Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec382bfe-e6cc-308d-9e4b-2d017234b56c.roa
File: ec382bfe-e6cc-308d-9e4b-2d017234b56c.roa (raw, json)
Hash identifier: E1nfiZspKrwrm1aTlzbbC6VNYnpFrKyweIpuygwOvW0=
Subject key identifier: E4:B3:CA:95:B1:F4:ED:B6:6D:4A:42:08:3B:1D:34:BA:BD:B0:07:81
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6305983583ADECAA5B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec382bfe-e6cc-308d-9e4b-2d017234b56c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 74.125.66.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:63:05:98:35:83:ad:ec:aa:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=955688b0-d779-4401-8954-fa063934e751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:60:33:fe:d3:a9:8c:57:51:53:7f:3a:46:
d3:87:b4:2e:e7:f7:35:a1:d4:c1:02:ea:6c:e8:a0:
d2:9f:08:da:bf:e2:42:cb:85:1e:74:82:6b:11:d8:
90:67:35:0c:f5:17:87:1d:46:b7:d5:74:c2:3b:7c:
fa:b5:81:a4:59:b6:05:35:dd:5b:79:45:8c:60:03:
90:30:e9:67:40:5b:de:a6:89:56:4a:f4:d7:fa:92:
2b:da:08:4e:f4:58:2d:f7:29:22:71:f0:14:f8:28:
d1:dc:ed:1e:a2:bc:f2:39:48:ec:9d:a3:10:ad:12:
b6:ee:bd:de:1a:53:de:99:87:e2:9f:7e:94:5d:87:
cd:dd:64:74:22:9c:1e:06:46:25:67:5c:2d:50:a3:
76:37:43:e7:b1:06:90:67:d5:d6:b6:b4:18:b6:32:
1a:69:92:bd:7c:c9:40:7e:50:4a:8e:d2:6e:d0:93:
54:5d:80:b0:d6:12:c3:22:81:99:6f:c9:23:bb:03:
b0:3e:bb:6c:9a:77:80:be:8e:80:ba:82:bd:03:66:
fc:e9:0f:d3:4b:65:b6:30:b7:66:ab:72:84:5a:91:
d9:bf:f5:4d:eb:62:92:da:a2:4d:e5:98:93:fd:d5:
fc:2c:8c:23:0c:7d:3a:99:be:a1:4d:32:6c:86:d8:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B3:CA:95:B1:F4:ED:B6:6D:4A:42:08:3B:1D:34:BA:BD:B0:07:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec382bfe-e6cc-308d-9e4b-2d017234b56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.66.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:31:4f:03:d5:29:dd:91:eb:22:37:e5:0d:0b:bd:a1:c6:ea:
7a:cb:32:32:61:be:eb:15:fd:d5:e2:29:a5:4c:2b:cc:ee:a4:
8a:f5:11:28:35:0a:88:c2:94:6f:93:08:b6:54:ac:32:48:87:
37:b3:ce:4a:da:8d:49:dc:60:86:2e:d2:75:d3:63:c3:17:d4:
33:4e:30:8a:39:a7:b1:34:1a:f8:99:03:da:67:30:a4:be:84:
16:1d:5b:f9:a0:bb:1f:e9:0a:31:59:5f:66:3a:cb:9c:5c:1d:
6f:56:27:f7:75:be:54:51:36:9d:72:9b:d4:49:9a:04:a4:81:
82:b1:e0:77:32:2d:01:6b:cd:d7:11:d0:91:84:a5:d2:44:6f:
04:9d:05:ae:da:db:34:c9:f2:3c:25:8a:f1:dd:cc:c0:03:a0:
f7:57:04:2e:ff:8f:b4:9b:dc:d8:2b:e5:d6:1d:24:29:1e:a5:
21:1c:0a:07:d2:6e:9c:74:fc:4b:f9:12:cf:09:b2:09:4b:4c:
34:a6:4a:92:75:2a:07:74:a9:f0:48:ff:e0:91:93:45:83:dd:
08:c6:be:b2:9c:08:78:71:03:a7:22:bb:92:16:97:3c:1b:8d:
a3:5e:e6:5f:d6:65:18:c2:4d:a0:b2:6d:86:56:c1:6a:78:34:
fe:f1:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:55:54 2025 by rpki-client