Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7999dae4-a6d8-35e2-9c45-cd4238cd3858.roa
File: 7999dae4-a6d8-35e2-9c45-cd4238cd3858.roa (raw, json)
Hash identifier: SalIRTXuZrhbkF0BsFTaeaW2SAXltAyt73hyHrgAPlA=
Subject key identifier: C6:81:E9:85:B7:2F:0A:12:9F:25:D7:A6:AF:89:F8:C0:EB:47:5E:B7
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285837144DBEE6C1B6E0E168806800
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7999dae4-a6d8-35e2-9c45-cd4238cd3858.roa
Signing time: Thu 18 Oct 2018 04:00:00 +0000
ROA not before: Thu 18 Oct 2018 04:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 14061
IP address blocks: 138.68.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:14:4d:be:e6:c1:b6:e0:e1:68:80:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Oct 18 04:00:00 2018 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=5a1f918b-6635-427f-ae92-e7c7291d9baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c6:ee:46:9f:70:3b:e7:bf:cd:03:be:b1:0f:
e7:80:93:a9:12:38:26:14:e8:22:a2:f1:df:8c:39:
8a:c8:e6:a1:f8:84:bb:42:a0:44:71:29:d7:4a:af:
30:85:51:b0:58:94:81:6f:08:f8:cc:30:f6:7f:d4:
a4:c4:cd:e6:f8:69:2a:ca:07:14:f9:16:2b:2b:23:
dc:95:4d:5c:95:dc:a8:aa:8c:fe:cb:93:0d:df:6a:
95:5c:78:e1:49:9f:29:1d:8b:1e:23:f1:b0:b3:d0:
34:a3:06:6f:df:46:03:b5:d0:c5:05:ee:90:63:cd:
d1:b0:af:bd:a7:03:25:f1:6b:d9:75:30:e6:e3:a8:
20:f0:e8:26:31:c5:d0:19:43:b8:da:4f:c2:76:c1:
2f:90:42:3e:22:7d:1a:61:98:ad:62:aa:8d:78:4d:
5d:d9:6a:17:ff:bf:08:98:3b:7d:32:d1:f2:1d:be:
cc:a0:81:1c:67:b2:8c:e0:1a:82:d4:a4:a7:e6:40:
0e:9f:ef:cf:76:fa:29:cc:be:27:4f:26:42:57:ac:
8f:98:4a:66:90:4d:06:60:23:62:f5:53:2c:31:99:
5f:b1:fa:78:03:8f:cc:c3:2c:5d:46:cd:cf:c9:46:
8e:d5:eb:cb:2c:4c:a4:fa:27:ea:3b:66:b3:a3:66:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:81:E9:85:B7:2F:0A:12:9F:25:D7:A6:AF:89:F8:C0:EB:47:5E:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7999dae4-a6d8-35e2-9c45-cd4238cd3858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
138.68.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:dc:20:28:54:35:0e:94:1f:10:4e:3b:99:df:88:5c:6b:91:
ba:b2:dc:8c:fc:b9:e7:7b:7c:d2:6a:da:ff:cf:63:4c:ec:e6:
f2:60:5c:6b:5b:6f:c8:cf:ed:a9:dd:38:09:04:50:37:3b:c6:
d2:50:ae:b8:b7:aa:eb:6a:20:34:a1:21:46:c2:04:94:17:e9:
51:ca:94:93:b4:20:da:37:36:c3:3f:09:fa:d0:c3:41:15:14:
76:87:48:27:1a:f8:03:71:87:a3:a1:8c:60:aa:87:82:12:9e:
57:09:30:ec:64:9e:db:43:c2:1e:d6:99:a1:f1:60:f7:99:24:
19:3f:ce:8a:2c:e8:50:5c:25:c5:6d:1f:d3:30:c7:bd:ca:97:
67:af:9f:e2:5a:7c:67:f7:f4:c5:ad:5a:7f:e6:4b:70:2c:ec:
af:8e:cf:8f:ee:cf:21:0e:5c:b3:f8:a0:eb:1d:10:11:3b:79:
83:bd:f1:a6:4f:1b:c3:e1:de:39:f0:80:c6:fc:74:18:66:34:
4a:b3:8c:d4:92:1b:e4:46:7b:a4:a1:a1:ef:10:8a:bf:76:59:
ce:4d:ef:b4:f1:cc:e5:12:f3:fd:de:5e:7e:cd:c3:b2:20:6e:
76:db:a9:96:ba:bc:94:38:33:98:87:0d:df:71:e6:5c:a0:ad:
7c:04:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:19 2025 by rpki-client