Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/21dfcd3e-dee4-3dfe-abf4-5c4f58de1dc5.roa
File: 21dfcd3e-dee4-3dfe-abf4-5c4f58de1dc5.roa (raw, json)
Hash identifier: ci7nMErTxWPKobVt6gNq8g4h5f340j5DJeAN8EDLMtU=
Subject key identifier: 23:87:E2:D9:34:0C:97:5D:8A:01:FE:11:7C:98:99:11:75:FF:E1:EA
Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial: 010D0C9F4328584476C4731ABC449AE1FE03D420
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/21dfcd3e-dee4-3dfe-abf4-5c4f58de1dc5.roa
Signing time: Sat 06 Jan 2024 14:00:20 +0000
ROA not before: Sat 06 Jan 2024 14:00:20 +0000
ROA not after: Fri 05 Apr 2024 13:00:20 +0000
asID: 60841
IP address blocks: 128.254.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:76:c4:73:1a:bc:44:9a:e1:fe:03:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Validity
Not Before: Jan 6 14:00:20 2024 GMT
Not After : Apr 5 13:00:20 2024 GMT
Subject: CN=7ee96412-59e9-4897-ac90-c739ba27a88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:8d:ea:e0:d6:0a:fa:91:09:9b:2e:a9:1d:
14:fe:28:61:78:4f:aa:e6:7f:74:3c:85:5d:67:6b:
dd:69:ec:ca:30:7e:32:77:35:bd:5e:60:2c:d7:b0:
b0:cf:85:e7:21:54:71:13:25:6e:27:e5:c2:e6:34:
c9:09:9d:ff:a1:cf:0f:1b:17:56:5a:e6:66:78:5b:
9e:0e:3d:68:c8:03:c3:73:50:7f:48:8c:d0:f9:2d:
e6:b5:f5:91:3f:0a:89:0c:0b:50:b9:6d:e6:94:69:
ee:42:d8:45:1b:2b:43:8f:25:f1:82:11:d2:42:b9:
28:dc:4b:de:c1:93:b1:33:34:9c:5a:13:5e:da:ce:
61:26:a3:36:1b:c4:41:fe:ab:a0:58:b2:37:f2:81:
45:69:ff:27:4a:d0:3a:dd:d9:e9:ec:3b:bd:0d:f0:
83:92:00:c7:d7:18:e3:f6:d6:de:e4:48:e0:64:38:
c0:01:fd:7c:02:d5:a2:11:11:06:87:81:fd:27:4f:
d0:f9:a6:2f:67:3d:01:01:c0:8a:e7:57:e7:b3:6a:
0c:f0:f0:2f:7f:fb:76:1d:a6:fa:06:14:ed:d0:79:
d3:29:5a:3d:2d:cd:20:5a:3e:46:da:f7:bc:a8:e5:
25:58:dc:49:b2:a2:47:a6:f1:96:80:79:9f:65:00:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:E2:D9:34:0C:97:5D:8A:01:FE:11:7C:98:99:11:75:FF:E1:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/21dfcd3e-dee4-3dfe-abf4-5c4f58de1dc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
X509v3 Authority Key Identifier:
keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:48:ff:46:e9:d2:df:1d:48:5d:c9:22:d5:fb:91:2c:48:48:
0e:e5:39:79:c9:8c:1c:73:53:09:92:b0:cc:c1:cb:6a:74:2b:
33:ba:a8:b8:b5:85:f1:86:84:4e:80:5f:36:fb:f4:1a:c5:9a:
b0:cf:1b:c8:00:b9:d4:18:83:44:1f:cb:45:ed:f5:43:bf:5f:
e6:1e:49:1b:bd:76:6f:b2:1c:20:e1:7d:81:0a:49:dd:c5:34:
3a:18:a8:0c:08:1a:b9:bb:dc:8e:71:10:3f:88:de:e6:b6:46:
6e:df:36:66:20:18:f1:39:29:6e:a0:0f:ad:2e:c8:c8:4f:70:
68:6d:22:0d:0c:56:51:ba:cb:29:ef:df:ab:e4:1c:90:63:10:
dd:49:3e:c2:5d:1f:11:c8:a6:81:0a:a3:2e:02:0a:52:af:fe:
2a:2b:fb:af:98:16:d4:56:51:8a:83:25:db:ce:24:b5:3b:5b:
50:e8:49:5a:c5:aa:ee:84:f7:63:ab:4f:c2:cf:14:99:f6:4c:
ce:ab:cb:16:35:09:ff:e7:e6:fd:2f:4e:5b:fe:2c:ed:ca:54:
97:8c:6e:b4:d8:b7:77:a6:47:30:0b:84:d4:6f:44:6b:ff:e0:
fa:9b:a0:af:0a:15:4e:69:60:6d:47:0f:d4:c2:4e:e1:5e:c1:
94:ee:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:12 2025 by rpki-client