:a1:94:7f:47:a9:7a:b4:07:13:00:
ed:3d:ee:52:3a:af:cb:74:0a:43:c0:62:76:74:60:
4f:a4:a2:17:79:dd:da:fc:f0:98:f9:04:15:d6:21:
d5:6c:09:e7:43:85:77:ff:fb:16:b2:6f:24:ea:cb:
89:26:17:77:90:8a:cc:cf:c0:70:c8:6c:56:29:1c:
fb:39:60:c6:16:3c:9a:b2:42:bf:fb:db:03:13:f9:
e5:67:26:d8:dc:00:c1:44:29:97:f8:81:06:f2:75:
2a:4b:58:8c:2f:79:b0:19:37:05:8b:88:74:13:30:
ef:92:51:eb:74:72:26:0e:76:62:05:e7:68:23:ea:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:02:7C:11:5A:FA:B0:A7:45:9A:FA:FC:6A:9B:65:66:24:6A:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/a3503ba6-7b04-3c80-962c-4eb5aadc7794.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
X509v3 Authority Key Identifier:
keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
sbgp-ipAddrBlock: critical
IPv4:
208.91.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c2:a3:cf:5b:b3:3b:60:b4:22:33:1c:03:9e:ff:22:be:b0:
01:68:98:33:42:05:d1:82:6b:f2:fd:3c:36:cc:16:b0:64:4b:
28:f0:27:50:86:22:5a:d7:04:04:13:7e:7d:b8:b6:3d:a9:50:
e7:eb:44:a4:aa:ec:91:c2:b9:37:e0:82:9a:2e:72:d0:05:bd:
a6:be:08:98:89:86:95:72:cd:91:c8:c4:b0:b0:4d:1c:84:7d:
d1:65:16:3c:c1:46:a2:c9:af:b5:d7:ad:5e:5c:59:1c:ec:48:
d5:0e:ff:55:2f:0d:c7:da:2e:d7:68:0d:dc:2f:c2:5c:2a:9a:
b2:69:2c:59:8d:57:0c:2a:d9:63:2c:1e:a6:94:d5:74:ba:07:
9b:f7:d3:a9:79:f8:d8:ff:68:55:a0:da:37:e0:25:31:5a:82:
fc:83:c1:0c:1b:d1:6e:77:8e:84:a5:61:24:89:2e:8d:f7:cf:
73:64:de:0b:e9:2d:b4:89:00:c9:9f:3a:d2:e5:f3:5d:ec:f8:
7d:da:41:c4:57:f9:7f:73:28:f7:6a:fd:9a:d4:60:5d:cc:7c:
82:1e:b9:25:8c:c3:40:c0:f8:89:2e:80:e5:6c:c2:af:a7:8f:
df:8f:79:d7:6f:e4:3b:c2:a5:82:38:a4:45:91:f0:59:8c:f4:
a8:e2:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:14 2025 by rpki-client