Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/667b88e5-5ad1-357b-86fa-06d8e9b7bd4b.roa
File: 667b88e5-5ad1-357b-86fa-06d8e9b7bd4b.roa (raw, json)
Hash identifier: TwbWsqnvo/Hls7B4HzuWaGBrLQCZt0ZA3uXDhw10F6E=
Subject key identifier: 3D:EE:FA:AA:65:AC:6C:E2:C6:4F:D0:88:7D:23:FE:CE:75:C2:6E:4C
Certificate issuer: /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial: 010D0C9F43285845DE35C4983F78DD4FBA81CE00
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/667b88e5-5ad1-357b-86fa-06d8e9b7bd4b.roa
Signing time: Tue 14 May 2024 08:03:52 +0000
ROA not before: Tue 14 May 2024 08:03:52 +0000
ROA not after: Mon 12 Aug 2024 08:03:52 +0000
asID: 25914
IP address blocks: 65.49.152.1/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:de:35:c4:98:3f:78:dd:4f:ba:81:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
Validity
Not Before: May 14 08:03:52 2024 GMT
Not After : Aug 12 08:03:52 2024 GMT
Subject: CN=a7da055f-e7d6-402b-853d-7c79ea3e2758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:92:f1:7a:1c:f8:c7:11:b9:b5:9f:47:ea:
81:49:c1:4a:32:2b:bb:d7:56:a5:fe:6f:8e:13:13:
18:25:10:60:d7:d7:9f:42:57:17:a3:2f:68:30:a5:
20:b0:7c:22:a9:fc:bb:ef:e6:08:ec:ba:78:b9:72:
c6:46:b8:8d:a9:54:b2:11:ac:8d:72:2a:b0:1e:4c:
de:1f:c7:85:d6:81:26:f0:29:09:c8:4a:16:9f:74:
53:11:02:64:0c:a1:37:4d:4c:58:74:5e:f8:d2:ae:
ca:2b:19:76:e6:8b:46:93:d1:3f:22:7b:20:d2:f4:
af:5a:ea:6e:90:52:90:ab:82:78:c3:13:0c:3c:26:
a6:01:47:ab:04:bc:3e:bf:cd:d5:66:9d:69:04:bf:
fc:52:93:58:e7:bc:63:16:42:d1:7f:fe:5e:da:a7:
6c:9f:8c:9e:db:13:e9:12:06:b6:d5:74:7e:a5:c4:
1c:10:70:95:45:74:98:e4:6e:c6:ec:55:24:7b:6a:
48:cd:f7:fa:f4:30:ed:ff:5c:38:20:80:02:92:ab:
4f:77:5a:24:82:3c:51:23:db:d3:5c:f2:8c:c1:f9:
a2:7a:d6:a2:04:10:36:9d:79:32:75:3f:26:a6:fa:
f7:4e:0c:7f:2d:44:17:1d:be:af:54:23:62:bc:3a:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EE:FA:AA:65:AC:6C:E2:C6:4F:D0:88:7D:23:FE:CE:75:C2:6E:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/667b88e5-5ad1-357b-86fa-06d8e9b7bd4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
X509v3 Authority Key Identifier:
keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.152.1/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:7e:57:61:d7:80:92:21:da:27:06:94:02:15:6d:34:bc:84:
f3:78:54:b0:f3:ec:41:b2:ab:c4:a1:42:67:6b:62:24:76:af:
d0:6f:70:0c:2a:f6:ce:ff:65:01:96:f7:a5:76:25:55:00:4f:
63:f5:a3:83:aa:88:84:ff:3d:c5:7f:df:84:b3:13:5e:b1:b1:
4c:26:46:b7:88:d0:a7:db:de:28:92:10:b2:a7:78:ee:2b:7e:
cc:0f:5f:ca:48:72:6f:1c:d1:98:f7:05:b6:00:09:f9:cd:70:
db:b2:14:5d:42:b2:08:9d:f1:70:de:66:77:bd:25:27:3d:8c:
b7:5b:87:97:52:b5:56:2f:8e:a3:b8:cd:3b:ad:e5:cb:37:72:
b0:7f:ab:4d:c6:91:fa:7b:dc:7e:9a:4e:b2:1d:8e:c6:45:46:
0f:6b:47:47:a7:fe:2d:36:e9:97:11:70:dd:ab:ec:5e:81:f8:
27:74:1c:96:c2:7b:4b:99:bc:37:4e:9c:83:f4:8e:c9:72:19:
22:68:1d:7b:73:0e:f2:06:5a:8e:84:93:44:3e:15:95:7d:ac:
43:97:87:65:2b:cc:fd:09:f0:e1:38:9f:d8:25:b8:fa:bc:6c:
69:fc:ab:63:a8:e5:0e:5b:6f:de:e5:29:a6:e6:73:ae:04:ec:
30:b4:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:12:32 2025 by rpki-client