Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/268cf494-6c97-3c51-a671-bd26771cd43c.roa
File: 268cf494-6c97-3c51-a671-bd26771cd43c.roa (raw, json)
Hash identifier: OP5KVNfRJzbt54jnmjJrEd4zGCjBzCpeY5Nbbl38R7I=
Subject key identifier: 2F:D9:70:65:2C:EF:B2:89:CB:13:F0:75:0F:04:44:C1:99:FC:69:D6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584630E3B2F38CBA63B88EEBD1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/268cf494-6c97-3c51-a671-bd26771cd43c.roa
Signing time: Tue 11 Jun 2024 12:00:00 +0000
ROA not before: Tue 11 Jun 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 162.158.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:30:e3:b2:f3:8c:ba:63:b8:8e:eb:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 11 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=c3e0605e-3cfb-458c-8b89-b84ccac6885c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:19:58:48:30:5b:3b:db:1c:7e:6e:a4:77:
ff:68:9c:c2:96:b5:9e:51:cc:e3:d1:24:f6:b4:73:
d8:a3:ed:15:62:7c:ed:a4:7a:00:d2:ba:4b:32:bf:
3f:a6:ac:69:e8:a5:4f:ab:40:19:bc:04:c6:c8:67:
31:09:be:9d:87:b9:40:71:1c:1d:72:5c:d2:dd:ba:
48:57:3f:00:fa:98:d3:d6:a1:e2:48:85:ab:c2:aa:
40:95:ae:52:92:73:ca:87:bb:d6:4e:66:a6:3d:67:
8f:72:a0:4a:2a:93:11:34:a9:a4:ff:d5:af:5d:da:
b0:45:85:5c:37:87:06:33:59:ea:86:34:e8:28:13:
f8:15:60:de:82:d6:60:93:b6:77:28:ad:23:45:bd:
c6:4b:27:38:fa:1a:8a:72:06:99:68:4e:99:7e:fb:
8b:14:38:83:a5:65:17:61:89:de:e6:05:60:f5:1b:
05:4d:5e:ad:34:df:ea:7f:67:f8:e6:fd:bc:79:e2:
41:cd:3d:34:70:71:7d:e9:be:2c:00:65:99:fb:a7:
21:e1:a9:0f:4b:ad:e5:dc:52:e3:d2:8b:92:95:6e:
0e:9e:ec:c1:a2:bc:38:73:f6:1d:e5:77:fb:98:a0:
82:b1:a0:5d:0d:3b:fe:30:7f:25:69:94:c9:9d:fa:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:70:65:2C:EF:B2:89:CB:13:F0:75:0F:04:44:C1:99:FC:69:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/268cf494-6c97-3c51-a671-bd26771cd43c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:74:7c:ec:e2:7e:d8:5c:ae:8f:15:37:72:30:84:de:87:81:
fd:af:6f:b4:6c:10:08:3c:4e:50:ee:16:44:69:9e:b6:3c:c9:
f0:34:56:df:75:7a:5b:10:2c:4e:3b:53:57:40:ec:96:99:21:
1b:61:c7:84:e1:72:d9:e6:7f:19:54:21:1b:9f:53:69:8d:f0:
82:84:f6:22:3c:ba:11:88:8d:be:a9:da:0c:64:ef:a4:e1:f6:
ce:58:2c:05:99:d0:1d:80:31:4c:90:07:d9:b7:bd:9f:80:20:
d4:af:3a:1a:45:03:8b:6a:bc:e4:ab:b5:50:fc:6a:96:4e:46:
63:39:14:84:fc:bd:72:39:4f:09:f5:14:84:16:31:c1:46:13:
b7:9d:d2:9a:e0:62:e5:01:34:d9:20:01:87:4c:ae:2d:0d:b8:
42:f1:67:97:fd:f4:24:47:24:94:ff:b7:2b:de:e0:eb:a8:8f:
45:73:54:0f:65:ce:a6:60:5c:5d:de:27:4c:95:0c:b1:a1:5e:
e1:5b:e9:b1:e8:b3:70:da:21:e8:c8:4f:ef:8c:15:dd:7f:8b:
8f:86:6f:e3:d0:3f:ed:37:08:04:83:4e:01:d0:65:56:99:c2:
63:b5:06:d7:9f:c9:2c:d9:05:09:fa:cf:a4:12:33:50:0e:37:
32:c5:50:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:58:21 2025 by rpki-client