Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e6411d7f-76b5-3494-b015-5a48ad263bd9.roa
File: e6411d7f-76b5-3494-b015-5a48ad263bd9.roa (raw, json)
Hash identifier: XT+Ko2/S9KXlO0EYyEM+irZI66C5VhC8uDiAOv3BU/0=
Subject key identifier: A3:9F:7C:0B:14:A3:93:94:8C:54:81:A5:37:74:EF:AA:23:2B:21:8A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858461BFABC6ADE155F2D8B2D9420
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e6411d7f-76b5-3494-b015-5a48ad263bd9.roa
Signing time: Tue 04 Jun 2024 12:00:00 +0000
ROA not before: Tue 04 Jun 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.69.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:1b:fa:bc:6a:de:15:5f:2d:8b:2d:94:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jun 4 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=32e6287c-38c2-4bb7-906b-c1b9f7e468fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:01:8a:fd:e6:71:85:06:b1:a5:43:c2:db:
4a:92:46:e6:2f:49:09:cb:90:99:22:18:41:f9:bb:
15:45:1a:9c:62:be:56:a4:67:0d:d1:b7:0e:d9:d1:
d5:ab:26:2c:15:73:f7:08:48:83:4f:ae:61:46:62:
3f:a5:fd:3d:e9:2f:02:88:6b:9a:ca:3f:ec:d7:18:
25:46:93:91:a0:9f:61:76:73:fa:64:10:2f:a8:75:
39:88:46:d6:a5:fd:de:61:45:b2:f4:53:b2:b6:a9:
c2:2d:18:8d:56:96:62:fd:b8:79:13:37:97:58:45:
fe:86:00:58:f7:cc:eb:01:ce:76:f1:83:a8:12:8b:
c5:ef:39:1a:5d:36:ed:d1:88:3b:f5:49:c5:7a:4d:
3b:1f:6e:fc:c7:5a:61:94:82:87:a1:7d:82:70:c5:
a0:ca:15:fa:da:9f:7e:90:a0:29:80:a6:b7:cc:ba:
1d:73:e8:c2:09:f2:36:97:48:26:bf:be:da:2a:9b:
1c:e1:4d:0b:8a:a8:87:41:91:2e:af:24:c8:21:91:
86:4a:d1:ec:0d:ee:f4:b4:69:34:4b:c5:a0:31:df:
b6:20:e0:3a:fd:af:2d:c3:d3:55:36:47:62:7a:30:
50:a3:95:78:f1:53:15:6c:be:45:d2:cd:25:eb:85:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:7C:0B:14:A3:93:94:8C:54:81:A5:37:74:EF:AA:23:2B:21:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e6411d7f-76b5-3494-b015-5a48ad263bd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:dd:b7:70:08:4f:75:61:7c:0e:8b:a9:59:2d:c7:83:8d:5d:
08:ca:a9:f1:d8:3c:43:ab:31:fd:f0:8c:8c:01:76:bd:fe:f5:
e5:ff:33:ec:cb:ec:be:3f:11:fb:99:24:dd:f7:d3:fd:cb:cf:
24:18:94:ab:5b:99:ec:b0:f1:f7:1e:57:d1:1e:26:31:f9:61:
f5:10:93:aa:a6:ce:9a:4d:e2:7a:b2:1e:ee:6b:be:39:1e:a3:
5c:24:1a:f9:c4:f0:16:4c:04:b4:94:09:ce:9d:ef:d2:50:d8:
fd:7a:d1:6b:6d:d9:f6:6c:34:1a:f1:4e:3e:5f:64:a6:b1:f1:
20:1d:6f:d5:40:9f:22:48:b8:87:69:3d:0c:97:58:63:d1:8b:
39:fd:7c:e3:74:3c:9f:a7:72:a9:75:48:62:80:0f:22:ca:88:
3c:f5:68:c5:31:4d:f4:99:d5:a4:03:2f:ce:82:27:5e:4f:e1:
e0:4e:70:8c:7f:35:0c:69:ba:66:d4:21:16:67:66:d7:74:20:
12:5e:bb:35:ba:b4:03:48:6f:06:3e:ae:8e:6b:2f:9f:83:15:
8c:4d:ca:eb:7c:fc:b2:18:38:89:de:a9:a9:d5:f7:ea:85:26:
dd:25:ab:40:85:28:9d:82:de:cf:0a:14:73:09:bb:7d:20:10:
54:3c:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:03 2025 by rpki-client