Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e636b40d-aeda-3659-8546-cf25c460f2b4.roa
File: e636b40d-aeda-3659-8546-cf25c460f2b4.roa (raw, json)
Hash identifier: qap3sJatYAX0A30A+rI3yLOX3C4V/LAQbB+OIzvnhy0=
Subject key identifier: 0B:46:D6:A9:B2:5B:87:1F:AD:39:BF:55:10:F3:D0:B8:3F:A3:BB:47
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285844A5E1FAB17BBA08A0442E9D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e636b40d-aeda-3659-8546-cf25c460f2b4.roa
Signing time: Mon 22 Jan 2024 12:00:00 +0000
ROA not before: Mon 22 Jan 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.69.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a5:e1:fa:b1:7b:ba:08:a0:44:2e:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 22 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=80c75e0b-a8da-4c0b-a5df-a3cd4066c125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dc:1c:1e:f9:0c:92:3d:57:aa:78:82:84:bb:
1a:cf:c6:29:f5:22:d0:2e:57:95:f1:20:ad:c7:80:
71:6a:3b:20:ed:5c:ac:fe:ed:5b:53:3f:35:46:ac:
05:17:61:d2:85:00:c1:f0:c1:cc:90:a6:0f:13:1c:
16:a6:42:e5:47:21:8a:85:70:ee:a6:c8:c0:a2:ab:
b0:14:39:62:c3:9e:05:1b:e4:3e:c1:ff:3e:9c:44:
9d:8d:8f:44:01:92:5e:d0:60:5f:d4:41:1b:38:a3:
b6:28:20:b4:0e:6b:da:af:3a:c0:ed:d2:16:e4:5b:
fd:cf:62:15:12:5f:b4:0c:11:51:73:ab:98:f2:9d:
1e:3b:30:1a:d3:fa:9a:19:b6:be:c0:2c:8a:98:55:
cf:d5:ff:fc:0b:a7:51:b4:a2:e9:1e:d9:7f:e8:e8:
98:2c:fa:f4:51:53:57:91:c2:73:31:cc:d4:03:d3:
50:ee:09:13:37:f6:64:4a:9b:9d:6e:6d:b4:8e:77:
09:38:cc:72:0a:73:7c:25:f9:8b:d4:9e:ef:10:b2:
5c:35:b3:39:fe:50:81:19:88:eb:db:c2:50:4b:c0:
b5:a8:31:b3:dd:68:08:53:62:2c:e5:8b:55:48:fd:
e6:19:0c:77:25:2d:bb:cd:ab:fa:2b:9c:62:65:85:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:D6:A9:B2:5B:87:1F:AD:39:BF:55:10:F3:D0:B8:3F:A3:BB:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e636b40d-aeda-3659-8546-cf25c460f2b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:55:c7:11:1f:b2:6d:ea:a1:2b:d0:c4:84:08:0d:8a:22:d6:
6e:60:1d:1e:ea:85:13:c1:97:ee:23:1d:ba:78:71:d8:a2:5e:
79:90:b2:4f:f1:66:0c:14:41:21:46:e1:09:32:75:8d:e7:66:
53:c4:dc:94:ef:da:0d:56:6e:cf:83:d1:7f:03:2b:63:29:11:
99:00:ec:c3:54:1b:bb:a2:9a:c8:e5:09:17:1f:70:e1:82:61:
fb:63:c4:e0:44:4d:53:77:51:dd:57:3c:82:f6:e9:d8:30:95:
1f:6f:f8:54:6d:3e:33:de:b1:a5:83:a7:f7:0c:72:3f:64:a5:
95:75:31:12:5e:c2:81:72:c5:51:1b:dc:8e:41:a8:24:90:b4:
8a:e5:8c:7c:d0:bc:94:f9:27:9f:a2:3a:ee:db:b7:68:61:e7:
eb:55:32:6f:0b:53:0d:bf:d8:e9:3d:96:ea:c4:20:d5:f2:c6:
58:8f:f8:63:30:eb:81:05:e6:9f:36:34:e3:8a:c1:fb:9a:7c:
07:6c:ce:80:9a:75:cc:98:d3:e1:a8:e8:43:ad:ae:a2:10:cd:
fb:69:fd:b2:70:c9:75:34:a3:c6:c2:c1:da:9e:5e:70:ed:3c:
e3:71:5e:f0:5f:27:03:96:8d:50:9b:9e:04:e7:b3:1a:1d:03:
4c:7d:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:04 2025 by rpki-client