Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/954fc092-2306-327d-b211-46995ab4a364.roa
File: 954fc092-2306-327d-b211-46995ab4a364.roa (raw, json)
Hash identifier: R+QS/O9UrmNizXQiYJsJ0b7bXHbjpYNLU7cKlpV7s0o=
Subject key identifier: 1B:14:94:E7:FE:35:9F:83:22:4A:82:A2:7B:C3:4F:60:7F:1A:DA:35
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285846F5F59455E196B9100CFBBA40
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/954fc092-2306-327d-b211-46995ab4a364.roa
Signing time: Thu 22 Aug 2024 13:00:40 +0000
ROA not before: Thu 22 Aug 2024 13:00:40 +0000
ROA not after: Wed 20 Nov 2024 14:00:40 +0000
asID: 64286
IP address blocks: 64.64.110.0/24 maxlen: 24
98.159.225.0/24 maxlen: 24
173.239.208.0/24 maxlen: 24
173.239.219.0/24 maxlen: 24
173.239.237.0/24 maxlen: 24
173.244.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f5:f5:94:55:e1:96:b9:10:0c:fb:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Aug 22 13:00:40 2024 GMT
Not After : Nov 20 14:00:40 2024 GMT
Subject: CN=d1928ccf-df5a-42ed-b66b-06171e560a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ff:d1:d2:d8:61:a6:b6:85:7e:41:ce:0d:a2:
1a:c1:c3:dd:b7:bf:67:5d:d6:65:37:1f:41:3f:98:
fa:46:fa:bb:28:3b:b3:5d:1b:20:38:9c:3a:01:14:
eb:dd:34:a8:ba:fd:c4:27:78:7e:06:6c:80:64:33:
f9:91:b5:27:e7:eb:e2:f5:1f:fa:37:bc:21:6f:e4:
96:6f:04:48:6f:e8:c6:9a:29:5a:c7:33:e8:ff:2d:
f2:12:77:b6:5a:1e:bc:1f:77:c6:94:8c:b5:d8:84:
bc:56:b9:64:c4:0f:34:1b:b5:d8:69:37:0c:13:59:
9d:b3:96:64:1a:39:e0:95:a6:3c:69:d8:7d:8e:2e:
1e:ba:cc:76:20:4f:55:f5:ff:95:d8:ba:f1:11:8e:
c4:f4:ac:f2:f2:36:90:f4:72:8c:8e:5b:1a:a7:11:
d7:1c:95:90:46:a0:51:09:1e:4a:15:5a:00:e5:f6:
d3:cb:a4:9e:d0:4f:a1:5b:a2:ee:47:5e:2a:24:a2:
82:ed:76:05:f4:3d:79:4c:8d:ba:41:2d:8d:42:19:
e6:f3:00:7a:d6:87:72:16:67:bd:68:76:ab:de:90:
62:f0:b9:80:fd:89:02:99:07:ca:33:24:47:39:0f:
6c:2c:b4:b5:d4:bf:eb:db:27:1a:9f:e7:6e:d2:0e:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:94:E7:FE:35:9F:83:22:4A:82:A2:7B:C3:4F:60:7F:1A:DA:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/954fc092-2306-327d-b211-46995ab4a364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.64.110.0/24
98.159.225.0/24
173.239.208.0/24
173.239.219.0/24
173.239.237.0/24
173.244.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:cb:99:7a:2a:df:2e:8d:ff:30:85:c2:3c:a9:ea:e8:29:ab:
f6:4b:29:f5:7b:dd:3a:09:9d:ec:3b:1b:5b:32:01:bc:3f:35:
b3:95:74:60:ef:e7:62:05:c6:51:33:b4:1c:9b:7d:0b:8d:8c:
a2:ae:d1:02:f3:5f:ba:86:41:33:e3:f6:3a:f2:88:7f:1d:e0:
9d:86:be:34:35:ab:4c:36:00:1b:57:8e:15:18:83:f7:23:1f:
ae:97:13:dd:b1:a3:16:d6:4b:59:04:a3:e3:3a:3c:ec:ee:29:
7d:f7:ad:dc:ad:df:07:40:a5:fe:26:97:58:54:25:d6:a3:7a:
dd:2f:fb:3c:15:6d:ef:54:12:b3:f9:6d:a9:9a:4b:fa:48:9a:
99:02:16:1c:02:b9:fc:9c:36:5b:45:e2:02:8a:d2:fc:90:00:
a3:f7:c6:31:74:8c:6e:2d:e9:ca:b4:9e:02:64:04:0d:2f:be:
b4:75:d5:a6:34:18:cc:a2:14:05:cd:26:ca:ac:55:04:6c:e6:
62:57:57:d5:a8:0a:88:d7:fe:1b:61:ce:a0:f7:55:17:4d:a2:
bb:50:40:f2:2a:4d:7d:2b:f4:29:52:1e:d6:09:10:b9:31:b6:
21:85:6c:11:7c:de:c0:26:07:68:be:cf:00:2b:9e:49:7d:bf:
66:5f:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:13 2025 by rpki-client