Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f70f0a9f-1ee7-3c4d-b42c-1a4083c6d606.roa
File: f70f0a9f-1ee7-3c4d-b42c-1a4083c6d606.roa (raw, json)
Hash identifier: 8fy6AjDe4q3BgXTz1bLuOxrxNn8dOdhUwkS2FeuCIeo=
Subject key identifier: 35:52:E6:13:6E:52:3A:CA:0B:30:3B:E6:8E:70:FF:73:01:5C:B6:13
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B3EEC2C5EAF85257FF9E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f70f0a9f-1ee7-3c4d-b42c-1a4083c6d606.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 173.255.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b3:ee:c2:c5:ea:f8:52:57:ff:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7924d891-7312-43a0-b491-7adf8f619020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:c9:36:3d:c7:6f:58:97:ba:c1:0d:ed:dc:
7f:1b:e2:bb:61:09:8f:a9:12:d7:61:aa:7c:1d:15:
27:d2:8b:ef:c8:97:75:49:30:5f:51:0d:28:a8:f0:
15:c5:03:5c:8c:6e:3a:93:39:04:9e:84:55:41:37:
d9:49:70:63:d4:f5:44:ad:ef:db:e2:a7:fd:7b:c0:
5e:a8:59:8b:c5:6d:ff:a5:3f:83:b5:ac:72:9f:4f:
3a:6e:ba:42:58:25:3d:18:9c:c8:8f:00:38:f9:de:
ea:50:e0:9d:4c:8c:d0:3e:e2:5a:42:d8:c9:7d:f6:
52:d5:ef:0c:0a:56:d3:ca:1c:d8:a1:46:91:93:bd:
0a:b8:ee:df:63:ef:b8:cf:4a:74:4f:a8:0d:8e:78:
c8:fc:8a:8e:37:8f:09:ea:c7:d1:4c:b8:d5:4c:4a:
4f:d1:33:72:2d:5a:3a:64:31:87:a1:a2:71:4a:c1:
3f:ba:c3:da:f1:a1:49:96:e7:27:e3:43:ad:f0:4d:
9c:be:9c:d9:fc:54:8a:c2:cb:80:fe:29:7c:c4:6b:
f1:8b:8a:68:5c:26:34:bf:0f:56:6a:4a:a7:af:11:
45:7c:2a:7b:d7:d0:3c:f8:ad:fe:46:3a:74:92:a9:
9d:da:c1:3f:08:62:e7:62:de:61:6b:06:81:25:e4:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:E6:13:6E:52:3A:CA:0B:30:3B:E6:8E:70:FF:73:01:5C:B6:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f70f0a9f-1ee7-3c4d-b42c-1a4083c6d606.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.255.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:bf:b2:d9:6d:10:9c:68:62:48:d3:76:81:87:de:14:8f:d7:
34:98:95:6a:4c:70:8b:aa:a7:6a:54:8b:a6:cf:5c:60:6f:67:
ff:ae:01:ab:77:96:f7:83:a4:e7:f8:7f:ff:c5:ad:60:ac:0e:
1e:cf:c7:be:b0:cc:95:98:80:8a:6b:31:b7:a4:83:99:3a:6d:
f9:9f:dd:aa:36:97:4b:b7:1c:99:ab:d0:e8:10:8d:e5:03:5f:
3e:85:c7:4b:4e:58:a9:6f:e8:b4:3d:34:47:a7:93:64:16:d5:
cc:ed:32:3a:cf:b6:b2:77:43:7d:e0:b2:7f:de:7d:40:ba:95:
83:54:e6:88:07:8f:df:a4:27:9c:66:66:e8:e4:5d:1b:59:c2:
d8:83:f9:79:31:ee:26:0b:9c:ac:a1:55:02:aa:14:3f:14:b0:
9a:3e:04:0b:2e:1b:fb:7f:0c:7e:b5:5d:96:3d:43:93:fe:80:
2e:fa:fb:02:be:5a:50:fa:46:5c:e3:85:08:17:22:20:5e:12:
ca:be:9b:46:ad:46:76:9b:ab:af:b7:76:87:36:08:32:17:99:
b0:eb:d4:d4:0d:8a:67:55:52:8a:97:5e:89:f1:f6:55:ab:d2:
da:2a:ee:9f:97:9b:f7:54:01:b0:1e:2f:5f:ee:2e:3b:68:2a:
a6:b5:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:07:54 2025 by rpki-client