Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/d5842c4b-aa39-3cc0-b7bc-6f409bceea44.roa
File: d5842c4b-aa39-3cc0-b7bc-6f409bceea44.roa (raw, json)
Hash identifier: x71walYMG9h8k3XHdvPKvlCO85NWYA2h1wuvPB/ynWg=
Subject key identifier: 49:B9:AF:B2:8F:6D:9A:7C:C2:7B:C6:2E:61:5A:2C:47:8C:6B:39:9E
Certificate issuer: /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial: 010D0C9F432858435D0E23F7DB61BA34DE1EC100
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/d5842c4b-aa39-3cc0-b7bc-6f409bceea44.roa
Signing time: Wed 27 Sep 2023 16:10:52 +0000
ROA not before: Wed 27 Sep 2023 16:10:52 +0000
ROA not after: Tue 26 Dec 2023 17:10:52 +0000
asID: 16509
IP address blocks: 158.26.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5d:0e:23:f7:db:61:ba:34:de:1e:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
Validity
Not Before: Sep 27 16:10:52 2023 GMT
Not After : Dec 26 17:10:52 2023 GMT
Subject: CN=009119e4-46fb-4655-abf8-d4b631322e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:10:a8:b8:c1:8d:7d:d0:45:f6:01:3b:76:
13:f5:73:83:93:3f:3c:d9:f4:83:e1:51:f2:49:bd:
f3:96:02:81:02:6f:3d:64:d0:ed:20:b3:5a:08:0f:
71:a3:59:1d:25:1c:60:a6:5f:74:8a:a0:bc:76:b4:
f9:84:1c:55:19:eb:07:09:36:64:b7:00:28:9a:d6:
4c:3a:21:07:eb:22:14:80:5b:33:43:89:2e:7c:c4:
a7:32:c8:24:e7:68:e1:57:c9:ce:2d:b1:60:c8:3e:
13:0a:c3:5c:40:04:4b:7b:08:ed:5f:c8:76:18:84:
4b:95:91:65:8d:2a:d2:f9:f3:f0:73:f9:0a:88:b8:
37:f2:9e:0d:7f:2d:1b:d0:be:c9:6e:7a:2d:f3:ac:
fc:b5:8f:c5:54:76:ff:82:c4:66:5e:8d:ca:b6:9d:
cc:e8:ff:17:bc:a2:bd:9b:cb:38:04:ac:78:1c:4f:
76:5d:00:d4:c0:f3:5b:1a:f2:98:45:e0:3b:0b:a3:
ea:e4:9e:28:3a:a9:d4:72:05:88:7d:e0:08:96:bf:
a1:e2:53:5e:98:89:56:0f:09:93:a0:c1:77:ff:f8:
9f:10:77:57:7a:0d:5f:c7:ef:5b:bd:2f:7a:4f:d3:
82:e7:a5:88:e4:38:af:f8:22:51:62:3a:45:e5:9a:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B9:AF:B2:8F:6D:9A:7C:C2:7B:C6:2E:61:5A:2C:47:8C:6B:39:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/d5842c4b-aa39-3cc0-b7bc-6f409bceea44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
X509v3 Authority Key Identifier:
keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.26.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b9:ac:04:77:22:6c:d4:4e:da:83:00:8d:e7:d1:14:1e:57:
f6:e7:fb:24:7f:a1:8b:28:c8:f7:ae:a2:c5:b3:56:70:c8:af:
52:7f:ec:51:39:02:76:39:81:0d:8a:16:0b:59:67:44:2c:db:
32:ea:e4:c4:7c:8d:3f:f8:24:b0:d3:9e:e9:d5:ed:e1:69:4c:
de:23:a2:7b:22:69:6e:34:89:8e:52:d8:b1:4f:dc:47:20:d7:
58:e6:c5:11:e7:c0:cd:59:a8:e3:71:39:b6:d0:61:61:b2:46:
87:f7:16:c9:bf:b8:7d:d5:16:11:e0:75:dc:6a:e2:a2:85:13:
a2:de:33:d1:84:a5:37:ac:e0:65:14:b0:b2:d6:25:2c:5f:4e:
e0:7f:a0:f2:aa:09:5f:4c:26:e0:0b:c6:90:a5:7a:4c:d7:20:
98:14:7b:3d:cd:69:6a:ec:4c:34:79:d3:75:77:46:7e:6b:cc:
de:ca:f2:6e:e8:2c:62:64:39:29:17:3a:57:38:d7:ae:02:4e:
0d:eb:11:1d:ca:bb:72:15:48:eb:a6:c4:7a:78:fb:6b:3e:ab:
08:e6:56:e3:a8:e2:dd:e4:b3:db:36:cf:e1:f4:cc:b0:1f:aa:
15:28:f4:ff:f0:23:62:bc:4a:2f:95:b9:fc:37:e5:80:82:5d:
44:ea:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:33:31 2025 by rpki-client