Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/1e781368-2f65-3b97-a2b3-f95332a09c90.roa
File: 1e781368-2f65-3b97-a2b3-f95332a09c90.roa (raw, json)
Hash identifier: gkvi/M67ZYjUXv24Boi0pyT3vFondoo8tKAbbWy3P1U=
Subject key identifier: C7:1F:20:D3:31:15:1A:53:3D:07:8C:81:0F:BE:19:EE:1F:BB:2C:01
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F432858480730715885C3FDED29D14600
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/1e781368-2f65-3b97-a2b3-f95332a09c90.roa
Signing time: Thu 28 Nov 2024 09:55:09 +0000
ROA not before: Thu 28 Nov 2024 09:55:09 +0000
ROA not after: Wed 26 Feb 2025 09:55:09 +0000
asID: 43260
IP address blocks: 199.96.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:30:71:58:85:c3:fd:ed:29:d1:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Nov 28 09:55:09 2024 GMT
Not After : Feb 26 09:55:09 2025 GMT
Subject: CN=a2d17d64-c366-4b26-aef4-0ed4132a5bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:e2:3d:c3:23:07:86:c1:4a:a0:1c:c9:a2:
62:4f:88:8f:c4:9f:1e:3e:3a:53:1c:57:db:5a:af:
2b:01:b7:e0:d2:40:17:cd:4e:ad:e9:e4:e6:19:c7:
ee:82:20:ec:7b:d7:ce:e4:66:9d:de:86:48:bd:0d:
87:91:76:92:ae:36:73:48:97:7d:3f:7d:0e:de:b7:
46:08:8e:d0:4b:bb:a2:48:22:65:36:f1:f2:c6:df:
2a:05:3b:61:81:f8:84:9b:58:5c:be:0d:7b:e0:81:
d4:8d:9b:91:39:bc:e2:76:e4:7a:a9:15:a2:57:bc:
f4:8c:51:fd:86:33:70:fd:26:0e:05:4c:a3:6a:52:
39:97:5b:fe:8b:ef:12:e6:6f:e2:1f:65:78:ab:ad:
73:82:c3:ae:7a:f9:d6:56:41:8c:7c:bd:66:a0:e8:
ee:9c:6b:c7:01:7a:80:65:08:ed:4b:44:19:d7:4a:
79:ff:ef:05:17:fc:0a:50:b1:70:2e:be:4f:2c:1c:
0c:2e:5a:b4:69:3c:98:d4:8e:93:07:70:f7:5d:73:
85:c7:0e:55:c1:55:ee:d0:59:78:fd:6d:6d:42:cd:
17:4b:6c:3d:d8:1a:29:79:3d:ca:d2:e3:30:d0:fb:
d3:e8:4f:49:25:b9:d3:cd:c6:d7:ec:86:be:d7:da:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:20:D3:31:15:1A:53:3D:07:8C:81:0F:BE:19:EE:1F:BB:2C:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/1e781368-2f65-3b97-a2b3-f95332a09c90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c9:5c:55:9b:d1:08:6c:b3:a6:9b:06:b9:d4:08:0a:91:1e:
89:33:00:f3:ab:85:00:3a:b5:0e:97:56:fc:e2:9e:00:72:c7:
58:98:0f:b4:48:4c:2e:70:a6:dd:7a:30:8b:84:81:a4:8e:ba:
4c:b0:ca:96:58:6c:3b:ab:8f:23:cd:f1:03:76:16:22:d6:f6:
19:e3:46:36:0d:41:f4:c2:25:f6:52:00:de:d0:5f:f5:36:80:
7d:c0:fc:e9:f3:7c:a1:5c:1c:c3:7c:07:c6:63:ae:0c:35:e5:
ef:7e:4f:52:d8:a8:52:33:8a:25:ae:6a:0f:15:93:b4:7e:f1:
40:55:7a:f1:f3:60:7f:0c:c6:69:bc:b6:8c:55:dd:98:bc:93:
a9:74:38:f8:b8:c5:f1:c4:46:3d:58:e2:1c:43:d7:cf:83:b1:
45:7f:36:eb:1c:4f:aa:1d:a7:95:c8:3b:e3:aa:9e:89:e4:2f:
6f:68:96:f9:6b:4e:c2:fa:2e:df:0a:3f:08:6f:71:df:43:7d:
36:31:da:fb:c2:1c:a8:1b:a2:30:57:95:c7:e7:0f:c4:62:aa:
e0:04:55:f7:d4:37:b8:08:67:32:08:2d:cc:99:1d:69:65:6d:
d8:c2:ce:f5:60:cb:d2:00:ee:4c:a7:e1:68:b3:0a:c0:23:3d:
16:47:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:51:32 2025 by rpki-client