Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/be466bff-4a91-3bad-b373-c955361a855e.roa
File: be466bff-4a91-3bad-b373-c955361a855e.roa (raw, json)
Hash identifier: v1igMpeuGZTgLVGRSmAL/rKtiRpN/B5zZP6a3rA4pxs=
Subject key identifier: 55:0D:7B:65:4D:12:3A:65:6C:66:C3:47:B2:E0:E1:FF:E1:FF:A7:5E
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584659DCC1BB4DD0A55DF4611C40
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/be466bff-4a91-3bad-b373-c955361a855e.roa
Signing time: Thu 27 Jun 2024 15:04:45 +0000
ROA not before: Thu 27 Jun 2024 15:04:45 +0000
ROA not after: Wed 25 Sep 2024 15:04:45 +0000
asID: 4237
IP address blocks: 20.138.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:59:dc:c1:bb:4d:d0:a5:5d:f4:61:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jun 27 15:04:45 2024 GMT
Not After : Sep 25 15:04:45 2024 GMT
Subject: CN=c79664c4-4ed5-469c-80c9-f4c2f63fe487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:a9:64:6d:16:59:26:4c:da:75:df:7a:72:
4e:0e:8c:39:90:4e:e6:d8:3b:3c:c0:ed:26:12:a9:
dd:f2:f3:05:2a:c7:af:3d:40:1b:66:77:12:2b:d9:
7c:25:ba:b4:9e:dc:e6:7c:a7:a5:5d:2f:14:80:7d:
ed:b1:85:6c:81:3f:e2:16:09:b7:d4:34:b7:16:c1:
f2:4c:56:f7:9b:ec:68:8a:0d:e8:2d:d2:b9:cc:24:
6c:eb:26:fd:bb:8c:3b:cd:00:ad:dc:5a:bb:df:2b:
e4:32:80:7b:c4:fc:b1:70:af:9b:c0:e2:80:ac:2a:
c8:13:f1:15:40:15:e0:81:5d:29:06:f3:7f:a5:43:
1d:03:2a:8c:1d:26:55:61:97:2a:bc:20:b3:3f:5c:
33:76:86:1e:ec:5b:d4:10:7f:e3:31:de:f3:36:9b:
26:2d:8e:ce:78:29:83:c4:6f:2d:8d:b0:bd:36:14:
45:b4:ba:f2:ec:ac:6c:73:44:e4:b2:c3:10:fd:f5:
76:9a:58:15:6f:83:be:a6:94:0b:20:87:a3:db:96:
c7:e9:0b:d9:59:80:d9:c7:05:6d:98:cf:0b:58:c9:
17:12:cc:32:6a:72:c3:dd:b3:55:e4:d2:2a:65:1a:
cd:c5:8b:1c:ea:56:db:13:5a:66:aa:09:a1:db:dc:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:7B:65:4D:12:3A:65:6C:66:C3:47:B2:E0:E1:FF:E1:FF:A7:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/be466bff-4a91-3bad-b373-c955361a855e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:5b:04:f3:a6:43:cf:57:0b:b2:0d:c6:68:6a:81:ef:98:e7:
c7:6d:24:c8:f2:4f:88:b1:f4:6e:b5:52:e0:11:8c:2a:6a:01:
0e:68:76:b3:0c:35:16:4b:e5:ef:22:aa:02:f5:2f:e7:eb:89:
cd:ea:aa:c7:4d:2a:13:a6:f0:06:a3:89:0f:08:f4:5f:a1:70:
b6:76:ec:1b:8b:82:18:07:cd:b8:45:eb:6a:15:d3:2e:15:74:
fe:08:08:bc:9e:83:95:d7:cb:2c:62:cb:c1:73:7c:df:07:03:
66:3c:15:62:2d:17:d2:46:eb:8f:71:c3:f2:84:dc:43:26:05:
19:25:27:d9:4d:a4:c2:30:80:8d:2d:76:72:52:1e:0d:05:ce:
1f:9c:8f:79:79:cf:dd:36:5b:5a:ae:cd:78:ec:02:29:af:6e:
fe:a2:ea:4e:39:58:0f:c9:31:95:5c:21:a1:e3:63:61:87:f6:
b0:2c:ad:34:a7:db:ec:fc:0a:33:be:a1:7c:e6:92:b8:bc:91:
3d:cc:82:31:1b:b1:77:20:86:a3:74:fe:55:7f:f5:8f:30:0c:
f2:10:ea:d9:ed:73:0a:17:42:74:b3:ec:e0:77:8d:f7:cc:3c:
86:9c:e0:3f:8a:90:2b:f3:4f:37:20:75:bc:09:08:d0:6a:16:
aa:89:46:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:03 2025 by rpki-client