Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/8be228e9-80b7-33e1-a34f-2dd75102738d.roa
File: 8be228e9-80b7-33e1-a34f-2dd75102738d.roa (raw, json)
Hash identifier: g1/0fLhaqvdBdR1LNrWriHhHKui+e2ZV4MnMKl1xbjQ=
Subject key identifier: 65:6A:82:6D:E3:38:1F:DA:00:66:C2:6E:96:AA:D7:72:A1:19:0A:07
Certificate issuer: /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial: 010D0C9F4328584680B4DA75F67E672397933A40
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/8be228e9-80b7-33e1-a34f-2dd75102738d.roa
Signing time: Thu 11 Jul 2024 13:00:34 +0000
ROA not before: Thu 11 Jul 2024 13:00:34 +0000
ROA not after: Wed 09 Oct 2024 13:00:34 +0000
asID: 14401
IP address blocks: 74.123.244.0/22 maxlen: 22
104.247.89.0/24 maxlen: 24
104.247.90.0/23 maxlen: 23
2607:6880::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:80:b4:da:75:f6:7e:67:23:97:93:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Validity
Not Before: Jul 11 13:00:34 2024 GMT
Not After : Oct 9 13:00:34 2024 GMT
Subject: CN=698aeb65-604c-400f-8292-7ea1d1c1ca12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:d7:74:d9:4c:f9:1e:e7:de:84:74:7e:cc:
4e:b3:30:68:11:8d:f2:35:bb:3b:bd:76:9b:09:14:
48:a4:4c:b2:48:c0:e4:34:64:a7:b2:bc:5c:22:99:
93:83:46:4d:9b:ad:c4:1a:a8:9c:71:86:21:23:70:
60:fa:92:95:43:3e:60:d6:40:9f:8c:fd:9e:af:5c:
33:36:53:74:ce:1f:7a:a9:5c:65:48:76:fe:6e:95:
1a:83:23:14:b9:01:69:c7:10:7e:44:77:8d:3a:da:
2f:7a:e2:e1:0d:73:55:0f:41:34:a6:a8:70:ad:8f:
4d:30:75:d3:19:bc:e2:3f:68:65:db:ed:e5:e3:9d:
e1:17:32:dc:a9:82:a5:7c:f3:71:5d:87:1f:80:a2:
39:ca:76:f5:78:b1:40:97:9f:0f:ac:a9:85:76:a7:
0c:5a:a3:c6:b5:4f:64:6e:0b:77:19:97:5c:ae:a0:
4f:1c:f9:06:d3:1f:d3:71:aa:1b:37:8e:c6:32:2a:
ed:1f:41:7e:ae:27:91:7f:4d:17:bc:02:ca:4f:80:
9c:16:28:03:6f:aa:e5:c1:2d:35:84:ce:d3:e7:c9:
8d:c0:1d:33:0b:d7:08:22:65:76:b8:39:ef:7d:2a:
4f:26:78:62:3d:ea:1d:fd:0e:0e:a8:b8:20:51:c7:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:82:6D:E3:38:1F:DA:00:66:C2:6E:96:AA:D7:72:A1:19:0A:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/8be228e9-80b7-33e1-a34f-2dd75102738d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl
X509v3 Authority Key Identifier:
keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.244.0/22
104.247.89.0-104.247.91.255
IPv6:
2607:6880::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:4f:2f:2f:27:57:52:e9:1f:a3:2c:e8:11:7b:41:30:7f:e8:
d9:55:53:f6:4c:e0:ce:32:3d:8e:88:f9:e8:9b:f2:e0:28:20:
37:f7:ea:e7:44:b2:5f:75:91:79:8e:8c:6c:12:9f:31:d4:56:
03:69:bd:62:64:2d:ad:03:3a:8e:71:a1:d6:34:94:c3:f8:c1:
06:fa:e5:01:e3:78:ba:98:af:6c:5a:b5:af:5d:6d:ec:07:2e:
91:6a:f9:bb:25:ad:08:25:49:51:7f:5b:a9:c4:57:68:b8:5e:
a0:4f:86:52:41:dd:15:bd:cb:96:a8:00:ef:83:2e:27:55:e1:
0a:49:56:c7:d6:de:bf:0b:2e:9c:30:50:aa:46:43:c8:db:29:
c4:50:c9:f6:51:a8:e6:c6:5d:24:6e:17:95:f0:a1:de:b3:0a:
03:df:59:71:31:42:c2:6d:a4:8d:4d:3a:83:be:e1:0c:18:2e:
d0:60:b4:be:42:73:fa:3e:fc:69:32:29:71:62:95:5b:2f:01:
8b:44:6d:3b:8f:dc:07:3d:af:c6:a1:7c:ac:9b:3c:9c:4b:c1:
fb:29:a5:27:e5:ae:21:90:85:23:19:f3:32:04:d0:6e:d4:a9:
35:80:58:94:e7:13:c8:80:b0:53:e1:03:d8:64:ce:b1:22:e2:
2e:55:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:40:23 2025 by rpki-client