Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/e37fdf51-b2d7-3b74-821f-0eda24c29987.roa
File: e37fdf51-b2d7-3b74-821f-0eda24c29987.roa (raw, json)
Hash identifier: Goz4Hudc934knhKl4ZNCWLSnAP+7op78JuxFqooqaJw=
Subject key identifier: 42:CC:43:58:24:37:B2:57:66:7F:54:FE:C5:6D:55:DC:11:AB:C7:8F
Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial: 010D0C9F4328583728B47CE0D1A309BC2881A000
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/e37fdf51-b2d7-3b74-821f-0eda24c29987.roa
Signing time: Fri 17 Jul 2020 04:00:00 +0000
ROA not before: Fri 17 Jul 2020 04:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 398797
IP address blocks: 199.255.148.0/22 maxlen: 24
2602:fd1e::/36 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:28:b4:7c:e0:d1:a3:09:bc:28:81:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Validity
Not Before: Jul 17 04:00:00 2020 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=4f373a5f-77a8-469c-99df-18fcc854945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:94:1b:97:fb:15:8a:ea:b2:cf:2f:de:85:
2f:1c:47:66:3a:54:ab:1f:87:83:29:52:e7:e6:ea:
c8:88:2f:68:ad:5c:f9:25:4f:5f:d8:b6:d9:fd:ed:
9c:61:c3:16:bd:0f:69:75:41:42:4f:d9:5a:60:a3:
ea:98:6b:6f:91:82:ec:ab:72:93:99:fe:5e:0d:cf:
78:d1:8b:b7:6c:1c:78:ba:f8:88:b2:2a:94:0b:91:
bb:22:84:d4:36:d8:b2:a6:0e:bf:c8:d6:68:3d:c7:
0a:bb:07:ad:9a:d0:6e:e8:23:5b:17:ab:30:f2:c7:
0c:81:cb:95:73:12:80:cc:60:c6:5e:72:6a:04:8a:
38:da:cc:d5:09:fe:b4:cb:99:c2:8b:c6:9a:83:42:
58:3e:2e:dc:c5:80:f3:71:c7:d7:22:e2:51:dc:ab:
4a:7a:f0:61:92:f2:e2:40:d0:6e:e5:79:3e:fc:7b:
32:7a:6f:1f:db:1a:2f:96:bc:08:9f:da:47:24:b6:
1c:96:0d:ed:3a:4d:51:97:78:dc:90:19:89:88:74:
76:12:af:ac:c4:aa:e3:ec:69:2d:01:9e:5b:56:02:
eb:a8:98:ed:d0:70:6b:71:81:db:e1:d6:11:18:5f:
b5:37:43:60:6e:af:d3:50:33:17:23:dc:f1:4e:ca:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CC:43:58:24:37:B2:57:66:7F:54:FE:C5:6D:55:DC:11:AB:C7:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/e37fdf51-b2d7-3b74-821f-0eda24c29987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
X509v3 Authority Key Identifier:
keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.148.0/22
IPv6:
2602:fd1e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8d:89:15:80:18:3b:0d:49:5e:18:03:da:3f:52:07:da:cb:
6e:19:3d:c5:ec:3a:fd:8f:50:b2:8d:00:29:e9:14:15:bd:31:
81:89:d6:31:d7:f9:a4:c0:d8:c4:4c:17:fd:46:23:51:58:81:
7b:1c:8e:34:f9:da:13:ed:6a:08:a2:4e:44:56:d6:1d:e3:65:
d2:44:a4:70:52:29:ea:1b:5a:c3:63:43:3e:4f:0b:dc:21:e6:
0a:3d:a2:79:c7:80:51:a9:d0:2d:e5:e9:5d:59:7f:1e:8e:ae:
14:91:d8:02:6b:20:d0:bd:cd:dc:44:87:3d:a9:41:ed:f9:4b:
88:c2:e4:83:cf:0c:00:e3:65:9b:01:ae:29:bd:4f:3b:38:a0:
d5:e2:eb:c6:63:54:b9:4c:61:35:d3:15:60:90:0c:df:83:99:
62:a4:13:42:08:b0:4b:48:5c:5f:dc:a3:d6:57:be:7a:df:b6:
09:a3:80:5f:26:ad:4d:47:3b:e9:3c:44:c4:91:03:e9:d4:26:
cb:6f:91:1b:17:a4:d7:94:7a:96:c1:3d:2e:08:b1:76:cb:ed:
79:7e:47:2e:0c:20:54:4f:29:f8:1e:bd:a5:de:33:42:d9:78:
39:21:e3:3b:63:97:ed:e7:13:42:30:a4:57:86:58:49:15:fd:
df:8d:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:12 2025 by rpki-client