Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/61df9d84-d499-3f7e-b229-60cd2bb25488.roa
File: 61df9d84-d499-3f7e-b229-60cd2bb25488.roa (raw, json)
Hash identifier: UCQIksjsbi7TT0oSV+CFBVVIn/R8oMCpgSrhgmN0vFY=
Subject key identifier: 09:FF:FA:A6:49:48:D0:7E:B4:99:69:2C:33:C7:F3:D1:D3:6B:AC:F8
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584605EC083816AF639716DF40C4
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/61df9d84-d499-3f7e-b229-60cd2bb25488.roa
Signing time: Tue 28 May 2024 13:27:38 +0000
ROA not before: Tue 28 May 2024 13:27:38 +0000
ROA not after: Mon 26 Aug 2024 13:27:38 +0000
asID: 17916
IP address blocks: 20.134.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:05:ec:08:38:16:af:63:97:16:df:40:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: May 28 13:27:38 2024 GMT
Not After : Aug 26 13:27:38 2024 GMT
Subject: CN=63ca78b7-4182-4a5c-8aaf-4fd499e04bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:f3:dc:f1:72:69:8b:bc:5f:db:05:46:9f:
2a:1c:69:f5:60:95:9c:52:4c:53:a5:79:77:94:7d:
0d:f4:34:0d:2c:41:af:1e:84:e0:c4:d2:93:52:ec:
43:ba:40:f9:7f:cd:e4:77:1a:5a:df:33:33:00:74:
d2:9b:b0:03:ba:23:4a:8b:1f:85:0d:d2:c3:9f:48:
f9:f9:2c:d0:11:41:14:35:a3:b6:38:f7:b7:87:d3:
5b:0d:64:f7:f6:b0:ed:da:9e:4f:07:fe:f9:04:5a:
de:89:34:ac:0c:08:ec:c8:0b:a3:45:e5:79:5d:60:
2a:60:cf:68:91:4b:13:d3:9c:c8:90:01:34:71:66:
45:89:6b:87:21:2b:fa:1e:ec:31:fc:a2:ff:02:8c:
61:1f:e2:5b:ad:15:ec:43:8c:28:a9:2e:41:b2:10:
ba:dd:43:9c:79:f9:58:e5:ce:ca:b9:69:e0:f0:93:
05:7a:48:7c:97:70:2b:eb:76:49:9d:fe:c8:5b:41:
62:a1:78:56:4f:ba:f5:8a:f0:28:d3:85:f0:18:c5:
d2:87:d0:c8:4c:af:6d:1c:a0:6b:f4:c4:b0:1c:e7:
8b:96:d1:78:12:95:4e:8d:f4:8e:20:30:fd:63:32:
75:2d:b8:b0:51:08:61:9b:b9:03:d5:3b:e2:aa:82:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:FA:A6:49:48:D0:7E:B4:99:69:2C:33:C7:F3:D1:D3:6B:AC:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/61df9d84-d499-3f7e-b229-60cd2bb25488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:e4:81:7f:1e:b9:fa:d5:5b:d8:33:3d:6f:60:8b:df:62:bb:
00:30:d8:ff:28:4d:54:a2:0f:e2:d7:e9:01:cd:6a:06:7a:54:
54:d4:d5:56:5b:3f:6c:3a:b1:a3:35:bb:d4:5a:8b:f9:e0:7a:
cf:bd:aa:c2:85:aa:90:7c:12:80:b0:a1:9f:75:64:4e:58:66:
70:40:1a:c3:4f:c4:32:e7:51:bb:8c:0e:34:4d:dc:7f:e9:57:
28:63:3b:3a:fc:0a:bc:a7:a8:49:22:55:c3:ca:25:bc:35:7f:
1b:9e:66:0d:3d:5d:c5:72:e5:83:1e:ec:c5:1a:73:c1:bc:71:
b1:c4:99:ec:9d:c4:30:d7:bf:d1:65:d5:4a:fa:7a:8a:f2:24:
88:8c:c9:33:62:a4:c1:88:51:79:62:93:45:6a:29:ef:80:ae:
e0:3b:0e:32:21:d2:3b:6d:4b:1e:8b:04:9f:6f:0b:f7:f7:b6:
00:75:14:e2:7c:e8:a0:7b:44:f0:ff:ea:8b:d5:3e:1a:50:37:
0c:b5:e6:4a:f2:af:96:91:70:df:85:c1:40:13:68:4f:29:ab:
69:48:95:48:0e:d1:92:d5:a3:77:c6:b5:e9:f0:06:de:ba:b7:
c4:bd:55:63:04:7b:74:8c:c4:ab:14:2e:d2:bf:4a:e2:43:f0:
a9:b1:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:46 2025 by rpki-client