Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36e441e0-4ddd-33ef-ac8a-aa156d536b1d.roa
File: 36e441e0-4ddd-33ef-ac8a-aa156d536b1d.roa (raw, json)
Hash identifier: yGLVP1JHmXM1qGs1rpUziiIG8RzfY6piOuX+9O5hHXg=
Subject key identifier: E4:33:E5:65:00:4B:9D:E7:DF:F9:99:FC:70:26:10:62:B1:9B:4A:A0
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285845DDACD00201B74378FEC28C40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36e441e0-4ddd-33ef-ac8a-aa156d536b1d.roa
Signing time: Mon 13 May 2024 12:00:00 +0000
ROA not before: Mon 13 May 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 162.158.172.0/24 maxlen: 24
172.69.49.0/24 maxlen: 24
172.68.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:dd:ac:d0:02:01:b7:43:78:fe:c2:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: May 13 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=81b13a5b-8b2b-47a1-8fdc-9a47018225f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:c9:eb:13:e1:eb:4d:cc:58:78:95:16:a7:
9b:d5:30:69:16:db:e0:d1:e7:b7:df:ef:7a:3b:b3:
0d:7f:1e:0d:54:ed:e0:cd:4f:bb:54:af:78:d1:b4:
c4:32:2d:2a:27:0b:bc:77:6d:c0:d4:3a:1f:69:30:
07:d9:9e:f7:5f:e7:02:2f:ab:ad:a1:e4:ea:d7:1e:
68:f5:a4:22:c9:b7:92:d7:d4:6c:62:c7:ec:43:d9:
c3:4a:21:b3:ee:75:39:d0:ce:64:2f:de:d6:98:14:
1a:b0:bb:c3:3f:61:a2:d3:87:6a:8a:da:c0:6d:f4:
fb:bb:00:8e:85:34:41:bd:c8:44:46:e9:a0:b6:c9:
d4:80:35:12:ab:40:0f:6c:4e:84:2c:c3:ac:0c:21:
ee:39:ee:ff:1b:b6:95:55:a3:de:8e:e1:33:b1:44:
d5:13:08:5f:a6:70:b5:20:85:be:19:92:70:b1:48:
63:fe:34:db:78:41:8b:b6:c6:64:3e:5b:38:a2:e4:
e8:7e:93:5c:a0:71:d9:64:15:ef:34:93:f0:af:07:
fd:c6:d1:73:2a:be:b2:dc:18:bf:9c:1e:e1:8e:f3:
b2:5c:93:30:de:4c:f3:9f:bb:74:b0:97:ce:06:8e:
7a:29:6e:87:03:88:21:38:2c:64:70:e7:78:fd:d5:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:E5:65:00:4B:9D:E7:DF:F9:99:FC:70:26:10:62:B1:9B:4A:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36e441e0-4ddd-33ef-ac8a-aa156d536b1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.172.0/24
172.68.159.0/24
172.69.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:b6:37:5b:dd:43:08:26:f8:23:39:71:a2:e4:99:7e:b6:e5:
27:a3:6e:07:5e:24:9d:d3:f1:77:5c:a1:17:88:83:00:39:73:
fe:f6:a7:eb:b5:79:49:31:1a:52:92:b4:c0:0e:ed:9d:27:91:
7b:a8:d9:f5:e8:34:a6:0c:01:26:9c:0c:70:8f:df:b6:a0:7a:
30:f9:a8:ce:fd:22:74:73:2c:f9:c3:9a:89:fa:3c:62:df:d7:
d3:2f:5f:7c:93:55:1c:ae:03:6e:fb:47:8a:b6:d9:ce:1d:f3:
72:e5:42:1d:e2:82:b4:70:e1:32:90:82:20:28:3e:f6:04:51:
09:72:c7:fb:40:df:41:31:c5:04:7c:5d:37:12:d9:af:ad:11:
54:33:09:3d:4e:61:3f:5c:18:8d:4d:ce:c1:29:3f:13:1b:f2:
c4:87:5e:4a:cb:26:16:91:aa:41:81:92:07:d8:e2:7b:41:31:
d8:98:9d:11:58:f2:86:e1:23:fa:4c:98:7a:bc:d7:5c:cd:04:
72:6f:33:d9:98:ea:5d:b0:d7:c9:5a:58:26:51:76:b3:02:4c:
68:2c:1f:ca:9d:9a:a3:a8:80:09:7c:ba:d6:21:2b:94:3b:d4:
b7:02:7c:4c:2e:63:df:39:92:b5:26:22:4e:62:d7:8a:75:dc:
f2:6b:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:21 2025 by rpki-client