Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b2eaafe3-42d6-3638-867e-7d18a9490200.roa
File: b2eaafe3-42d6-3638-867e-7d18a9490200.roa (raw, json)
Hash identifier: JSjA7AaF3i3ecIQWouwpd6r+OWvsIO2dJr2J0jx6rmY=
Subject key identifier: 8B:6E:84:87:7C:39:3E:7D:E1:B5:82:F5:C5:3E:86:C5:E9:54:A0:FC
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848E1797FA9DA4C96603FFF7AA0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b2eaafe3-42d6-3638-867e-7d18a9490200.roa
Signing time: Fri 14 Feb 2025 14:28:34 +0000
ROA not before: Fri 14 Feb 2025 14:28:34 +0000
ROA not after: Thu 15 May 2025 13:28:34 +0000
asID: 55539
IP address blocks: 63.221.197.0/24 maxlen: 24
63.221.198.0/24 maxlen: 24
63.221.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:79:7f:a9:da:4c:96:60:3f:ff:7a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 14 14:28:34 2025 GMT
Not After : May 15 13:28:34 2025 GMT
Subject: CN=4ce8f54d-b8b8-43db-8bdb-f71487070ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:a9:77:a5:8c:53:ac:65:8a:bb:ef:ab:75:
8f:1f:45:cd:ea:09:e0:0e:16:c9:6c:43:9f:78:bf:
b0:df:4a:fd:dd:5a:33:2a:b4:b4:fc:d0:36:a5:19:
09:85:61:49:31:f1:8e:61:00:10:52:08:e2:53:5d:
66:68:e5:45:9c:2a:b2:5a:25:f2:18:d8:8b:94:3b:
eb:80:c3:2c:6c:18:f6:54:2a:16:b5:7f:b1:ea:4a:
2c:9d:c2:db:fe:38:2b:31:9f:3b:c5:4e:da:fc:1b:
d3:ec:44:98:b3:98:fe:a2:99:66:66:e3:b8:fe:07:
63:b0:8d:8d:68:b6:46:79:39:79:bc:39:c3:8b:67:
b9:f1:5c:6b:e7:6f:4a:98:c6:ea:22:04:f6:d3:e9:
af:cf:1c:f2:43:ab:78:74:71:d7:b4:5d:61:7e:bc:
30:48:51:c6:10:94:80:68:6e:ca:74:07:98:f8:7e:
df:f4:ce:5f:3f:6c:fd:af:d4:fc:ee:4a:3f:3f:24:
6d:0f:67:28:ab:76:6d:8c:80:40:66:56:31:38:cf:
c2:65:cd:c3:fd:88:7c:29:80:ce:bb:55:64:89:4f:
27:ed:e9:9a:ef:0b:8f:77:cd:73:e4:7a:5a:0d:92:
29:31:af:07:85:d7:52:eb:83:e1:e8:55:76:bf:8b:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6E:84:87:7C:39:3E:7D:E1:B5:82:F5:C5:3E:86:C5:E9:54:A0:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b2eaafe3-42d6-3638-867e-7d18a9490200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
63.221.197.0-63.221.199.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:30:4b:7c:f3:1e:c7:17:57:0f:b7:fb:aa:0a:db:b5:02:ae:
d8:d8:87:07:4a:15:85:68:e2:2e:b1:97:c4:bd:6a:4c:5a:c3:
a2:f3:11:87:96:c9:95:44:ab:02:6c:8c:51:90:59:76:f2:6c:
5c:c4:4d:d2:27:a4:5c:7f:c7:49:f5:37:f1:7d:ed:dc:76:20:
cd:37:35:2d:06:ce:b7:dd:61:68:ce:94:ec:c2:ff:95:31:de:
1e:e9:9e:fb:94:33:91:84:63:8f:7b:20:e5:05:24:44:db:8c:
1c:35:fe:d1:4f:84:55:21:71:29:e2:7a:ac:ba:5e:90:c5:cd:
40:92:e9:a7:1e:3a:17:d9:9b:c4:a7:8d:8d:04:00:6b:c5:cd:
ec:6c:f7:07:28:73:78:33:50:60:cd:8c:64:d6:fd:b7:14:5b:
1d:fa:9d:6c:cb:35:d9:bd:42:98:37:29:1f:a2:29:0a:27:2c:
7a:a2:0c:cb:84:19:1b:8c:1a:f0:46:64:a0:dc:e1:5b:33:d8:
48:db:cf:99:b5:a4:60:6b:6c:c0:14:53:2f:7b:ce:f8:05:65:
8b:d7:e0:01:fe:9c:83:57:02:b8:05:86:23:f7:d3:ae:44:33:
76:41:ae:9c:f9:ea:f4:d3:ea:3a:d4:a6:1f:0e:80:ab:16:21:
29:4a:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:21:07 2025 by rpki-client