Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad2716af-e3de-3eb2-9ff2-65f9b678a4c8.roa
File: ad2716af-e3de-3eb2-9ff2-65f9b678a4c8.roa (raw, json)
Hash identifier: U+8fhhe6aci65RpBn1/XB2GBfWz1uWUbXWNNRlOKEBk=
Subject key identifier: 99:60:2F:50:01:3E:4D:3B:2D:66:52:3B:E8:C8:20:F1:0D:24:1B:F7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8F13D09F2F7A5426EB6D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad2716af-e3de-3eb2-9ff2-65f9b678a4c8.roa
Signing time: Wed 11 Dec 2024 01:59:07 +0000
ROA not before: Wed 11 Dec 2024 01:59:07 +0000
ROA not after: Tue 11 Mar 2025 00:59:07 +0000
asID: 13335
IP address blocks: 172.68.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:13:d0:9f:2f:7a:54:26:eb:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:59:07 2024 GMT
Not After : Mar 11 00:59:07 2025 GMT
Subject: CN=328b445d-924b-4001-9493-04cfe21f1414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:69:8e:53:b1:70:68:2d:77:27:2f:ee:02:
9f:1d:e9:89:bc:a3:86:13:d3:7d:10:fa:1a:5d:91:
3d:1c:a6:3c:b9:a5:03:dc:92:69:f5:c9:e2:da:dc:
31:77:d6:d6:a7:4f:27:8c:c7:c8:c6:53:1f:a2:20:
7c:0b:a2:c4:7f:b5:45:8e:c4:4b:2c:34:5e:13:d8:
9c:7f:c6:00:5f:d2:47:76:59:46:11:d7:9b:33:5d:
05:5e:54:11:2b:62:c1:4c:4f:c1:f2:50:00:e3:dd:
e3:28:b8:07:5b:d6:9b:d3:43:b5:54:f2:c6:be:a2:
c0:c9:f2:67:ff:d1:ff:7e:ce:26:ac:41:22:88:90:
8f:62:e9:e6:72:0a:c4:7a:44:49:be:f4:29:20:93:
55:9a:58:9b:40:de:fc:93:f6:63:4c:4a:b5:6e:bb:
bb:19:d8:c8:c9:8c:73:41:9d:97:27:62:27:eb:f6:
64:9e:bc:70:de:fc:47:2d:36:bc:02:9c:0e:4a:c4:
ff:7c:b0:3a:0d:fc:c0:e7:6a:39:de:18:21:b6:06:
fa:09:a6:40:49:61:ae:1a:63:26:76:98:ca:10:74:
16:78:e3:64:49:c4:2b:8c:28:fe:24:ab:3f:d8:64:
f7:27:ad:bd:4b:68:b2:ea:0b:0c:02:0d:91:a2:94:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:2F:50:01:3E:4D:3B:2D:66:52:3B:E8:C8:20:F1:0D:24:1B:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad2716af-e3de-3eb2-9ff2-65f9b678a4c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:d2:1a:9a:58:47:a1:6f:47:38:07:c4:4a:8b:d9:8f:29:26:
48:9e:31:47:c9:01:77:1a:79:49:11:e3:25:0d:f2:99:68:02:
8c:c5:81:09:b4:b0:32:ba:e6:e4:9c:60:fc:62:37:9e:6c:d8:
af:b7:53:fb:f8:e7:c6:9b:26:46:b2:9e:d5:5b:68:0f:05:63:
10:49:56:e9:66:df:c6:89:6d:b3:1a:2d:d3:f6:94:a0:8a:b5:
4f:5f:fe:33:8c:ef:e1:9a:35:ae:46:14:f9:72:bd:64:97:f8:
35:b1:aa:01:6b:25:b2:4e:c0:b5:fa:47:9b:83:34:c0:d7:91:
e9:91:94:21:a2:f7:67:4e:89:0b:11:80:e7:c1:a5:78:83:35:
ec:4a:9d:b1:87:88:c9:e4:42:f8:3d:9d:0a:ca:8a:a8:e6:6d:
64:06:c1:d5:ec:a4:c3:39:09:d9:e0:ac:bd:5a:49:1b:6e:40:
aa:c4:22:78:f5:3e:69:41:8e:50:a9:9f:fb:b3:15:56:82:68:
ff:e3:4c:32:ba:55:f6:75:ad:19:5b:ad:6b:ab:52:17:d8:e7:
ff:be:10:b6:c7:3c:b9:0c:87:f9:6f:46:26:a0:e1:d4:27:0b:
7e:bf:7f:43:13:71:94:bb:3a:30:d3:09:e4:13:c3:40:11:ab:
d6:62:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:00:30 2025 by rpki-client