Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/2af2bff2-669d-354c-b906-1975945a1f02.roa
File: 2af2bff2-669d-354c-b906-1975945a1f02.roa (raw, json)
Hash identifier: +XOJONJHVj2WTeNA4vDY7hR01546xnO+FnL9hNdWw8I=
Subject key identifier: 22:F7:F1:7A:C7:75:9F:51:18:FD:7D:51:A2:90:0C:36:90:1D:39:EB
Certificate issuer: /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial: 010D0C9F43285845800740F862BDF2896B696B80
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/2af2bff2-669d-354c-b906-1975945a1f02.roa
Signing time: Wed 10 Apr 2024 14:24:10 +0000
ROA not before: Wed 10 Apr 2024 14:24:10 +0000
ROA not after: Tue 09 Jul 2024 14:24:10 +0000
asID: 25914
IP address blocks: 65.49.152.0/21 maxlen: 21
132.147.240.0/20 maxlen: 20
108.160.88.0/24 maxlen: 24
2607:2900::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:80:07:40:f8:62:bd:f2:89:6b:69:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
Validity
Not Before: Apr 10 14:24:10 2024 GMT
Not After : Jul 9 14:24:10 2024 GMT
Subject: CN=e2da6e6b-88aa-46da-8f4b-c37f971785dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:97:66:12:08:a7:12:d0:eb:fe:e7:4a:0d:
76:06:e2:9c:d0:92:83:18:19:7b:a1:5b:73:c8:f1:
13:86:7e:25:32:a4:10:ad:59:85:88:a4:46:41:3d:
af:09:bc:7b:8a:8b:c5:cb:30:77:38:75:64:05:cd:
0f:49:36:8f:12:91:7d:eb:ed:ee:c4:a8:cb:21:f5:
f5:19:86:c4:a9:4d:9e:7a:d3:94:81:8f:5c:c3:07:
27:a6:88:a4:c6:fe:d8:21:b3:b2:ef:25:12:b8:6d:
cb:5b:2f:ce:40:1d:1e:0e:67:4a:e8:2c:f0:f7:16:
9c:74:d9:65:d2:5d:33:2e:76:6a:4f:57:00:b8:14:
d8:3b:b2:8f:50:59:fb:7f:81:ca:55:84:bd:03:bf:
3f:e9:79:01:b1:be:4d:10:38:8d:fb:3d:23:e4:85:
82:4b:34:b2:2d:f9:20:0f:38:40:59:18:cb:72:5d:
77:d1:ff:ca:17:e4:e8:8e:ff:1a:c7:7a:cc:78:41:
d7:6a:82:c7:f1:1f:6c:72:af:91:b4:16:cc:be:3b:
df:75:81:a1:4d:74:74:29:af:40:9f:f5:b8:cb:60:
5b:0c:65:5e:fb:c9:2b:e3:73:34:62:1e:23:cc:22:
d8:49:ad:3e:27:08:32:fa:24:bb:5c:d4:23:2f:00:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F7:F1:7A:C7:75:9F:51:18:FD:7D:51:A2:90:0C:36:90:1D:39:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/2af2bff2-669d-354c-b906-1975945a1f02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
X509v3 Authority Key Identifier:
keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.152.0/21
108.160.88.0/24
132.147.240.0/20
IPv6:
2607:2900::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:fe:5d:47:1a:b3:85:fe:59:e4:0e:26:8a:52:16:c2:a4:14:
a5:83:2e:e1:ba:1e:49:df:ba:d8:5d:ec:38:e5:a1:4a:9b:71:
c8:3a:58:64:75:2e:0c:8e:a1:e1:b1:cb:4d:6a:a0:b0:61:67:
63:fa:03:d5:79:29:7a:f5:2d:0b:e8:59:57:a7:88:8b:f7:f6:
61:76:10:c1:79:52:7a:df:a2:2a:86:4d:26:2f:44:0d:57:95:
2d:74:5b:b0:6e:0e:bb:bc:d4:df:12:35:6f:88:27:74:a2:ac:
d9:37:e8:64:86:88:53:37:e2:b1:42:d1:a5:35:b2:14:6d:b2:
9c:08:16:40:ff:59:36:92:37:54:c8:5e:19:04:f2:66:ec:2d:
90:dd:10:95:0f:3e:7a:92:ef:d9:f5:3f:1e:f2:72:bc:d8:df:
09:11:a1:05:db:33:60:d7:04:1a:81:aa:fc:6c:dd:b3:39:03:
62:5b:e3:65:af:85:54:66:65:5b:53:f7:a7:31:b4:0f:84:47:
ba:ac:f1:43:3a:f8:59:6a:e8:28:86:3e:69:13:56:1e:60:25:
e3:ff:e8:bb:4f:b5:b9:20:b2:c1:73:d1:c6:89:ca:62:84:5b:
1c:d9:87:35:b8:78:ec:11:9c:e5:21:64:6c:56:b4:be:14:03:
3a:76:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:36 2025 by rpki-client