Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9a8c7b74-01d7-3712-97ab-f2414b724a77.roa
File: 9a8c7b74-01d7-3712-97ab-f2414b724a77.roa (raw, json)
Hash identifier: qK8t9gIAScSJgE5TqxUTnJWhFcyI5yGDA5xCRaPj1iM=
Subject key identifier: 35:51:3B:33:17:B2:BF:6F:B9:A6:63:6A:EB:81:9B:28:86:50:7E:1E
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F432858449917842B2812C0F6CB19C400
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9a8c7b74-01d7-3712-97ab-f2414b724a77.roa
Signing time: Thu 18 Jan 2024 21:05:12 +0000
ROA not before: Thu 18 Jan 2024 21:05:12 +0000
ROA not after: Wed 17 Apr 2024 20:05:12 +0000
asID: 14618
IP address blocks: 170.85.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:99:17:84:2b:28:12:c0:f6:cb:19:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Jan 18 21:05:12 2024 GMT
Not After : Apr 17 20:05:12 2024 GMT
Subject: CN=76a4abac-1ceb-45f4-a049-c1976e2a2cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:92:a1:e2:2e:6b:37:59:80:d9:5f:66:f7:
55:57:62:6d:92:d4:3a:fa:11:ea:0f:76:7b:4b:4f:
93:39:4a:9f:7a:19:be:ab:2c:34:10:c7:52:6d:b8:
35:10:d0:a4:f2:1c:79:1d:b1:0b:1a:4c:0b:f0:43:
c9:2e:bb:bd:57:15:6f:cd:64:40:80:61:b5:6f:04:
59:45:c2:d3:c4:30:88:61:3e:92:d8:8f:40:f1:43:
4a:c8:37:15:c3:2d:9d:01:79:a5:9e:58:28:ea:44:
b0:14:b8:11:b9:cf:14:43:ff:9f:57:cc:ab:1f:72:
ff:e7:00:70:4f:84:ef:b9:09:a6:d9:af:36:14:a3:
4d:db:67:9f:88:dc:04:1c:11:17:42:6b:2a:20:8f:
f8:6b:ba:2e:0c:dc:7c:26:7b:37:0f:3e:78:06:dd:
4b:cd:8f:3a:77:84:19:8d:53:04:a6:b4:c3:5e:dc:
63:37:fb:31:56:7b:9e:a7:7d:75:b8:84:8b:3d:52:
27:70:13:ff:a7:ab:c6:17:3b:d3:3d:ac:0c:e4:fd:
f8:91:2a:68:92:e6:eb:66:d9:6b:24:c9:8c:5f:fc:
68:4d:9a:4f:db:8b:fa:3d:62:ac:89:91:b0:b1:10:
31:02:81:16:31:73:92:95:ba:57:ca:a5:ec:e9:57:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:3B:33:17:B2:BF:6F:B9:A6:63:6A:EB:81:9B:28:86:50:7E:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9a8c7b74-01d7-3712-97ab-f2414b724a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:3a:2c:32:ce:6e:f4:2d:b9:a9:42:ba:7e:93:45:8b:bf:dc:
2c:a2:86:be:16:47:6f:a3:56:06:69:67:22:1e:ef:82:f0:f7:
1c:d5:31:11:95:d7:14:7a:67:be:c6:6b:87:6b:8b:0d:92:f2:
ba:ad:10:6e:12:7c:e8:fa:8e:43:38:24:7b:5e:d5:a2:6c:c2:
d8:ca:ef:fe:ff:ac:9c:16:c6:40:c4:85:8d:dd:70:99:c4:68:
56:a8:48:da:0a:4b:c1:8e:0d:a0:f1:4f:07:a6:d4:f5:d5:4f:
25:f2:37:d0:b1:4e:d0:5d:f2:58:12:65:aa:a4:8c:b8:70:a6:
a0:f8:25:71:68:8f:dc:3a:39:dc:8f:e6:5c:2a:f0:75:68:25:
08:b1:0b:7f:93:b7:1e:f4:cd:19:ca:0b:66:a7:ba:f8:47:bc:
d2:e0:d3:d4:71:64:d9:89:92:89:f0:57:dc:36:fc:41:4b:28:
52:4e:10:6d:2c:97:a9:96:8e:a4:ad:dd:54:91:dc:a5:2d:d2:
e5:e0:47:df:d0:49:35:5c:1a:d8:cc:cd:2a:69:52:bd:94:f1:
c2:45:18:21:9e:99:76:6f:51:67:1e:60:dc:9d:b7:8e:b4:28:
97:bd:a7:d0:19:26:2f:49:96:62:11:f0:3a:25:c6:fb:04:13:
43:ba:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:29 2025 by rpki-client