Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/174f55a2-4a21-3d62-b360-6dddf1a5500a.roa
File: 174f55a2-4a21-3d62-b360-6dddf1a5500a.roa (raw, json)
Hash identifier: z1VLK7YCTPRK7YJxlws9wykq8FwofLLvrt+5jTxCdvg=
Subject key identifier: AE:3B:27:01:4B:11:65:A2:08:99:65:FD:0A:FC:8D:C8:11:27:40:C3
Certificate issuer: /CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Certificate serial: 010D0C9F432858489C1274A7DF2C4BFCF17E9A40
Authority key identifier: F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/174f55a2-4a21-3d62-b360-6dddf1a5500a.roa
Signing time: Mon 20 Jan 2025 17:50:11 +0000
ROA not before: Mon 20 Jan 2025 17:50:11 +0000
ROA not after: Sun 20 Apr 2025 16:50:11 +0000
asID: 27501
IP address blocks: 64.72.96.0/20 maxlen: 24
103.25.144.0/22 maxlen: 24
103.78.160.0/22 maxlen: 24
103.85.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9c:12:74:a7:df:2c:4b:fc:f1:7e:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Validity
Not Before: Jan 20 17:50:11 2025 GMT
Not After : Apr 20 16:50:11 2025 GMT
Subject: CN=165805dd-3b94-4146-9c91-467edf0d1246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3e:19:9d:5e:5b:74:3e:bb:1c:59:4a:0c:57:
c2:fb:bb:32:04:e8:69:33:be:be:aa:c9:1e:65:15:
b0:6d:df:e8:cb:f4:f9:b3:99:f8:2e:b2:d0:ca:c9:
4f:22:23:14:8f:83:77:79:6c:96:ed:50:fb:38:3e:
3f:6c:e8:49:6a:66:a6:a0:f5:f6:e9:d0:24:c3:25:
67:bd:89:fc:6b:31:f6:fa:dd:a5:86:0e:2f:80:8e:
c4:34:69:3d:7b:05:45:09:f7:29:f7:8a:7b:52:ef:
24:6e:a7:c6:e0:04:b2:a1:e3:97:f7:26:50:e1:03:
ef:e5:64:8f:2e:57:88:71:5b:b3:8f:38:71:42:76:
ad:4d:34:05:44:7c:26:5b:b2:d0:c1:a3:ce:fc:87:
52:ff:a4:3c:4c:69:7d:64:9a:fa:21:90:3b:d7:6a:
f8:25:e5:3b:9f:a6:64:36:5d:4a:0c:cd:5d:e1:60:
9c:4f:65:9d:b7:78:fd:e8:b8:53:42:d3:c4:55:cd:
f0:3f:4d:18:f9:0f:f0:05:76:fb:da:91:48:aa:6b:
6b:90:76:a2:34:ac:95:2a:18:54:dc:0e:76:e6:ae:
ad:93:e9:a0:d8:3f:df:00:31:0f:4c:bf:56:cb:9b:
b7:bf:c5:37:c0:7e:0f:ed:33:91:2e:c8:98:c2:c8:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:27:01:4B:11:65:A2:08:99:65:FD:0A:FC:8D:C8:11:27:40:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/174f55a2-4a21-3d62-b360-6dddf1a5500a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl
X509v3 Authority Key Identifier:
keyid:F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.72.96.0/20
103.25.144.0/22
103.78.160.0/22
103.85.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:b5:61:5e:a6:8a:01:55:9b:ee:20:a2:c1:9e:14:a0:1a:63:
b6:9d:84:99:37:4b:86:4a:fc:43:ac:27:8e:2a:ef:2b:10:34:
9a:37:21:67:c0:59:56:16:9b:e6:da:e2:33:f8:59:5b:42:3c:
b7:d0:3c:11:cd:97:41:93:bc:c1:00:84:3b:2d:2d:4a:35:a2:
f0:91:c4:50:bf:73:5e:b3:55:4e:d4:c6:ad:d0:0b:71:da:55:
a2:05:4d:2b:c1:e4:c7:c1:86:fb:87:b1:aa:b0:ec:f1:92:67:
67:5b:c6:83:ee:c3:97:74:6f:5c:3c:ad:f4:8e:65:e0:a0:b2:
62:c2:ff:35:16:b6:1b:bf:78:85:e5:41:e5:bb:ad:a0:37:ef:
79:f9:04:66:bf:77:3a:e1:08:0d:42:6b:83:a7:62:12:97:ad:
94:6a:eb:08:0c:63:6c:ca:8e:ff:4b:34:44:8d:b7:d0:5c:c2:
3f:81:11:d5:cc:15:d3:46:3e:54:ac:09:7e:7f:fa:4f:e3:8c:
ce:21:4d:d2:02:d6:9c:e6:5a:09:af:2f:8c:46:fb:71:ae:e3:
5f:60:d5:b5:44:ed:6a:c6:8c:e5:0c:01:7b:21:85:97:8e:f4:
c7:4b:0b:fb:fc:5e:fe:6d:7b:83:8b:7b:cd:25:dd:e9:aa:3b:
b4:30:e6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:18:42 2025 by rpki-client