Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e5e51e7f-c306-3a88-bf47-f585a257c164.roa
File: e5e51e7f-c306-3a88-bf47-f585a257c164.roa (raw, json)
Hash identifier: mjT0nwj8hW5Btu1NbjUJW7l5thMeXRyKjDeU5pivBBA=
Subject key identifier: 2E:5A:B2:11:A4:47:57:AC:34:A0:A9:17:F6:40:92:25:5C:90:CC:3D
Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial: 010D0C9F4328584785BBAF8956A4D523A7BC3C80
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e5e51e7f-c306-3a88-bf47-f585a257c164.roa
Signing time: Sun 13 Oct 2024 01:00:31 +0000
ROA not before: Sun 13 Oct 2024 01:00:31 +0000
ROA not after: Sat 11 Jan 2025 02:00:31 +0000
asID: 1239
IP address blocks: 63.174.140.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:85:bb:af:89:56:a4:d5:23:a7:bc:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Validity
Not Before: Oct 13 01:00:31 2024 GMT
Not After : Jan 11 02:00:31 2025 GMT
Subject: CN=b004ef6b-a068-4f02-a402-a8317ac16571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:74:54:06:18:a1:5c:fa:d1:f3:f5:81:bb:
9a:5e:eb:de:6b:ca:83:e7:8d:1a:24:7d:fe:55:22:
ef:6d:ab:9c:33:b4:af:51:fd:1e:d3:5a:f9:6c:46:
9f:34:41:6e:88:87:bb:f4:f4:27:1b:d9:02:98:0d:
de:d3:0f:d9:4b:3e:b9:05:e3:a8:b4:22:a7:bb:f5:
b4:97:8c:06:ba:1c:5e:8d:93:8c:11:9c:be:48:df:
78:72:32:b8:7b:97:43:29:a4:90:7b:51:eb:71:61:
b1:81:32:9c:61:a3:8a:86:bb:1b:68:1b:b5:43:21:
da:c3:7d:f4:9d:53:a2:8a:17:8d:53:ad:53:af:74:
8e:d2:06:3c:77:3a:32:14:5c:01:35:7b:af:ff:08:
f7:64:3a:3a:45:69:87:80:50:52:3e:60:64:98:41:
e2:b6:aa:7b:89:fe:e2:ac:e3:7d:37:07:44:8a:63:
c7:b7:23:20:54:4a:4d:1b:5b:80:32:43:85:3d:97:
15:4b:99:41:5e:ac:85:d1:f8:45:59:f3:8d:3e:40:
d5:5c:00:27:62:ac:b2:55:fb:31:50:ec:32:14:86:
a0:bd:a4:d3:b6:55:7e:1e:17:a3:17:9c:ab:85:be:
1b:2f:45:f9:03:28:fb:14:dc:68:05:20:0a:a5:f0:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5A:B2:11:A4:47:57:AC:34:A0:A9:17:F6:40:92:25:5C:90:CC:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e5e51e7f-c306-3a88-bf47-f585a257c164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
X509v3 Authority Key Identifier:
keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
sbgp-ipAddrBlock: critical
IPv4:
63.174.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:40:6a:ae:01:4b:26:66:7c:84:7e:0f:41:71:4e:b7:4d:b7:
d6:f6:be:0d:43:1f:2d:4e:c9:85:b3:6e:8c:ce:e1:cf:38:8a:
da:e6:55:8e:0d:68:12:99:fa:dd:1b:4e:40:03:4b:3a:e9:82:
11:f6:e6:cc:df:cd:b5:59:b0:e6:23:8c:8a:c8:db:88:38:e7:
e7:0e:82:57:f7:8c:7d:32:2c:ed:39:e5:7c:dc:19:cb:ac:a2:
e4:a8:03:ee:9e:4a:09:82:79:b8:76:4d:bc:bc:3a:ef:d5:4c:
e1:58:09:7f:9b:81:c6:63:10:dc:78:bf:61:aa:67:87:fe:de:
8a:fc:fc:21:4d:31:38:cd:94:76:68:b4:2b:97:3d:cb:eb:e4:
a5:e3:66:d0:c8:6f:71:6e:15:f6:7c:b9:7e:0b:38:ed:52:11:
92:28:a9:74:79:01:6e:a4:82:3c:9f:83:76:92:06:28:3e:e9:
39:8a:b0:b1:c6:c0:01:4b:34:4e:29:c5:7d:76:15:7e:62:5b:
8d:45:6e:1a:b0:61:12:9d:4e:7c:c6:65:c4:c6:97:4c:d2:2b:
60:7a:5a:ee:bb:2e:f1:90:1e:65:46:f6:11:a7:77:f5:6b:13:
24:89:82:ac:d1:79:e8:f1:12:8c:bc:db:b4:b2:45:ef:8d:5a:
33:79:aa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:31:26 2025 by rpki-client