Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3714717c-a7ef-385d-be62-02b83d91b60a.roa
File: 3714717c-a7ef-385d-be62-02b83d91b60a.roa (raw, json)
Hash identifier: W1+XZOYa5hVSlY+rhKt9tuKBYBHSYo11ylhc2dDsh68=
Subject key identifier: 5B:CF:B3:48:1E:B7:AB:3D:29:7B:C0:BD:BC:4D:E6:AD:2C:31:F5:40
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285846B2B1ACF7D403D181A274B300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3714717c-a7ef-385d-be62-02b83d91b60a.roa
Signing time: Sun 28 Jul 2024 12:00:00 +0000
ROA not before: Sun 28 Jul 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.68.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b2:b1:ac:f7:d4:03:d1:81:a2:74:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 28 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=8f2d8d0b-7e5d-4cda-b03a-09f09517e72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:48:51:a3:fa:db:97:95:3e:cd:8f:86:72:ff:
40:fb:ee:f9:fb:c2:52:6a:d0:b1:e5:bc:6d:d7:c2:
78:d6:df:75:82:77:d0:de:bc:30:e2:45:c6:b9:cd:
c0:3b:a4:68:4a:9d:c3:60:29:f4:cd:44:fb:c0:55:
d2:8a:51:4a:75:44:55:41:2f:fe:1b:df:4d:dd:6e:
08:d5:a3:6d:39:05:5e:bb:e0:ed:44:88:cb:65:c7:
11:39:f1:fa:ee:c9:dc:a5:14:59:7f:2e:0b:d0:6d:
58:60:ae:61:91:d5:6e:d5:7f:11:0d:c2:5a:33:30:
0d:01:30:8e:b7:6f:80:9f:de:dd:68:40:f4:56:35:
2e:82:ea:ee:17:f2:bb:35:f8:01:1d:6c:dc:a8:ea:
7f:11:79:b1:8b:14:31:80:c8:11:3a:74:e2:fc:5d:
59:e5:b2:4e:1c:b5:26:81:57:ac:d1:62:ea:49:ab:
d6:e0:2c:0a:42:b5:b9:6b:7a:b8:ed:ea:84:d1:8d:
2f:0f:08:04:b0:2a:0d:39:4c:f3:84:05:13:7a:9c:
78:8f:f7:59:85:71:91:31:96:ad:e1:5c:0a:db:6b:
ec:b5:66:7c:cf:ca:f7:eb:b8:29:57:57:d3:f9:f6:
35:4f:3a:c2:04:e6:ad:dc:1b:ee:65:b3:f0:a0:8a:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:B3:48:1E:B7:AB:3D:29:7B:C0:BD:BC:4D:E6:AD:2C:31:F5:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3714717c-a7ef-385d-be62-02b83d91b60a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:29:3d:e0:73:9f:77:d0:fa:ec:8b:98:46:1c:f9:2b:89:13:
26:a8:cb:72:1d:be:76:90:7b:f5:ab:23:49:d1:8b:25:ef:ce:
c1:0e:ce:4b:e5:d1:e6:9c:07:87:34:e6:dc:4d:46:b9:fe:c6:
9d:d9:ef:12:2b:ea:56:35:4f:61:67:21:54:a5:e2:73:4a:a8:
75:51:67:3c:69:5b:a7:27:95:ce:27:88:e4:7e:f7:7a:ba:a1:
1b:0e:07:c6:86:d6:fd:aa:46:e9:f6:25:10:ef:14:a6:ab:16:
00:0b:5d:2f:9f:d4:b0:63:7a:1d:6a:ec:8b:7f:36:dc:f5:51:
48:a5:cd:b4:a1:2b:b8:fc:ee:f1:a5:47:3e:6e:80:7e:b2:45:
55:7f:dd:c4:01:03:da:3e:12:68:e1:2e:68:ac:70:61:53:76:
c6:e3:05:9c:72:ed:a8:50:b6:80:d2:e0:7a:d5:07:1a:99:97:
55:e4:fb:b0:08:87:b9:10:b6:d6:88:fa:05:5a:cf:b6:b6:19:
2b:96:c2:a5:be:19:cd:c9:15:bd:4b:6c:14:94:93:29:43:cd:
c7:ae:11:7d:56:1b:70:0b:0a:de:a0:57:e1:2b:06:ac:c1:03:
eb:04:b1:a0:6e:30:d8:58:1e:19:5f:2c:c5:22:02:3b:a3:c8:
d5:3e:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:34 2025 by rpki-client