Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/db6a694e-565a-3e5e-acaa-657df35736d8.roa
File: db6a694e-565a-3e5e-acaa-657df35736d8.roa (raw, json)
Hash identifier: LCoQhTMIegAtA9uf+eksM0lmOgCafChqTdaJ01YZ+bA=
Subject key identifier: A0:F4:5C:FA:BF:EB:70:0C:6B:C5:DD:DB:55:D2:00:42:5F:65:D4:4D
Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial: 010D0C9F432858457F7A4453A356C4F2CA82FE80
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/db6a694e-565a-3e5e-acaa-657df35736d8.roa
Signing time: Wed 10 Apr 2024 09:40:05 +0000
ROA not before: Wed 10 Apr 2024 09:40:05 +0000
ROA not after: Tue 09 Jul 2024 09:40:05 +0000
asID: 150452
IP address blocks: 162.245.220.0/23 maxlen: 23
208.87.96.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:7f:7a:44:53:a3:56:c4:f2:ca:82:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
Validity
Not Before: Apr 10 09:40:05 2024 GMT
Not After : Jul 9 09:40:05 2024 GMT
Subject: CN=dbc7fc44-1bd5-4806-850c-a76c3fd95874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:34:38:80:fa:55:29:6d:c9:23:8b:7f:54:
7d:3b:7a:a4:ac:ec:c2:55:f8:af:5c:27:b1:92:e1:
98:60:1d:fb:d1:a8:4d:ad:f2:4f:5d:de:fb:25:e4:
2c:10:5c:4b:47:e3:a2:3a:78:d2:3c:62:0d:9f:95:
58:e0:c0:02:13:68:86:25:36:fa:d2:ee:93:0a:e1:
7f:40:05:7c:e1:30:f1:21:b3:3f:b4:e3:88:1b:12:
f7:69:f7:bc:85:87:c8:aa:9e:38:45:1f:d8:51:14:
7d:20:03:36:c4:d3:14:bb:0d:ed:cc:21:31:09:1b:
4f:70:1f:b9:3c:80:bf:3a:5d:c4:6b:59:01:b6:60:
ed:7a:80:0a:0c:c9:81:0d:91:45:af:b9:ba:78:31:
c8:49:bf:31:c7:bf:07:91:0c:59:42:a0:21:a3:99:
d1:cc:f7:ff:a8:2a:9e:93:ec:56:13:fc:9b:3d:61:
91:7c:8f:9a:81:1b:ff:16:ab:76:1a:6f:bb:83:73:
01:7a:9c:d2:40:ef:84:40:fe:e7:a4:38:61:ee:2b:
95:1b:5a:dd:2b:08:4d:66:c5:5f:9c:9e:94:bb:37:
76:52:aa:51:ee:ad:23:2a:df:8e:82:b3:06:b1:15:
d6:ef:5a:02:75:e3:b7:e3:55:fc:c7:d4:30:72:38:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:5C:FA:BF:EB:70:0C:6B:C5:DD:DB:55:D2:00:42:5F:65:D4:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/db6a694e-565a-3e5e-acaa-657df35736d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
X509v3 Authority Key Identifier:
keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
sbgp-ipAddrBlock: critical
IPv4:
162.245.220.0/23
208.87.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b7:20:2f:13:da:ed:fc:d1:f0:10:6f:47:c1:8d:0d:8e:98:
0e:d5:23:a1:42:31:a6:41:c4:5a:b4:ce:8d:b3:84:85:a1:44:
f6:3b:79:88:5d:d0:0b:94:91:37:e9:a9:42:b3:e6:a4:10:3e:
a8:63:91:a4:0e:a5:77:c3:a0:e7:65:e8:5b:43:12:bf:1c:8b:
e6:9a:1b:fc:89:f3:89:0c:de:68:d8:76:4e:77:2b:e2:5e:63:
31:bf:b6:36:7a:c6:83:7f:48:be:82:ad:0f:ac:29:8f:0a:42:
99:85:0d:e7:57:e4:bf:74:8b:a0:45:ad:d0:4f:d0:99:0e:6b:
51:4c:78:88:af:3f:60:ec:f4:25:09:2d:98:ea:08:45:ed:9d:
72:d8:d7:0e:be:47:05:12:b4:8b:f6:6f:d4:ed:e7:e9:f8:bf:
b2:b6:09:e8:fc:dc:fc:e6:9a:5b:dc:89:4a:0e:2f:60:cc:eb:
5d:a9:4c:98:24:49:8f:6a:a0:65:b6:c9:be:ee:d8:91:cd:31:
da:81:f2:1d:e4:a2:d3:e6:da:90:b3:27:05:02:22:e0:00:91:
c8:fd:47:75:e2:ad:23:bf:c5:ad:d8:84:f6:bd:22:fe:52:81:
5e:7d:b4:46:c0:f6:4a:47:56:0f:36:ab:97:f5:fe:fd:4e:1f:
6e:67:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:08 2025 by rpki-client