Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/036de4f4-d1b1-3d28-aa8a-65c90482877e.roa
File: 036de4f4-d1b1-3d28-aa8a-65c90482877e.roa (raw, json)
Hash identifier: rUACIVshzxUwnHYBxyFkDSPq9+2S/gGGDBOngT34CLQ=
Subject key identifier: B8:02:78:E4:4C:82:57:F6:1E:EF:AF:4E:D4:63:12:DB:B2:C8:E4:C3
Certificate issuer: /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial: 010D0C9F4328583FB6DD4044672C8C27ABD59000
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/036de4f4-d1b1-3d28-aa8a-65c90482877e.roa
Signing time: Fri 03 Jun 2022 13:44:19 +0000
ROA not before: Fri 03 Jun 2022 13:44:19 +0000
ROA not after: Sat 28 Oct 2023 04:00:00 +0000
asID: 211585
IP address blocks: 206.251.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b6:dd:40:44:67:2c:8c:27:ab:d5:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Validity
Not Before: Jun 3 13:44:19 2022 GMT
Not After : Oct 28 04:00:00 2023 GMT
Subject: CN=af060760-b88a-44b8-a44e-66485b1d2790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:fe:4c:66:cd:37:b0:62:16:1c:21:4b:1a:
e5:29:e6:06:4d:0c:32:2f:99:68:7e:d7:7d:90:27:
7a:68:0d:12:9d:f1:c0:1d:85:55:8c:50:e4:a2:e5:
94:a0:e4:66:9e:31:09:9a:19:41:eb:b6:6f:37:60:
7b:79:f7:13:52:cd:af:15:ec:e9:61:8e:9f:70:ee:
23:5b:c6:62:43:73:c2:c8:a8:42:6a:f9:b0:f2:11:
a8:c8:f2:c7:46:50:29:8e:99:71:5d:24:8d:32:15:
6f:87:3e:21:41:61:fa:c3:47:5f:c8:ed:78:6c:68:
c4:ae:9c:4c:51:8b:65:32:af:98:44:fc:a3:37:9f:
17:9b:c8:25:ac:a3:31:e6:4d:4b:43:a7:8e:96:61:
33:97:0c:f1:7b:d9:21:9d:96:a1:3c:ce:94:90:23:
b6:45:0f:ce:96:0c:f2:c1:c1:8f:e1:29:f6:46:7a:
ac:d1:91:28:94:ad:6f:51:14:ad:8e:76:6d:a8:db:
88:7c:61:37:aa:39:24:d0:4d:ae:9a:97:a7:a5:dd:
e7:be:62:d5:bf:81:59:26:85:fb:1c:46:18:ae:4d:
f3:52:aa:d2:85:7d:92:55:ad:00:f6:82:7f:79:ff:
da:85:24:92:41:1e:57:bf:4e:dd:8e:86:54:b8:3c:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:78:E4:4C:82:57:F6:1E:EF:AF:4E:D4:63:12:DB:B2:C8:E4:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/036de4f4-d1b1-3d28-aa8a-65c90482877e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl
X509v3 Authority Key Identifier:
keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
sbgp-ipAddrBlock: critical
IPv4:
206.251.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:9c:43:50:7e:95:58:4f:8b:61:d3:19:d2:00:2f:f3:cf:83:
7f:cc:cb:1d:3f:96:b8:cf:be:99:30:ae:36:1c:f6:85:f0:be:
58:c8:55:02:07:f1:a5:dc:bb:0f:00:2c:d0:dd:a8:c4:85:76:
28:c8:a6:b8:66:5e:ec:26:f1:e7:be:21:c2:cd:8d:c3:27:5f:
d9:11:c6:ef:cf:24:1b:ed:57:96:47:fa:5f:86:ce:b9:76:74:
ce:d9:ce:cd:6a:42:20:19:61:93:b3:0d:86:31:f5:b7:fb:e6:
e4:b6:59:40:93:50:62:60:0f:f3:d5:6c:1e:84:f6:e8:75:d0:
48:b0:a8:11:c2:c6:81:42:04:cc:bb:3b:ba:1e:cd:06:ad:2d:
d1:7f:4f:87:3e:16:12:92:78:0c:c3:06:db:ed:1b:5c:1f:2a:
4b:2e:8c:56:7f:42:e5:8c:ed:13:84:f0:f9:fa:c7:26:73:e7:
a6:1a:f7:d9:bf:00:4d:4e:7e:20:e5:e9:6b:8d:2a:38:40:14:
29:f6:cf:f7:04:3c:da:51:b7:09:1f:d9:db:3d:21:c7:cf:12:
d3:1e:db:57:46:bb:1b:dd:7d:b1:a9:d1:e7:0a:98:f5:e3:ba:
58:b4:91:ac:3e:02:1e:13:bc:d0:70:2f:f9:63:3a:60:7a:67:
d8:a4:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:11 2025 by rpki-client