Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/337ba62e-0df7-47ce-9622-ec5f39279049/28a3d9ed-74b5-306e-a10b-fa4b01ea4896.roa
File: 28a3d9ed-74b5-306e-a10b-fa4b01ea4896.roa (raw, json)
Hash identifier: yd7PKhPEDeFzuk5InYPpZAenrr0yQeiD5smeq37nyiU=
Subject key identifier: 6E:45:7B:93:A2:31:1E:D3:27:EC:12:CD:54:40:F9:08:64:9E:EE:F4
Certificate issuer: /CN=337ba62e-0df7-47ce-9622-ec5f39279049
Certificate serial: 010D0C9F43285848C33248C4DE86F9A76DE893C0
Authority key identifier: 75:AC:AD:B7:57:EC:EF:CB:72:30:5B:AF:E7:ED:D2:C4:F9:97:4C:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/337ba62e-0df7-47ce-9622-ec5f39279049.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/337ba62e-0df7-47ce-9622-ec5f39279049/28a3d9ed-74b5-306e-a10b-fa4b01ea4896.roa
Signing time: Mon 03 Feb 2025 18:10:50 +0000
ROA not before: Mon 03 Feb 2025 18:10:50 +0000
ROA not after: Sun 04 May 2025 17:10:50 +0000
asID: 7885
IP address blocks: 199.247.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c3:32:48:c4:de:86:f9:a7:6d:e8:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337ba62e-0df7-47ce-9622-ec5f39279049
Validity
Not Before: Feb 3 18:10:50 2025 GMT
Not After : May 4 17:10:50 2025 GMT
Subject: CN=ac251e4f-fcc7-49a7-9bc3-1fda7c34630f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:f9:77:de:b9:be:43:3e:e5:31:4d:2a:77:
ed:4f:1d:44:2b:3e:fe:26:fc:39:cb:a7:75:d1:22:
48:9a:2f:a6:94:c9:68:c2:ff:67:b2:f0:12:df:62:
9d:43:ea:9b:f0:fa:ed:86:e3:43:2d:99:cd:6b:24:
c8:6d:6e:8c:f9:01:fd:bd:ee:96:c3:9b:de:7f:da:
e9:4a:ea:34:37:0e:2f:d2:f2:be:8f:7c:94:24:a7:
85:b6:62:4e:63:06:c2:af:94:54:d4:9c:07:71:19:
82:af:ff:c3:d6:7b:96:c5:6b:f9:4c:42:f6:94:33:
41:94:fc:ab:74:26:8e:aa:da:1e:50:ac:fc:39:0a:
de:6a:88:28:37:5e:27:d8:f6:5e:38:82:0f:b4:10:
eb:d2:cf:e4:ee:e7:64:2e:1b:7e:65:7f:e0:a7:df:
f1:fd:22:26:83:5d:85:c5:36:74:75:d3:53:f9:77:
15:9d:da:1d:d6:b7:30:35:19:63:bf:74:fd:50:4b:
6d:40:6a:f0:a4:4a:43:bf:aa:4f:5d:43:38:7b:5f:
fb:56:89:ed:94:d0:6a:ba:88:ec:be:13:a6:1d:18:
ef:78:e4:ab:99:19:cd:af:fe:72:82:7d:60:28:d6:
9c:1b:a3:d0:c2:45:a8:18:50:1f:c0:2e:ea:aa:fa:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:45:7B:93:A2:31:1E:D3:27:EC:12:CD:54:40:F9:08:64:9E:EE:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/337ba62e-0df7-47ce-9622-ec5f39279049/28a3d9ed-74b5-306e-a10b-fa4b01ea4896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/337ba62e-0df7-47ce-9622-ec5f39279049/337ba62e-0df7-47ce-9622-ec5f39279049.crl
X509v3 Authority Key Identifier:
keyid:75:AC:AD:B7:57:EC:EF:CB:72:30:5B:AF:E7:ED:D2:C4:F9:97:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/337ba62e-0df7-47ce-9622-ec5f39279049.cer
sbgp-ipAddrBlock: critical
IPv4:
199.247.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:29:d2:12:ad:7b:a0:5f:12:54:a2:fd:1f:c7:46:91:d0:04:
6c:4b:27:cc:c8:02:80:dd:82:3a:ee:43:dc:67:99:f0:31:0d:
93:c4:8c:58:e5:8d:b2:04:50:41:72:3e:21:b9:50:6a:f1:50:
36:67:c4:e2:1e:7b:53:ff:d4:0d:f4:c3:1e:a3:7e:4f:36:e9:
7a:0b:e2:0b:b7:4e:ec:11:b6:91:52:8c:1d:b4:76:9b:d9:37:
f8:d7:43:2f:dc:48:40:c8:c9:bc:a6:32:cb:97:94:a4:b6:70:
bd:34:16:4d:eb:36:3a:59:e0:b3:d5:66:bc:83:5f:11:bb:58:
9b:e3:a9:85:9b:9d:79:3a:a6:3d:78:a6:85:05:3d:df:d7:9d:
2c:fb:9d:06:c5:c8:5e:bb:65:15:00:e9:bf:08:49:ef:37:01:
4d:45:0e:67:8a:c4:90:05:dd:1e:96:56:c7:3b:db:0f:af:5c:
38:af:aa:0c:4e:c7:3d:ec:47:0f:9f:9a:f3:1b:54:55:d2:47:
70:cd:3f:a1:64:ee:1a:02:c2:1b:88:66:c8:8e:88:49:2c:83:
a4:6f:52:f9:2d:fa:84:e7:ee:b2:59:01:a1:c8:7a:f1:eb:3f:
fd:cd:1b:b7:7c:91:5e:ea:fe:45:60:b7:77:05:9c:f5:56:bc:
f5:88:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:57 2025 by rpki-client