Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb5f3f47-435a-31c1-949d-97ea14234279.roa
File: bb5f3f47-435a-31c1-949d-97ea14234279.roa (raw, json)
Hash identifier: 9EMMLnbven15GTZ72sVWXZURcW9s2Fl4wfQX1XnRftU=
Subject key identifier: E6:B6:AD:B7:24:13:F1:F0:51:75:58:F1:81:4B:65:F8:1C:E3:08:78
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285843703A71403A6A107AD9432E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb5f3f47-435a-31c1-949d-97ea14234279.roa
Signing time: Wed 04 Oct 2023 13:00:24 +0000
ROA not before: Wed 04 Oct 2023 13:00:24 +0000
ROA not after: Tue 02 Jan 2024 14:00:24 +0000
asID: 40306
IP address blocks: 184.63.129.0/24 maxlen: 24
75.104.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:70:3a:71:40:3a:6a:10:7a:d9:43:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Oct 4 13:00:24 2023 GMT
Not After : Jan 2 14:00:24 2024 GMT
Subject: CN=63c6158b-5203-4297-8932-c94ae3fc08b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:ba:01:a9:00:6b:a4:99:85:e6:dd:89:c7:
5f:e0:fd:82:dd:18:11:f6:1e:cb:e9:7d:5f:aa:db:
97:83:f9:91:3a:f5:0d:4e:16:09:a4:37:b2:6f:bb:
f3:54:06:04:2b:a3:5c:1e:f6:fe:ec:33:9c:69:a0:
9e:61:69:c4:bd:c3:8d:b1:77:df:89:9d:89:6c:25:
95:fb:e4:a2:f5:17:29:1c:be:99:b9:3c:66:70:61:
79:2f:b5:cd:8c:29:1c:b1:e5:fb:e5:75:8b:77:6d:
fb:09:02:ad:49:df:31:27:76:ed:31:10:5c:c3:03:
ce:d2:ff:c0:90:d9:45:04:45:c2:67:09:71:2e:1d:
34:aa:36:39:60:05:c6:ab:e2:47:67:6a:30:ef:86:
ea:e2:b1:1f:25:8b:b8:19:69:81:42:c0:06:7a:63:
15:56:11:8b:86:5f:09:11:cc:50:e9:7e:6f:c1:ed:
b2:e8:eb:6e:cc:c5:9f:7d:09:ea:47:7b:e1:4d:8d:
0e:cc:bb:d0:62:be:4b:d6:f5:6c:cd:3c:79:0d:b1:
ff:f2:51:ba:4f:db:5c:10:e4:92:d2:83:d0:ee:c0:
c4:75:37:70:e2:69:c5:bb:f9:3e:7f:c8:ad:f3:9e:
93:ac:bd:e1:7c:94:1e:e0:7c:c5:51:a8:91:4a:ba:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:AD:B7:24:13:F1:F0:51:75:58:F1:81:4B:65:F8:1C:E3:08:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb5f3f47-435a-31c1-949d-97ea14234279.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.104.72.0/24
184.63.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:1e:96:29:4a:72:6a:a2:bb:8e:c7:90:1b:2d:ba:c9:dd:1d:
10:4f:44:cf:ec:57:b4:af:d1:90:a6:79:f2:c6:31:bb:60:ab:
d9:57:58:98:de:0d:2a:54:c7:8c:32:81:be:0d:c5:63:73:a9:
2c:73:de:af:5b:47:97:0e:39:db:2c:c0:68:19:6f:5b:64:fe:
7e:42:d9:f1:1c:29:93:67:2b:06:70:8d:54:70:7e:66:56:69:
1e:dd:43:40:54:c3:bf:b9:b9:f3:a3:5b:97:9b:14:c1:6c:3f:
8e:e5:a1:a5:37:cc:6a:be:81:25:4b:76:93:5c:b2:ef:f0:af:
eb:3f:f5:04:0c:7a:3a:67:85:0d:94:3e:21:95:20:8a:5f:00:
60:b4:4e:d2:a7:21:60:70:e3:40:3d:c6:c2:9d:a0:00:39:e6:
78:30:93:4c:a9:d9:5a:1e:00:75:82:4c:bb:d2:b9:16:9e:ba:
a8:5e:8d:f1:ec:6d:d9:aa:c8:14:04:a8:85:e9:c8:10:05:71:
34:a7:62:f1:4e:0d:c1:1b:12:9d:34:0c:13:97:e5:aa:55:40:
e5:60:f5:5f:44:d4:24:66:57:44:60:b5:44:48:b9:a0:8b:55:
e0:04:85:e5:a3:5e:1d:9a:c1:6a:e2:41:91:48:d2:b8:75:4d:
ab:fc:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:38 2025 by rpki-client