Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/c951fe73-372e-3aef-bcec-966d70475848.roa
File: c951fe73-372e-3aef-bcec-966d70475848.roa (raw, json)
Hash identifier: LnLOQ5YrPI/KOv0QdVmSfYrZJfRBC9aFO85uFRGnWVI=
Subject key identifier: 27:18:52:C7:9E:5C:7A:81:89:F4:F6:D8:ED:86:43:40:1C:94:7D:96
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F432858478E1BC155DFDB907BEE88EA00
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/c951fe73-372e-3aef-bcec-966d70475848.roa
Signing time: Wed 16 Oct 2024 01:00:31 +0000
ROA not before: Wed 16 Oct 2024 01:00:31 +0000
ROA not after: Tue 14 Jan 2025 02:00:31 +0000
asID: 29802
IP address blocks: 65.87.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8e:1b:c1:55:df:db:90:7b:ee:88:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Oct 16 01:00:31 2024 GMT
Not After : Jan 14 02:00:31 2025 GMT
Subject: CN=eb410d38-9275-437b-852f-cc538e90677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:53:80:d8:4a:70:7a:da:d8:bd:38:17:d9:
d3:2c:00:70:4a:06:bf:77:aa:5f:10:a7:38:e1:23:
03:2b:6a:d5:5e:b0:14:8e:8f:26:e0:5e:14:3b:59:
39:a9:b3:a7:a6:ce:29:b8:48:d9:f4:cd:b2:92:fc:
77:ab:43:2d:37:24:17:74:84:cf:66:f3:c3:b1:09:
4e:7d:6b:85:51:1c:5a:83:18:2c:3d:f5:42:10:bf:
79:ac:77:17:bc:e4:93:f1:ea:7e:91:ec:3c:dc:86:
d6:4e:eb:27:fb:e4:dd:06:a8:d8:47:0d:46:f9:80:
5d:d2:53:35:e5:ca:06:a1:7f:f9:b9:93:7e:27:27:
0a:9c:15:94:7d:a6:c5:e1:14:66:24:a7:4b:6c:c7:
08:e7:ea:52:94:47:0c:7b:8b:34:0e:95:1d:c6:55:
1b:f7:8d:76:f9:53:7f:1c:7c:8d:08:59:b7:dc:01:
60:bc:42:a9:3f:65:1f:f1:09:a3:cd:78:d5:0e:75:
4e:ac:0b:dc:5b:b2:d4:49:16:91:36:b2:73:2c:bb:
aa:cf:2d:aa:9a:f7:4b:ae:ce:d1:8d:03:cf:1e:b8:
f7:e9:4a:f5:fa:5d:d0:47:65:75:96:b9:65:6b:d9:
0b:77:96:6e:43:54:61:93:03:05:61:9f:57:ed:23:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:18:52:C7:9E:5C:7A:81:89:F4:F6:D8:ED:86:43:40:1C:94:7D:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/c951fe73-372e-3aef-bcec-966d70475848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:8e:a3:91:fb:79:0f:17:71:71:29:d2:8f:77:54:7a:85:f0:
f7:d6:23:e8:c5:8e:a6:db:47:bc:27:ec:96:ab:4c:81:ef:ea:
ae:c4:52:65:58:23:e8:f9:ee:49:8a:7e:20:c3:a1:a6:c9:1d:
e5:5d:9b:51:64:20:bb:36:f1:98:4a:be:89:b2:e4:7d:d5:50:
d7:a3:08:43:11:33:70:82:da:72:93:02:8b:14:67:72:47:01:
23:96:9b:43:ad:37:4c:80:45:ea:a7:29:3d:81:bb:cb:ee:7a:
1d:4a:fa:61:b4:6a:51:f9:68:97:50:1e:78:94:06:28:05:09:
77:c4:3e:c1:7a:64:a3:d9:84:5e:3e:2c:d0:2c:62:72:92:78:
b4:5f:82:e3:c3:d6:a7:3f:db:0f:fa:41:a8:0c:bb:33:b7:15:
8e:70:fc:4a:e2:4b:62:28:e2:68:d3:f3:de:f9:c4:ed:23:72:
98:3a:3e:03:41:66:6f:c1:9a:12:1f:7a:54:5f:80:b4:2e:42:
c8:c1:44:2c:83:d7:a1:22:32:04:82:22:72:62:dd:b3:5f:c0:
d9:eb:18:5a:9b:7b:ef:56:29:48:22:a9:82:f3:9e:b7:c3:4a:
a5:55:62:90:57:2c:37:25:47:5e:97:1c:f0:a0:3a:07:95:35:
e0:0e:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:33 2025 by rpki-client