Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/4d4d6c54-f550-3070-b87f-77c556667fa6.roa
File: 4d4d6c54-f550-3070-b87f-77c556667fa6.roa (raw, json)
Hash identifier: 0jrDqYFTs7Fl3WY97l6pG6SNMplgUdQb4QQn2gmMjVE=
Subject key identifier: 4B:14:12:82:1C:5B:E2:E3:29:77:77:C8:95:08:10:98:69:9A:E0:6B
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F432858441D6E99842523EAEAEE90C838
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/4d4d6c54-f550-3070-b87f-77c556667fa6.roa
Signing time: Tue 05 Dec 2023 14:00:21 +0000
ROA not before: Tue 05 Dec 2023 14:00:21 +0000
ROA not after: Mon 04 Mar 2024 14:00:21 +0000
asID: 21928
IP address blocks: 64.133.0.0/16 maxlen: 24
207.52.0.0/16 maxlen: 24
144.227.0.0/16 maxlen: 24
144.225.0.0/16 maxlen: 24
144.231.0.0/16 maxlen: 24
207.143.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:6e:99:84:25:23:ea:ea:ee:90:c8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Dec 5 14:00:21 2023 GMT
Not After : Mar 4 14:00:21 2024 GMT
Subject: CN=40755bec-4cc2-4fa4-9292-1f70e6fa4d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:87:ae:20:ba:fc:36:0a:5d:e4:ff:88:4e:
62:30:de:64:af:c7:6e:21:07:e9:18:34:f6:42:d7:
92:1c:4d:a6:65:53:d3:53:9a:da:08:f9:58:3f:a3:
b1:61:43:fb:1e:13:72:bd:b5:8b:f5:b5:85:27:24:
44:15:bb:3f:f0:41:1f:86:c9:5c:c5:5f:93:b5:34:
6c:59:4b:8d:c6:a4:98:3b:61:da:f4:56:ba:fc:4f:
46:07:d4:10:d0:2c:84:5c:ba:84:4a:02:76:00:a1:
ef:b5:ae:8a:7c:18:37:0d:fd:61:a5:f5:ed:cc:cf:
55:11:4b:dd:4f:ee:6f:5b:7d:30:6d:df:ac:7a:5b:
6f:9b:0d:1d:84:2e:1b:46:86:be:32:de:cc:ca:c0:
d2:51:d0:2b:10:45:27:3d:cf:6a:4c:82:1d:8c:93:
de:6f:c9:f3:9f:fb:9b:1e:d1:9e:f0:93:01:69:5c:
16:b2:a5:e8:59:b9:c9:c6:e0:70:94:0c:11:d1:b1:
8c:09:0f:1a:8f:bb:93:7b:96:30:6b:20:e7:37:fb:
7d:05:75:09:a0:bd:68:1f:ef:a0:9b:2d:6b:c5:73:
66:91:48:fb:98:2a:ac:9b:43:ff:f2:0a:27:e5:a0:
34:2f:53:79:23:86:89:59:4b:4d:91:c0:8d:c3:9e:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:14:12:82:1C:5B:E2:E3:29:77:77:C8:95:08:10:98:69:9A:E0:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/4d4d6c54-f550-3070-b87f-77c556667fa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.133.0.0/16
144.225.0.0/16
144.227.0.0/16
144.231.0.0/16
207.52.0.0/16
207.143.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:d4:ea:c6:e3:3c:e2:30:1b:b5:50:88:18:b2:53:82:e5:26:
c9:0e:f9:96:dc:d6:55:10:13:04:ce:54:1a:f2:69:da:25:12:
27:b9:6b:81:a0:f5:54:c9:e6:4a:83:c4:1a:0c:49:56:2f:f1:
08:b5:45:3a:36:70:b5:bc:6a:fd:19:43:e3:8d:cf:69:1e:bf:
64:60:65:6a:05:51:aa:fb:38:48:3f:be:45:c0:13:79:38:92:
a9:53:be:bd:17:8d:57:92:c5:eb:f5:fd:94:e7:8c:3c:57:64:
af:b5:b0:18:3a:d8:d1:66:46:66:56:b1:62:46:d4:c5:ac:e4:
b1:2a:b4:0d:ba:2e:13:6b:37:e4:f0:53:54:14:4d:72:a7:07:
76:05:74:ab:ca:4d:54:92:c2:ac:59:64:21:eb:48:ac:ef:58:
f4:bf:3a:93:23:d3:df:7c:0a:43:35:e5:d9:89:e5:5d:0c:de:
82:b4:ea:d5:06:db:76:7b:91:a4:0f:45:9f:09:72:74:3f:0f:
cb:e8:04:a6:b2:bf:f7:b5:14:03:af:a9:f6:a4:41:e8:04:6b:
b4:52:93:9a:7a:20:c3:f0:5a:80:ab:cd:3b:eb:1b:52:14:dd:
b9:13:d7:2c:e4:f4:b6:3b:6a:0b:d9:bd:90:f1:b7:f4:97:de:
df:86:64:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:21 2025 by rpki-client