Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/2c544e86-4965-3646-8529-accc3ec40200.roa
File: 2c544e86-4965-3646-8529-accc3ec40200.roa (raw, json)
Hash identifier: MHlq8YGe8prE01fg6KgEq0d0lAOZC6m2E6XLmjW6z8M=
Subject key identifier: 64:35:CC:8B:0D:B2:BC:D4:F5:09:A0:65:E5:29:FF:4D:4A:AE:44:A8
Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5
Certificate serial: 010D0C9F432858461A4B11485E8BC1306D604880
Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/2c544e86-4965-3646-8529-accc3ec40200.roa
Signing time: Tue 04 Jun 2024 20:35:17 +0000
ROA not before: Tue 04 Jun 2024 20:35:17 +0000
ROA not after: Mon 02 Sep 2024 20:35:17 +0000
asID: 8075
IP address blocks: 168.137.68.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:1a:4b:11:48:5e:8b:c1:30:6d:60:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5
Validity
Not Before: Jun 4 20:35:17 2024 GMT
Not After : Sep 2 20:35:17 2024 GMT
Subject: CN=3d96f1c5-df35-489c-8590-e0178fcf4dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:7a:01:98:b1:fc:ac:ef:52:85:b2:d0:dd:
e5:3f:90:d5:38:7a:28:24:eb:9f:ee:cc:02:a8:8b:
2d:9f:8d:16:a4:cb:2f:d2:70:41:bd:1c:0a:0e:4c:
90:3c:c7:17:5e:ab:9f:24:27:00:4d:97:d8:73:f0:
33:f8:86:09:4f:88:ee:d6:2b:50:de:0a:de:6b:8d:
35:04:52:e1:b0:f3:77:b2:25:07:65:55:65:f5:74:
26:c0:7e:b6:34:cc:bc:20:cf:37:ce:53:f2:d5:2e:
69:66:91:21:ca:54:f9:ed:29:a2:1e:fa:dd:c7:2c:
c2:e5:e1:22:4c:7d:c8:5b:c2:68:f7:58:15:9a:f1:
f5:11:13:48:11:1c:aa:05:f8:7b:56:64:e0:e9:77:
87:e0:81:f7:99:7b:65:30:b3:bc:9b:6e:fb:a7:45:
28:a2:21:b5:66:86:a6:fe:87:38:79:d0:b8:ae:c6:
b4:31:e4:ac:3d:1b:67:38:78:12:7c:7c:07:2c:09:
a3:c8:ce:b2:52:1e:27:05:c2:05:ef:82:4c:fc:a2:
b1:38:83:86:46:4d:f7:cf:81:7a:f7:6c:c6:d8:55:
c7:ce:27:a4:33:ce:c7:ac:ed:07:9e:5e:83:e8:70:
36:6c:73:b3:9b:af:cc:6e:9d:cc:24:fe:16:8f:ff:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:35:CC:8B:0D:B2:BC:D4:F5:09:A0:65:E5:29:FF:4D:4A:AE:44:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/2c544e86-4965-3646-8529-accc3ec40200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl
X509v3 Authority Key Identifier:
keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer
sbgp-ipAddrBlock: critical
IPv4:
168.137.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:c2:d7:6e:e5:38:c9:72:38:42:c4:52:4a:25:d9:65:36:de:
77:84:bb:b0:c2:57:3c:68:04:3f:b3:3a:e4:aa:e2:d3:66:35:
c9:9f:f2:95:0f:1a:31:ad:f5:71:62:de:97:f7:1e:14:a1:24:
0d:93:fc:ca:d8:42:de:f7:c1:4f:55:df:43:d5:01:9f:80:9f:
86:0e:62:bd:ed:7f:1f:33:c7:3c:73:c2:75:e3:c8:c2:b7:e3:
b4:6f:a1:be:d1:5c:64:ff:02:dc:04:bd:a4:2c:89:34:02:56:
2f:4b:2f:64:11:d1:e4:3a:b0:73:e7:9c:84:df:60:fd:eb:86:
29:45:d3:78:48:c2:a0:55:96:58:df:e7:37:1f:60:ba:51:a9:
9b:64:a6:5e:1c:89:73:18:a4:c9:02:98:67:dd:c5:29:45:8e:
0d:fc:4e:d3:97:7d:15:28:09:06:4e:eb:a4:90:ca:81:a5:dc:
7d:0d:5f:33:68:5a:c0:52:43:68:cf:06:9d:90:6b:a7:17:8f:
1d:db:5a:5d:b4:6d:e5:db:2b:1a:c5:3b:fa:04:70:2d:7a:b7:
e7:39:5d:7f:b2:16:f8:0d:2e:43:ce:bd:5e:f7:50:47:ef:f1:
8b:62:1a:f5:94:f0:a7:45:69:6d:4f:06:71:27:e7:6e:5c:3e:
22:f5:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:30 2025 by rpki-client