Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d601531d-2d62-3571-a279-c880f9690c92.roa
File: d601531d-2d62-3571-a279-c880f9690c92.roa (raw, json)
Hash identifier: YajFJeDopK2sFAsdtnR/u5usxJYsng6YviTI4PRDkt4=
Subject key identifier: DE:52:EE:D6:DE:B2:0C:CD:F3:FB:86:34:79:A9:80:D5:4F:6E:03:82
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A651027DCA10CBB3A2A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d601531d-2d62-3571-a279-c880f9690c92.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 172.217.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:65:10:27:dc:a1:0c:bb:3a:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=043b49c6-3cb9-4fc1-86b4-771327d31f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:13:79:59:05:cd:58:85:0d:eb:7d:00:b6:
9e:1c:64:bc:31:71:23:a0:d0:36:d1:bd:a9:20:69:
04:70:58:8b:a9:12:b0:b7:2c:05:9a:f1:da:c4:7b:
08:75:ad:fc:f8:66:e0:5f:51:a5:3b:12:4b:76:92:
d4:27:6a:52:0e:b2:cd:5f:45:bc:6a:f3:37:db:8a:
2f:36:36:31:78:57:c1:35:06:ed:68:d9:28:98:a3:
35:7e:49:b7:47:31:68:0b:ca:92:70:b1:0e:82:25:
56:57:18:d4:26:b6:8b:01:ed:f5:06:ec:e0:33:07:
54:11:e8:b1:0c:3a:4d:34:d4:f6:93:3f:26:5f:aa:
a1:0c:4d:aa:27:12:27:fc:9f:49:df:f1:eb:4f:52:
92:95:05:fb:bb:ff:19:47:3e:ee:ca:7a:9e:d3:9d:
0d:e6:f3:ce:0c:e5:2b:23:e5:fe:1e:37:5a:37:0a:
0a:0e:0a:d3:fd:d2:90:4e:56:fe:f4:b5:98:b2:d0:
80:13:85:62:13:61:93:31:2f:23:4d:4e:4a:d6:6c:
be:99:07:5f:56:b6:3f:48:07:6d:38:cf:ba:a0:79:
33:29:59:3e:35:89:ed:dc:49:e8:ec:dc:8a:e4:62:
98:e9:99:ff:f2:c0:2a:fa:87:08:73:f7:d7:10:3f:
11:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:52:EE:D6:DE:B2:0C:CD:F3:FB:86:34:79:A9:80:D5:4F:6E:03:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d601531d-2d62-3571-a279-c880f9690c92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:1d:24:32:d2:69:3d:2e:ae:0a:45:cb:39:23:86:4b:94:a6:
c3:97:8b:d2:99:cd:59:8a:28:9f:70:a0:29:68:5e:e4:7d:5c:
62:43:1b:a3:a3:a1:0b:d1:f0:cd:cf:12:d5:dc:a4:6a:e9:7e:
c6:bd:ae:45:54:db:9a:3a:a7:78:05:d4:c6:74:27:94:7f:59:
9d:91:5c:c8:04:5d:37:3b:1d:d1:3f:dc:c7:6f:7f:e3:81:29:
ef:97:bb:79:de:30:2e:99:a3:7e:12:ad:08:ed:50:cf:a6:de:
f4:a9:20:3d:33:f2:77:9b:d1:6d:73:60:9d:6e:e8:00:04:82:
3c:3f:86:49:87:0a:fa:5e:36:68:ed:c6:a5:f2:76:bc:f4:da:
03:36:21:48:2e:db:0b:10:11:fc:0c:89:07:cb:6a:09:9c:6b:
46:0d:04:ed:16:d9:07:34:d2:14:85:61:d3:88:00:f8:e0:9e:
dd:ea:6f:b5:eb:6d:73:8f:03:6b:c6:12:0f:00:db:63:ba:8f:
e8:6a:c2:08:4f:d1:7f:14:b7:5a:ad:55:b0:c7:a3:94:94:72:
46:aa:d6:2f:a7:d6:7c:66:c0:95:49:02:e5:70:c9:dd:40:30:
df:d0:51:b8:ba:68:38:aa:e8:ee:b3:9b:5d:9e:07:3e:09:90:
7b:2b:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:15:44 2025 by rpki-client