Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f377b744-fb80-3438-9aa3-fbb92cb124a0.roa
File: f377b744-fb80-3438-9aa3-fbb92cb124a0.roa (raw, json)
Hash identifier: QhnL6il2vsFoH/2AntUsZ5gzUUvSVqgK/QwkOIQIiLg=
Subject key identifier: ED:3F:9A:D8:08:B5:19:B9:EB:26:21:D4:13:90:B6:44:2C:23:B7:1D
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285846C51A72AD7E035E2B8406D720
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f377b744-fb80-3438-9aa3-fbb92cb124a0.roa
Signing time: Mon 05 Aug 2024 01:00:29 +0000
ROA not before: Mon 05 Aug 2024 01:00:29 +0000
ROA not after: Sun 03 Nov 2024 01:00:29 +0000
asID: 206
IP address blocks: 20.132.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c5:1a:72:ad:7e:03:5e:2b:84:06:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 5 01:00:29 2024 GMT
Not After : Nov 3 01:00:29 2024 GMT
Subject: CN=40dc4f39-b288-4369-9745-d1f68d01382a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:e2:2c:25:ba:99:67:06:5b:64:ef:6f:0c:
81:c3:c5:ba:ff:91:47:1b:36:af:55:c7:f3:13:b1:
d1:38:55:50:09:1c:5a:f7:72:53:6f:ca:b8:bc:c2:
bf:c8:1f:7d:69:18:eb:20:1e:4f:b0:b1:ce:6c:44:
d6:4a:c6:34:d3:03:c0:fa:73:3f:43:ad:02:b7:73:
ea:87:43:a6:ef:d5:52:15:a6:6d:0b:98:ef:42:d9:
6f:ee:d0:7f:48:77:67:f2:78:b0:d2:df:a5:bd:6d:
73:ca:c1:ac:93:e0:13:37:72:7d:26:a7:79:ce:35:
24:ba:e3:80:d4:1f:f2:8c:b2:09:82:dc:ae:54:3b:
2c:16:5a:75:2c:e3:55:14:11:f9:72:64:85:1b:29:
53:71:ea:7d:4b:6b:73:f6:94:07:ab:63:f6:ef:e5:
98:c6:d7:f7:07:de:a1:35:f0:b2:e3:12:62:d1:b2:
5d:2b:d4:b8:7c:20:39:98:eb:9a:d9:ff:e7:45:da:
d4:37:ef:e5:0e:62:1f:ea:d4:da:2b:21:32:bc:29:
90:75:18:21:0c:3d:25:55:c1:2d:aa:f2:67:20:8e:
dd:8f:a3:83:4e:bf:8d:fd:d3:d2:cb:20:64:0e:0c:
98:7e:c0:06:b5:28:4d:07:45:a2:99:44:14:ef:a1:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3F:9A:D8:08:B5:19:B9:EB:26:21:D4:13:90:B6:44:2C:23:B7:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f377b744-fb80-3438-9aa3-fbb92cb124a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.132.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:7d:48:da:dd:fc:5a:1a:ed:93:2e:29:5a:3e:27:16:4b:0d:
7b:99:30:2c:12:bd:e3:60:21:0a:10:35:3d:69:8d:0f:49:fc:
e1:5d:71:b8:0b:26:e9:aa:b0:c6:65:c9:8d:5e:8d:3c:c6:c5:
79:15:0d:ab:54:2c:58:8b:52:ec:61:8b:74:9d:3d:a5:4e:f6:
27:12:ee:de:9f:cd:5b:cb:99:83:5a:30:d8:f3:2e:31:e0:4c:
42:66:b2:39:b7:6e:08:f1:fb:8f:11:0c:0e:21:c7:f1:1e:6d:
bd:9e:0b:cf:a4:09:26:c2:ae:12:83:0e:98:07:d5:a2:08:20:
2e:a5:23:3f:3c:72:28:73:83:72:d0:e2:58:c7:9a:66:b1:2b:
6d:1f:cc:2c:0a:f3:ab:fe:0f:a5:22:e4:bd:54:a6:13:04:f8:
38:b2:c1:7c:1b:58:73:fb:0a:d6:cc:3c:ca:61:e9:21:82:0e:
e6:14:93:af:7e:8f:e4:90:70:eb:07:4f:05:8e:90:d5:b9:3f:
16:2c:6f:6f:e5:22:84:1f:12:a7:79:39:57:df:ee:47:0c:1c:
bb:fc:88:0b:35:1a:f0:7c:1c:30:be:ca:5c:91:4f:ca:bf:5e:
1c:6d:6a:62:ab:7d:d3:ae:02:20:00:7e:2d:10:80:64:e4:7c:
ee:e0:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:25 2025 by rpki-client