Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa989d0f-4f34-31f9-8fa5-95c5d0a981da.roa
File: aa989d0f-4f34-31f9-8fa5-95c5d0a981da.roa (raw, json)
Hash identifier: WVJQHL4oGA2Lp686YszlM6MArec8cW6AE/9pCXOg5sE=
Subject key identifier: E0:7A:56:AB:90:90:F7:05:FF:72:69:24:61:46:DB:5F:11:C5:0E:04
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285846046B2CEABAD5FE2F2ADA3F5F
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa989d0f-4f34-31f9-8fa5-95c5d0a981da.roa
Signing time: Mon 27 May 2024 12:00:00 +0000
ROA not before: Mon 27 May 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.68.199.0/24 maxlen: 24
162.158.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:04:6b:2c:ea:ba:d5:fe:2f:2a:da:3f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: May 27 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=cd17e8f2-49ed-49dc-baac-6268164d1329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b9:01:aa:a6:51:a6:5e:b9:95:4e:c6:8b:b8:
00:a9:4e:c0:7c:89:ee:6e:d5:6c:fb:89:fd:59:42:
d3:df:a1:69:1f:74:b2:9a:e8:74:cd:36:89:18:d0:
da:b0:39:96:9e:19:14:3d:df:7d:85:98:d9:1c:73:
bc:d1:70:53:ea:0c:f9:25:1a:14:6b:3c:8a:33:9a:
87:e2:b4:29:5d:a1:5f:34:59:b3:6f:fa:e3:0d:99:
64:48:97:b1:98:92:15:ab:92:25:f8:25:a1:d5:d8:
b5:81:67:de:98:d8:8e:6c:d6:f6:7b:51:17:c8:06:
33:d8:a6:0d:06:6a:40:f3:bf:e9:72:57:57:f2:04:
67:cb:15:bf:93:61:7b:67:99:94:ad:b2:61:28:4d:
c9:8f:e6:72:51:7c:eb:68:a9:25:4d:33:ed:1d:b7:
0e:6d:c7:f0:32:86:ae:fd:c6:39:93:c3:47:c6:e5:
e7:62:85:99:61:67:8f:21:71:f9:6f:94:87:ba:41:
04:ec:8c:51:aa:22:96:d9:6a:66:6c:6a:5f:af:01:
d5:46:fd:f5:6e:23:33:1d:3f:c1:38:0e:53:e9:c1:
2b:20:76:3d:0e:7d:9f:b1:c8:02:8e:5a:c2:82:45:
36:e0:cf:2d:0c:89:90:ba:e5:5c:c8:cc:0f:ae:2a:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7A:56:AB:90:90:F7:05:FF:72:69:24:61:46:DB:5F:11:C5:0E:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa989d0f-4f34-31f9-8fa5-95c5d0a981da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.6.0/24
172.68.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:25:ab:8c:a6:08:7d:29:3b:35:60:15:cc:80:33:9e:7d:41:
7a:12:3f:8c:bf:cb:07:b8:94:73:56:43:18:b9:94:0f:24:b2:
34:af:56:e9:5d:a6:41:72:52:f5:0d:ca:59:54:f5:63:50:2e:
bf:2d:b1:58:4f:20:ca:8c:f9:cc:e9:01:ab:b9:cb:c2:f2:69:
0e:34:3f:d7:d7:f3:c7:28:51:0b:f6:77:54:ee:e6:ff:13:56:
0d:3e:06:d5:22:7b:ab:db:61:e2:a0:ba:58:e3:82:4c:6d:32:
d6:48:6f:b7:d4:9d:c6:ce:14:59:da:bc:91:67:01:a5:66:1c:
c4:fc:96:e7:b3:7a:a9:ea:0b:87:dd:e8:14:ec:d8:77:b9:80:
e6:b9:15:ab:a2:18:fd:87:19:36:55:15:36:dd:66:7b:76:a2:
1b:47:35:65:3a:85:a7:44:ae:51:33:f1:11:f6:a7:31:e6:cd:
5f:8e:a4:93:08:33:eb:03:ef:d1:de:eb:d3:bb:15:41:1a:30:
ab:c3:fa:0f:21:1c:25:75:e4:f6:31:93:c1:44:e8:d8:5c:8c:
74:3e:17:c0:80:d5:21:11:e0:ec:50:3c:ca:fd:2d:9a:5e:3f:
df:56:1b:a2:60:c3:41:7f:af:83:ef:1d:27:70:e9:49:92:ac:
74:ff:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:04 2025 by rpki-client