Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/4f5becd0-1e5a-3f0b-878a-ce5f4c2b2586.roa
File: 4f5becd0-1e5a-3f0b-878a-ce5f4c2b2586.roa (raw, json)
Hash identifier: totN2YsJg8L8Kunm3ZY+Iwl5VSXjf+LoZ4O9JHlkkzA=
Subject key identifier: 5A:90:07:8F:0F:5F:78:C2:92:85:23:6E:1C:27:7F:83:C8:B3:1E:30
Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial: 010D0C9F43285847C60F243D05182F3BE5B61000
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/4f5becd0-1e5a-3f0b-878a-ce5f4c2b2586.roa
Signing time: Tue 05 Nov 2024 02:00:27 +0000
ROA not before: Tue 05 Nov 2024 02:00:27 +0000
ROA not after: Mon 03 Feb 2025 02:00:27 +0000
asID: 19905
IP address blocks: 209.222.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c6:0f:24:3d:05:18:2f:3b:e5:b6:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Validity
Not Before: Nov 5 02:00:27 2024 GMT
Not After : Feb 3 02:00:27 2025 GMT
Subject: CN=f0d10211-dce5-4bbf-a915-9b223046573d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:26:cd:22:4d:6f:09:ee:4d:e6:77:50:a5:50:
4b:d2:b1:be:85:e1:f4:64:f9:ac:23:8b:b5:c3:95:
91:59:e7:18:50:30:df:0b:8a:cd:58:5b:e5:6b:4c:
82:ac:f2:6d:35:57:64:e0:e0:85:af:50:2d:39:6e:
16:1b:89:98:80:9c:d0:43:d6:4e:16:1e:b8:86:cd:
c1:9c:ba:a4:20:8c:34:cc:b1:43:1c:d0:20:36:2a:
0a:b7:3c:6f:e0:72:84:0d:dd:e9:52:94:df:57:74:
d2:cb:55:d5:0d:a5:4d:c4:7b:d4:21:91:8e:96:92:
10:8d:42:67:ad:41:a2:24:de:39:52:36:15:46:26:
83:10:88:9b:ac:ab:26:d0:cf:4b:6b:d9:c1:ce:c5:
1f:f1:d7:d9:e8:46:66:d9:14:c8:27:4d:60:ef:61:
d2:b2:e9:30:36:67:91:5d:e7:01:80:d6:15:a6:31:
90:8b:e0:0a:fb:1c:0a:90:64:7a:3c:12:37:e5:1f:
d7:dd:d3:34:5f:3f:96:98:ca:96:a9:9e:8b:cf:53:
c3:89:4f:1f:82:75:c0:11:5d:98:d6:9f:60:8f:e2:
e3:c5:60:4c:d5:ea:f2:b9:ed:74:f8:e4:4b:75:92:
81:3c:ee:92:54:b5:12:d5:19:b4:4f:8c:38:94:18:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:07:8F:0F:5F:78:C2:92:85:23:6E:1C:27:7F:83:C8:B3:1E:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/4f5becd0-1e5a-3f0b-878a-ce5f4c2b2586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
X509v3 Authority Key Identifier:
keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
sbgp-ipAddrBlock: critical
IPv4:
209.222.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:78:8f:54:6d:4b:8a:7b:5d:86:fc:4b:31:97:c3:b0:ce:10:
3a:5a:5e:b9:fe:d1:52:7f:1d:3d:46:ab:a6:74:53:3d:f9:af:
b7:4b:98:f8:9a:66:6e:17:1d:47:f2:d6:ed:53:28:0f:21:94:
98:14:c2:9f:77:e4:b4:38:90:76:2b:fe:60:78:93:31:91:c2:
d8:d9:67:b0:39:f0:0e:0a:00:70:bd:10:8c:78:00:14:a6:98:
d4:c2:51:03:37:3f:e3:dc:4e:39:e3:86:b5:d6:b7:ae:c2:68:
4e:f6:5b:a0:0c:b5:8a:32:99:c0:d3:5e:98:56:d7:5d:cd:d2:
1e:85:e2:10:69:e8:ac:87:73:d7:cf:5c:b9:c8:42:1d:8d:fa:
43:48:3e:58:87:29:b9:ca:59:ac:5b:e6:06:fa:12:95:55:b8:
e6:db:41:a5:b5:c6:ef:d0:53:7f:3e:68:b7:a5:d7:36:51:42:
56:86:09:8e:d9:01:4f:92:df:f0:59:f2:2e:b1:2a:8d:02:11:
9c:54:43:45:c8:87:ab:6c:9e:b8:93:45:a0:2b:4a:1c:6c:38:
85:28:d9:fd:6a:6c:35:36:e4:f7:7c:53:cf:7b:f6:69:de:c1:
fc:07:8f:9e:4e:93:d4:ad:9a:50:84:f5:b8:ff:1b:68:70:d0:
e1:d1:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:53 2025 by rpki-client