Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa
File: 7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa (raw, json)
Hash identifier: /7fyndCtEkWG5wb66+zrbRyjcosaF7IC2BA0GOW9EcM=
Subject key identifier: 92:D9:55:3B:32:B3:9A:0F:EC:68:18:51:C8:28:07:B3:09:27:F2:5A
Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Certificate serial: 010D0C9F43285847967BCA5BE10A757546D231D0
Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa
Signing time: Sat 19 Oct 2024 01:00:33 +0000
ROA not before: Sat 19 Oct 2024 01:00:33 +0000
ROA not after: Fri 17 Jan 2025 02:00:33 +0000
asID: 16509
IP address blocks: 209.240.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:96:7b:ca:5b:e1:0a:75:75:46:d2:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Validity
Not Before: Oct 19 01:00:33 2024 GMT
Not After : Jan 17 02:00:33 2025 GMT
Subject: CN=cfc82a1a-aad5-4218-aa5c-7580690e8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:26:78:85:b5:bd:c2:1d:e2:6f:51:01:e7:
98:56:56:f5:8b:d2:31:5d:3f:93:63:85:5b:75:d9:
63:7f:14:be:cc:4d:3a:e6:f7:a8:1b:fb:ff:6d:d7:
e6:a9:a7:9d:c9:51:52:1a:c8:92:63:b4:7f:07:23:
05:f0:fc:e1:a1:45:47:45:7e:b1:5e:48:2c:92:9c:
5f:4a:ed:e4:3b:6e:93:25:04:5b:31:f5:5d:ff:0f:
1d:df:a8:7b:68:dc:73:4b:8b:b1:72:c9:7c:92:f3:
50:0f:b6:2f:da:c1:20:93:e8:e0:5e:f3:8f:93:42:
28:25:7c:60:3e:0f:ba:e2:04:5f:0f:80:88:b7:ec:
05:fa:2f:b6:7d:34:e1:ca:9f:1e:ae:ee:71:f5:1a:
51:f9:8c:c7:fc:70:44:2f:a9:3c:67:c3:bd:40:ab:
d9:f6:0e:e7:9a:ea:f6:6a:ad:30:3d:84:b3:3e:91:
f5:79:19:47:68:3d:34:57:48:52:d9:60:a0:c4:46:
fe:16:39:ce:88:82:c9:8d:e8:ea:28:c5:e3:42:02:
2d:c6:8d:45:db:b3:b8:d6:25:64:43:0c:f3:bd:69:
a0:3c:09:34:0e:ae:3f:98:d4:3b:cf:18:44:b9:bb:
e3:ef:07:16:82:6f:26:9a:c3:7e:37:70:80:43:c1:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:55:3B:32:B3:9A:0F:EC:68:18:51:C8:28:07:B3:09:27:F2:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl
X509v3 Authority Key Identifier:
keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.240.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:ab:d9:99:97:bb:80:1a:50:b4:43:99:76:da:83:62:f7:64:
7f:94:56:c7:a9:a9:5d:3d:71:45:47:4d:9f:94:5d:e1:df:ca:
cf:98:2b:1e:48:2a:21:f7:8d:01:cf:43:2b:e3:79:34:46:54:
e8:07:6a:98:95:4d:6e:b9:bb:35:6d:4b:f9:5c:db:49:d0:da:
a7:55:8b:22:c4:6b:5d:f4:c9:42:6a:3c:93:b1:85:ff:23:ea:
7a:53:5e:b5:2c:cd:a6:2b:bc:94:d4:7a:6e:9a:bd:08:06:22:
dd:3c:26:b8:6c:99:22:c8:ec:25:f7:9b:57:c9:d0:31:31:e2:
f3:ea:5b:24:59:09:a1:b2:08:b5:db:7b:3b:ad:eb:79:81:de:
5d:e0:fa:0c:15:9d:03:38:92:dc:8b:0b:81:29:6c:15:d3:49:
a0:ae:4c:2c:47:58:df:bb:59:3d:7e:87:5e:ed:fa:18:79:76:
53:5e:c8:08:c4:de:f3:f7:e2:63:d3:40:ba:56:f6:4a:3e:7a:
67:2b:2a:57:f6:c9:94:b9:56:0b:de:55:39:38:c0:f4:86:0f:
18:ec:4f:51:66:50:0a:47:32:6a:fd:1d:ec:da:e8:ad:78:76:
8c:dc:51:51:52:d6:93:0a:e0:4c:99:82:b6:63:cf:79:3a:bb:
46:9c:c5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:28 2025 by rpki-client