Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e102bb6-e04b-3a63-94bf-6876b833d3ac.roa
File: 9e102bb6-e04b-3a63-94bf-6876b833d3ac.roa (raw, json)
Hash identifier: rE2KWjwjkJE+0z+qgD9EQSmZwE9x+wlZicFYVY09el0=
Subject key identifier: B0:28:9D:89:37:FA:53:50:F3:E6:1A:AB:00:FE:F7:45:C2:0C:8C:A6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EDD15E2BBC79D567C4C2C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e102bb6-e04b-3a63-94bf-6876b833d3ac.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ed:d1:5e:2b:bc:79:d5:67:c4:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a77c0afa-16b5-4259-b2f7-7123c364f31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:2a:ff:97:36:d4:d5:13:b8:85:7b:49:10:
69:33:c9:9f:4f:9f:7c:f0:86:e6:19:f0:a9:88:a4:
fc:70:93:bb:e4:b1:9c:19:06:4c:ed:20:6a:55:26:
ec:fe:12:ee:5d:5d:64:84:37:38:36:ce:5c:d3:48:
9b:c8:47:eb:ee:fb:25:1b:c6:78:43:53:a9:5a:d9:
95:ab:df:5f:14:cd:6d:8b:e7:a6:26:8e:25:62:ca:
e5:cb:1e:ea:d9:98:aa:13:6f:0b:09:0b:3e:70:1c:
4d:4f:e3:f9:54:3f:c7:de:ef:bc:0f:fe:f3:7f:cf:
f4:1f:5f:0a:ae:97:72:b9:a8:90:8c:f7:a5:29:69:
4f:f3:50:23:23:b0:78:d6:93:5f:8a:85:77:fa:ef:
a9:7b:a3:62:ff:4f:5e:27:f8:9d:b3:40:2f:4a:d2:
66:d6:2b:1d:56:48:c7:97:15:05:ed:7a:9a:75:5c:
f7:8d:ab:85:71:b0:df:0d:06:43:44:bf:b8:d7:b2:
45:0a:30:96:b8:fc:64:bf:0d:fd:19:4d:ab:bc:23:
aa:a7:ba:44:06:07:e4:23:19:55:30:ee:39:21:b3:
b2:98:30:e2:36:c2:95:81:89:93:a8:34:12:0f:86:
fa:c8:ce:0b:b1:53:99:4f:85:3a:f6:2f:a0:8f:7e:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:9D:89:37:FA:53:50:F3:E6:1A:AB:00:FE:F7:45:C2:0C:8C:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e102bb6-e04b-3a63-94bf-6876b833d3ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:4d:a4:89:7d:84:7a:57:57:9e:64:55:e1:86:56:5a:37:68:
5d:66:13:37:02:58:93:b8:6c:9d:35:df:51:14:59:48:ce:20:
a4:92:44:8f:42:b9:14:fa:8d:f9:50:15:14:8d:2d:c8:b1:7c:
67:bc:e9:a4:5c:1d:1f:9d:3a:35:fb:0d:87:df:2e:a7:cf:d0:
ca:6c:64:ee:69:99:7d:4f:38:69:6c:4f:5a:c7:1c:22:9d:d3:
f3:99:5d:de:04:09:f7:6e:9a:6d:3e:a1:ea:3b:9f:58:c7:c9:
ab:5b:93:ba:1b:64:dd:81:4a:ba:f6:6c:20:2d:f9:35:ca:c0:
f8:71:3b:99:24:2d:35:bd:ff:f2:76:3e:86:6b:1a:5e:48:76:
f7:09:e0:13:b3:5e:34:3a:ea:ca:5d:b6:09:f8:50:2e:5c:81:
f2:7e:f1:b4:b3:60:b8:86:81:09:6a:e8:3d:0f:e4:96:e6:73:
c1:d7:13:7a:71:f4:20:88:a9:c3:09:f2:e5:ab:8d:cb:e0:84:
c4:e1:50:17:ad:93:c5:60:7d:8b:11:a7:99:a9:56:d0:2d:7d:
2d:d2:1d:2b:75:24:f1:84:9c:c6:4e:f7:dd:f1:85:73:8b:cc:
7a:53:49:85:9e:05:24:65:a9:46:68:33:e7:a8:29:52:51:61:
77:97:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:11:39 2025 by rpki-client