Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/4a96ab69-e104-37fc-ad17-b17615e02a84.roa
File: 4a96ab69-e104-37fc-ad17-b17615e02a84.roa (raw, json)
Hash identifier: 3EYUX6O2s2nkHuRL3VstvRcRjELvFuSFEyZ91l0NnCY=
Subject key identifier: 56:21:77:56:5E:C4:2D:74:E2:E2:6F:BD:7F:93:3E:09:66:51:F0:CE
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285846A4FFB2082FBC4900237BE080
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/4a96ab69-e104-37fc-ad17-b17615e02a84.roa
Signing time: Wed 24 Jul 2024 13:00:35 +0000
ROA not before: Wed 24 Jul 2024 13:00:35 +0000
ROA not after: Tue 22 Oct 2024 13:00:35 +0000
asID: 60707
IP address blocks: 173.239.202.0/24 maxlen: 24
173.244.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a4:ff:b2:08:2f:bc:49:00:23:7b:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Jul 24 13:00:35 2024 GMT
Not After : Oct 22 13:00:35 2024 GMT
Subject: CN=92a2515b-a0e6-4f35-b091-e1285ed5da2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:6e:1b:4f:27:86:77:28:75:d9:d0:cf:d7:
e1:70:c2:11:9f:2f:4a:ca:2c:ac:9c:c4:fd:89:f4:
29:bc:2e:9b:55:2f:30:65:9b:a1:d3:29:35:ff:90:
19:f1:6d:82:b8:fc:8c:98:c1:b8:12:71:38:fe:7d:
8d:99:5e:31:72:f7:e8:11:92:57:fd:80:18:69:6b:
22:72:4d:18:71:e1:e6:42:aa:af:06:96:25:25:b9:
b6:e6:5c:c2:9c:28:49:e4:57:e8:23:23:f1:26:61:
5d:96:d4:23:5d:7c:d2:b8:b9:8e:a7:e3:7e:9a:8f:
b0:c5:dd:92:2b:2b:00:48:29:53:98:d5:b3:80:1b:
36:ec:bc:84:0e:6e:05:05:43:5c:3f:33:38:72:b2:
8c:ec:97:14:55:cd:d8:0e:0a:e5:3b:ad:df:25:dd:
28:cd:25:dd:27:56:9a:ba:85:3e:4d:59:91:be:90:
b3:b1:87:0f:89:88:25:1d:5f:e8:72:c9:d8:7c:5c:
92:8d:59:85:b3:c9:53:75:a3:be:d2:eb:f8:7b:a2:
25:8d:86:1f:91:4a:70:74:cb:50:e0:ba:df:a1:56:
62:b5:28:8d:10:47:16:bf:60:18:c7:54:6c:01:f6:
7e:8a:41:b9:3b:da:7f:f9:9f:d7:01:50:74:f7:f0:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:21:77:56:5E:C4:2D:74:E2:E2:6F:BD:7F:93:3E:09:66:51:F0:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/4a96ab69-e104-37fc-ad17-b17615e02a84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.202.0/24
173.244.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:95:5a:66:28:89:d1:9a:34:60:3d:99:3c:8e:5f:83:77:9c:
3b:b3:1a:cb:3b:01:a1:39:c7:98:0f:56:34:d0:15:c6:b8:4e:
09:ed:ae:f3:02:1c:9c:67:86:a5:df:9c:3c:58:e9:66:56:5f:
59:30:99:2c:46:a5:e7:a9:92:5d:a8:bf:a7:18:b3:7b:53:48:
9f:ed:35:cd:68:a2:a0:59:17:c3:3c:fa:5a:01:6d:47:5d:bb:
ad:6b:9e:2d:40:12:76:e6:0f:2e:0a:8b:bb:63:8f:0c:61:0f:
43:ec:31:1e:bf:c9:48:43:32:08:1d:3a:e7:7e:2e:4a:4c:71:
92:b8:ab:0b:8b:49:ce:ea:03:0d:a2:f5:2d:e8:8a:fb:35:13:
dd:6a:da:df:31:9e:ad:26:f7:b4:22:6f:f5:a7:5d:d9:82:33:
cb:6a:05:e6:36:e2:f6:59:b8:1b:94:b1:f7:98:aa:04:51:a4:
52:78:3f:f6:d2:49:b6:2d:cf:7e:52:c7:e3:e5:e2:32:2b:af:
a3:37:44:8e:78:53:fb:1c:4c:38:01:5f:d0:af:e1:c6:49:17:
21:39:17:13:51:21:f9:f8:a9:2b:6e:7a:63:65:65:3b:b9:73:
c1:3a:d4:a7:cb:73:18:ff:cb:c1:87:b7:ce:20:96:48:10:03:
a1:99:73:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:42:15 2025 by rpki-client