Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d75d0072-99c1-3915-ab58-f9d150386139.roa
File: d75d0072-99c1-3915-ab58-f9d150386139.roa (raw, json)
Hash identifier: xgD77sll+y0CXDGMCXp78dOE/ZJMVCMXgbatQ/FvEb8=
Subject key identifier: 25:FD:D5:3E:B9:51:B2:51:A6:2F:64:E9:1E:13:97:F0:B9:87:A5:4C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C0D07B7EEACD49F0B36D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d75d0072-99c1-3915-ab58-f9d150386139.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 173.255.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c0:d0:7b:7e:ea:cd:49:f0:b3:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=61bd522e-6e3f-45b8-b1e0-9e8bff208f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9e:b7:8c:35:87:61:43:e2:4a:05:1b:58:cb:
e2:07:8a:23:34:39:b7:a4:1f:70:6e:51:c6:0c:ae:
62:e2:2b:8d:6a:c8:a1:1f:e6:f5:f2:d5:81:20:97:
46:1b:51:e4:51:31:25:9e:a6:da:f9:99:e5:75:7e:
55:9d:5d:c8:31:1a:35:fa:f4:1b:99:fe:7b:28:69:
a7:ee:2b:f8:c2:29:fd:d9:a4:ff:01:85:41:e1:56:
3d:b1:cb:2d:3f:55:d8:d3:df:91:d0:6f:e0:56:1a:
f1:53:de:5f:32:29:05:28:0d:df:83:bf:f2:60:73:
8a:39:57:13:bd:8d:bf:11:29:14:d8:2d:55:05:6e:
e7:e3:b4:6b:f7:fa:ce:d2:9a:94:d9:2b:99:2c:9b:
d8:83:07:df:22:4f:1d:10:12:6d:72:9a:be:9f:02:
c9:7a:a0:39:a9:6a:66:fe:b9:e1:1b:18:be:bb:a8:
93:e4:75:48:66:fa:01:f0:e0:0d:b9:b6:41:30:1e:
66:e3:2f:6d:cd:36:85:03:db:c5:a8:fc:dc:54:4e:
e0:8f:d3:c2:fb:cd:90:e4:f4:7b:bf:67:e6:0c:3f:
7d:5a:eb:7c:70:04:62:14:09:a0:58:b7:1d:e4:ac:
e0:f2:9a:6a:97:66:f1:bc:29:30:99:26:24:e2:25:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:D5:3E:B9:51:B2:51:A6:2F:64:E9:1E:13:97:F0:B9:87:A5:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d75d0072-99c1-3915-ab58-f9d150386139.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.255.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:cc:a8:a4:3e:39:74:02:51:d1:8f:40:8e:21:57:80:9e:77:
86:a8:8c:df:f8:32:04:d4:ad:3d:30:92:c4:12:43:dd:21:48:
cd:14:41:44:9e:08:cd:3b:53:cd:e5:eb:ab:2a:b3:86:f8:3f:
79:fe:e3:29:54:33:e0:c5:37:c1:26:ef:96:d3:aa:92:7f:54:
2e:bc:46:30:bc:3a:b2:16:77:82:d5:ee:35:15:dd:2a:5e:13:
82:a9:90:a8:52:30:64:47:52:80:13:74:7c:59:b3:03:4c:47:
8c:de:35:8f:dd:32:13:c3:f5:e1:92:69:fd:49:af:4f:3c:72:
30:2a:b4:38:ae:b9:58:c4:a0:94:46:8f:10:c8:96:d7:1f:5a:
43:6f:92:d0:03:db:4c:7f:75:f8:2e:76:96:ee:91:fc:df:f8:
58:2b:56:f9:3c:07:2b:08:eb:52:6e:96:e8:24:68:e1:d0:2f:
e4:24:d3:e0:0b:5e:f3:31:b3:47:aa:81:eb:ec:14:e7:4b:cd:
97:17:18:e3:72:60:98:8a:0d:60:14:d5:d0:31:a2:19:6a:62:
d9:95:66:5e:ae:e4:10:ce:02:6e:d5:95:0a:4c:7f:5d:30:c1:
6b:64:b4:d5:ee:3f:0b:03:4b:15:53:38:e7:89:9b:64:07:9f:
7e:77:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:37:04 2025 by rpki-client