Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd45dbbd-61b6-31cf-aab5-f97d2a235e2d.roa
File: dd45dbbd-61b6-31cf-aab5-f97d2a235e2d.roa (raw, json)
Hash identifier: nB4Umwe2QaiX/+7R5N3Ve4qt8dE7gFIaas2cxQBmg3E=
Subject key identifier: F0:C5:2A:80:D8:04:66:53:6A:B9:80:BE:2A:56:23:88:09:B3:7E:57
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583B3D572531580173558DA72A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd45dbbd-61b6-31cf-aab5-f97d2a235e2d.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Sat 16 Dec 2023 05:00:00 +0000
asID: 1239
IP address blocks: 199.115.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:3d:57:25:31:58:01:73:55:8d:a7:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Dec 16 05:00:00 2023 GMT
Subject: CN=e3241909-ee6a-4216-8771-6e3af09e0961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:a4:e3:36:27:fa:36:ef:d5:96:b9:bc:0e:
98:4d:49:d2:a4:00:43:5b:f4:44:cd:c7:fc:e4:dd:
f8:0b:d4:1f:50:21:cb:7d:31:ea:72:be:66:3e:ca:
30:d0:bf:d0:2b:3a:82:4b:1c:50:52:9b:f0:f0:9b:
28:4f:1c:75:a3:b1:2d:a8:ed:0d:8d:b8:96:d8:e0:
a1:3a:48:53:37:9a:44:0c:a5:71:89:02:7d:48:00:
45:c2:70:e9:c1:6b:5e:4d:a4:6e:c1:b3:3d:cc:f5:
a3:5c:e5:29:40:a9:1b:de:75:6e:9c:8d:2b:c4:6d:
fe:ae:aa:11:72:c7:4e:3e:5c:23:b3:d9:26:8d:6e:
a5:10:c6:2a:c8:da:3f:4b:d3:75:35:37:b5:4e:bc:
87:53:b4:91:b1:17:52:ca:ff:07:88:b0:f5:14:6e:
56:51:4e:2e:4e:13:e0:e3:58:66:0b:1c:78:ab:bc:
49:c8:3c:a8:55:19:0a:f7:28:3c:f3:d0:a6:c6:ab:
d2:d4:6e:7c:e2:20:e9:56:0e:d4:93:04:dd:1a:2c:
c6:96:2e:b6:fc:6f:f3:ef:64:8f:de:06:5b:0d:58:
6c:a3:c3:97:72:b3:45:8e:cc:a3:46:b5:67:41:0e:
93:d9:8b:80:09:1a:9b:9e:18:ed:14:16:6e:6d:41:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C5:2A:80:D8:04:66:53:6A:B9:80:BE:2A:56:23:88:09:B3:7E:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd45dbbd-61b6-31cf-aab5-f97d2a235e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
199.115.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:29:43:fb:ae:d6:64:34:49:0e:f3:9d:96:eb:a4:ae:1b:83:
da:c9:88:78:74:6f:b1:22:a3:f4:2a:d8:9d:f7:6c:de:5a:cd:
6f:b5:79:1d:06:74:7e:aa:96:a5:f2:b0:37:2f:01:33:b7:c8:
47:7b:4a:8d:96:d2:03:16:e8:b1:7d:8f:ec:c4:e4:a4:03:93:
86:49:b8:f2:f1:ea:7d:b5:de:3e:fb:32:81:7c:dc:8e:bd:4a:
d2:ac:d8:91:df:92:97:73:e1:d2:92:af:d6:4e:63:7c:94:4a:
8d:7d:ac:6b:be:ce:be:71:eb:de:c2:9f:21:09:91:a2:3a:0b:
e3:1c:21:74:a4:d8:d8:9a:96:80:cc:5c:da:5b:d1:4e:e5:36:
e5:aa:24:cb:c1:7e:62:2a:62:30:d4:1c:ca:a3:cf:42:8c:b8:
fd:dc:46:7b:4f:bd:f0:68:e9:78:c8:1e:6d:55:2c:97:31:51:
69:0f:b9:95:e9:de:bb:8c:0d:63:d1:90:00:b5:09:12:07:41:
20:d4:69:29:f6:ce:6e:90:fc:24:60:c7:bd:7f:ed:8f:c0:88:
10:b9:29:1f:9d:d7:57:99:a4:44:3d:25:f8:2e:ec:7d:e6:5d:
06:c5:f3:61:49:07:96:83:a6:ef:65:7c:a7:bc:8b:10:4d:d1:
ec:23:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:02 2025 by rpki-client