Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/847dde4f-0afc-39c6-98a3-e28902b9da4e.roa
File: 847dde4f-0afc-39c6-98a3-e28902b9da4e.roa (raw, json)
Hash identifier: TcOnPmHM96KF50COb/RTaL3ial5cU+rr9hHnBks8jG4=
Subject key identifier: 99:98:8C:88:41:B4:F8:C0:28:DE:8A:67:B0:8E:62:01:C9:44:85:B1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584683FC8155887B3AEDBA26DD60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/847dde4f-0afc-39c6-98a3-e28902b9da4e.roa
Signing time: Thu 11 Jul 2024 12:00:00 +0000
ROA not before: Thu 11 Jul 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.69.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:83:fc:81:55:88:7b:3a:ed:ba:26:dd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 11 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=9fd26e1b-bf8d-4829-8944-beab9a6f5106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:24:26:22:73:c3:98:e5:47:71:aa:55:62:
cc:23:f9:94:df:d2:56:b2:3c:22:7b:7b:b7:84:8e:
fa:43:c7:5b:44:1f:b3:99:8b:fc:ce:e5:56:bc:28:
83:51:cc:a5:56:c0:e2:d6:c2:9a:84:fc:c4:88:ea:
4f:b7:b0:b9:66:42:25:a7:d6:f2:5c:42:0f:8d:6e:
fc:d5:f0:df:65:5e:52:05:32:e2:23:a4:52:47:6c:
15:14:db:d2:c6:e2:ec:61:1d:de:63:ec:cb:e3:8b:
af:6f:3f:e4:bb:f3:37:da:24:9e:a2:4d:a9:84:8c:
48:52:44:a7:8b:05:30:4d:f1:12:ff:a1:47:5d:94:
0a:d5:6b:47:13:e1:bf:77:91:27:3b:20:08:cf:64:
53:88:e5:43:7f:cf:16:2f:48:f5:29:22:d1:7c:2d:
6b:48:46:64:41:ac:90:f4:54:08:71:d8:71:ab:10:
d7:b4:20:7d:35:4b:c5:f8:ed:62:cd:b2:7e:25:46:
b1:88:cd:d0:4b:9a:73:19:e7:50:8f:f6:4f:f6:3d:
0a:d7:c4:f6:dd:2c:db:75:dd:15:77:4e:9e:e0:f9:
e5:d4:35:8c:57:74:d9:f8:34:1d:88:63:b2:26:e6:
6d:9c:92:87:de:4b:d0:4d:4b:49:2b:08:f5:ed:85:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:98:8C:88:41:B4:F8:C0:28:DE:8A:67:B0:8E:62:01:C9:44:85:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/847dde4f-0afc-39c6-98a3-e28902b9da4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:2d:80:87:ab:27:18:6b:85:a3:03:40:86:78:0e:fb:9c:c7:
12:f3:10:a6:6d:29:53:3d:b0:cb:f1:0b:0c:a9:81:0b:7e:83:
7f:4a:3b:c0:03:5f:fd:fd:54:69:fb:d2:1b:fd:00:7c:2c:28:
44:27:cc:ce:19:a7:a8:92:08:54:69:05:2f:81:6b:86:d6:c7:
87:bc:19:de:5a:65:25:43:68:ee:9b:22:21:38:61:af:26:b4:
27:80:47:eb:9f:69:49:1f:c3:bd:97:6d:a1:5a:5e:85:83:1f:
ac:8f:68:38:cc:2d:a4:bf:e9:4b:6e:6a:0a:57:fd:4e:35:2a:
88:46:e4:b0:cd:01:6e:95:ab:7f:f3:f9:58:ce:3f:2a:41:f5:
d4:49:cf:ce:ec:2f:50:fb:35:8f:fb:07:20:e0:ee:2d:ae:c9:
33:d9:3e:b8:18:d0:ea:06:7e:8f:fe:31:b8:dd:46:4e:71:49:
07:e2:d4:2f:7c:9b:01:0e:7f:65:8d:43:06:e3:cd:1a:02:54:
ad:c2:ec:b6:fe:84:d8:ce:4d:22:91:5a:ee:dc:9d:34:aa:c3:
d9:a5:a2:45:00:b7:f5:94:4c:1c:e0:1d:7a:5f:b4:dc:d8:5a:
bb:36:bc:be:27:f5:37:76:d4:cf:73:18:bf:a8:95:4a:f7:83:
6b:7f:65:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:00 2025 by rpki-client