Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e486e50d-fed0-3c65-bc76-ee930b7793a1.roa
File: e486e50d-fed0-3c65-bc76-ee930b7793a1.roa (raw, json)
Hash identifier: Sue/eWFUmnSssV72QzQGHkMsQR8s97oNGCsrththdOc=
Subject key identifier: 66:89:B4:2C:C7:12:71:2E:FA:4F:04:5C:E4:AD:74:3B:97:71:6E:44
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584925B3A885FB696867F8EB1D80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e486e50d-fed0-3c65-bc76-ee930b7793a1.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 13576
IP address blocks: 208.53.240.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:a8:85:fb:69:68:67:f8:eb:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=cd08542e-e647-4f72-8f0c-312eb5f59093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:42:95:0d:57:4e:20:1f:39:4b:77:b2:eb:
a5:cd:c6:7a:ec:22:a8:30:f6:50:58:f1:db:29:da:
96:7a:63:9f:bc:3c:6e:cd:ee:c0:51:9d:eb:aa:4d:
fd:38:05:d7:80:a8:69:20:ed:eb:7c:fd:fc:d0:4e:
cd:63:cf:d8:c7:4f:d9:50:e0:ae:5d:bb:fc:4e:82:
4a:70:e3:55:08:d4:31:97:42:1a:3b:33:64:f5:ae:
2f:07:cb:59:f7:2a:4a:c2:65:94:ef:9b:fd:85:ed:
0d:a2:ef:3f:87:e4:4e:0c:1a:d4:b8:96:21:db:eb:
95:c3:10:78:f8:24:fe:87:84:c7:0a:31:81:8d:ac:
39:17:ae:5f:ea:0d:22:eb:b6:63:f8:a6:78:76:9e:
4c:2c:6a:4b:cb:88:2c:97:c3:7d:dc:d9:36:c1:6e:
f3:31:9c:09:b2:72:6f:ae:77:e5:86:25:a8:45:26:
d3:3a:c5:ac:47:88:63:90:27:25:1b:14:24:0e:65:
94:ff:82:6f:72:54:62:66:32:c1:f2:95:95:55:71:
59:57:74:cb:38:20:a6:14:4f:d3:cc:5c:15:02:87:
f7:54:6b:82:ac:74:24:5e:8b:20:4f:de:fa:2a:be:
d2:b6:0c:bf:2e:fe:bf:8d:ac:a9:e8:1d:27:37:f6:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:B4:2C:C7:12:71:2E:FA:4F:04:5C:E4:AD:74:3B:97:71:6E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e486e50d-fed0-3c65-bc76-ee930b7793a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:44:a5:15:b2:3e:f4:46:4f:f0:0b:b5:08:db:c0:b1:d8:11:
6a:e2:68:70:58:6b:c4:1c:76:67:2f:89:c0:2a:73:82:b0:59:
5f:13:e4:97:59:3d:8b:96:d4:80:44:40:41:cc:d4:67:85:34:
3c:cc:c9:82:94:43:2c:53:28:c5:12:db:8f:74:cd:d6:97:5b:
60:df:fa:8c:a0:71:fd:df:fc:75:51:f3:d6:23:9b:40:80:a9:
64:0f:e4:ca:fd:69:9a:77:8b:d9:98:d4:38:19:e3:c0:fc:e5:
8b:01:d1:cc:5c:b7:c1:66:78:b4:c5:2c:44:63:a1:65:ce:f0:
98:f5:d4:83:46:fb:f5:4c:3d:52:89:c4:f7:6a:7d:bf:02:ef:
31:f0:1d:88:d2:9d:41:e0:3c:08:93:8f:81:43:3f:3f:06:c9:
5b:27:95:af:b6:0a:ef:66:8a:03:65:a3:f6:ed:65:03:bc:ce:
2e:d8:66:77:13:64:1c:54:c4:4d:50:80:64:6f:1e:32:b8:f2:
58:43:f9:97:29:e0:a1:3d:05:15:37:0d:4c:29:b7:ce:21:3e:
04:12:e3:c2:16:70:df:a7:19:29:a9:05:2e:3a:86:e1:d3:32:
b2:24:25:76:e9:bd:ab:67:f2:a9:f2:85:42:e1:67:06:4e:d4:
a1:f0:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:31:24 2025 by rpki-client