Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa016a50-a83a-31ca-a98d-9d1b853898e6.roa
File: aa016a50-a83a-31ca-a98d-9d1b853898e6.roa (raw, json)
Hash identifier: wf0Y0Vi0lcHbIZEWRsm/ZNkny5QyFYgaH0Z4dUloeOM=
Subject key identifier: 32:1A:F4:47:2A:31:76:65:E7:AA:67:97:02:98:E4:DB:C0:4B:8D:C2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584695FA7E689EC8966C414CF0A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa016a50-a83a-31ca-a98d-9d1b853898e6.roa
Signing time: Thu 18 Jul 2024 12:00:00 +0000
ROA not before: Thu 18 Jul 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.64.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:95:fa:7e:68:9e:c8:96:6c:41:4c:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 18 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=4e43b912-db0b-4226-9229-e8e98cbde397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:51:f3:f8:72:18:74:df:67:b5:ea:c1:a1:
a0:b2:16:42:f0:77:8f:a1:c2:73:1a:3c:cb:12:91:
d6:71:16:eb:ad:0f:39:72:b8:4e:02:5e:6d:ed:c8:
b9:68:fc:47:3d:eb:99:5a:e0:cb:79:7a:81:12:02:
61:52:12:6e:92:24:20:df:04:67:2b:c6:13:b2:07:
20:60:0f:88:90:96:f7:21:e1:9b:ce:89:5c:4e:c8:
5d:74:48:7c:24:35:41:3b:9f:fc:a5:cc:ef:d6:86:
58:10:8e:b0:56:a0:fd:9b:36:bb:2d:d0:8a:bb:1b:
90:a1:1e:1d:e4:2e:60:20:57:ec:a4:08:be:d4:9a:
55:6f:a7:41:fb:6b:5b:11:b4:fa:89:6f:3d:b1:52:
41:c4:1c:13:dc:3f:f6:3f:0b:f3:0a:2b:62:68:99:
48:86:49:d8:1a:14:40:c2:3b:dc:a0:6c:6e:0f:b6:
44:ec:b8:12:2f:e9:d0:52:10:1c:b4:12:7b:14:95:
fc:9a:2b:41:d2:e0:a9:6e:08:4e:20:27:c6:fc:64:
fc:55:22:80:e6:a2:14:79:cc:2f:fb:d2:08:7b:dc:
31:6e:f6:5d:db:0c:06:c4:20:90:66:f3:c1:87:54:
7d:39:62:9c:11:9f:b1:68:90:0d:3e:1a:66:d0:38:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1A:F4:47:2A:31:76:65:E7:AA:67:97:02:98:E4:DB:C0:4B:8D:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa016a50-a83a-31ca-a98d-9d1b853898e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:39:24:49:5b:52:da:61:4c:51:0a:8d:b2:7b:4c:d9:2d:8b:
6a:25:86:b8:5b:04:62:91:d5:9d:08:23:43:4c:92:55:1a:ae:
8a:0c:da:82:ae:4c:f9:70:5f:23:b6:7f:07:c8:7d:53:d1:52:
ce:7f:57:c9:93:45:58:55:76:c3:14:68:b8:fd:9f:ed:04:c0:
6b:d7:34:61:06:53:9a:0e:74:b8:e5:a5:60:12:c6:05:d1:d4:
15:4f:85:d3:37:32:3d:ca:6f:9e:8d:45:97:8f:98:0d:19:22:
df:d3:e9:fa:cb:51:dc:32:9c:0f:14:28:ae:f7:c0:0d:6a:d8:
0a:06:45:0d:dd:67:65:27:28:2a:3b:fa:56:97:5c:60:29:96:
45:8d:cc:01:b3:d9:7b:10:19:e3:c2:c9:3b:ea:62:e0:55:be:
0e:26:a4:74:68:f6:d6:fc:93:db:f7:3e:82:c4:73:9e:dc:d9:
c2:58:4d:d2:b7:5d:30:25:d0:d6:8f:0a:69:41:e6:44:30:64:
af:a6:3a:c9:d7:f4:26:c7:ef:eb:c1:e4:75:1d:4d:8a:20:1a:
6e:e0:80:31:88:c6:79:f7:b5:a1:26:da:36:aa:dd:2e:de:fd:
47:fe:57:da:76:dd:71:57:41:cb:58:57:05:df:63:9d:3c:3a:
1c:1a:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:11 2025 by rpki-client