Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/d7cf402f-0ad9-3f80-830e-17b9da7c14a4.roa
File: d7cf402f-0ad9-3f80-830e-17b9da7c14a4.roa (raw, json)
Hash identifier: WrDLDZ9sgFTn7ChEkgviCTW9LPKogYY/Vv0fTLZZZfs=
Subject key identifier: 14:DA:D8:A3:9E:E5:DD:BB:46:FE:CD:36:8E:23:B4:A1:78:E2:2D:4E
Certificate issuer: /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial: 010D0C9F432858474F1FD5FA92188D48853A2A00
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/d7cf402f-0ad9-3f80-830e-17b9da7c14a4.roa
Signing time: Mon 23 Sep 2024 11:32:57 +0000
ROA not before: Mon 23 Sep 2024 11:32:57 +0000
ROA not after: Sun 22 Dec 2024 12:32:57 +0000
asID: 16589
IP address blocks: 204.235.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:4f:1f:d5:fa:92:18:8d:48:85:3a:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Validity
Not Before: Sep 23 11:32:57 2024 GMT
Not After : Dec 22 12:32:57 2024 GMT
Subject: CN=578f8a69-3971-4baa-a0c2-5262af9a0cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:1a:ed:5e:04:9c:26:18:06:83:31:4c:4c:
d1:c7:d6:05:f5:b1:13:fd:fa:18:d8:07:9d:1a:6f:
ed:ae:0b:5b:79:96:6c:fe:db:a2:7a:3a:bd:16:b1:
6c:33:19:bc:27:82:08:f7:9c:e9:98:f1:ab:9d:7f:
e0:79:29:db:fa:14:9a:88:a0:0f:71:95:01:fb:65:
1a:39:3c:f4:12:da:65:8a:e6:e0:f2:d2:e7:97:7e:
40:12:af:1f:eb:63:f5:88:a9:3d:2b:64:18:3f:37:
1f:5c:5a:f1:2b:96:ac:57:fd:7f:12:cf:8a:b2:76:
a3:a9:ff:d5:0f:ec:6d:c7:0d:3d:6e:7e:b8:9b:57:
b9:d5:da:c2:80:90:87:fe:5e:7a:24:74:52:5a:a7:
3c:77:31:55:7b:b6:59:34:e1:b5:a2:81:41:7d:1a:
be:af:0e:c1:6f:54:b3:80:6e:a6:d7:96:13:ee:71:
64:89:47:5c:3c:4d:4a:9e:06:48:82:b5:b3:dc:29:
6f:c3:f0:3b:45:10:d0:fc:27:a9:d0:5a:dc:08:89:
78:6b:66:c2:07:95:78:43:77:95:ba:c5:0b:87:f6:
ab:01:53:39:b1:8b:cb:e3:98:43:23:3e:60:21:a0:
48:59:48:93:ec:79:79:f7:f9:25:89:b9:de:8a:7b:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DA:D8:A3:9E:E5:DD:BB:46:FE:CD:36:8E:23:B4:A1:78:E2:2D:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/d7cf402f-0ad9-3f80-830e-17b9da7c14a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
X509v3 Authority Key Identifier:
keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:d0:65:e8:f2:14:c1:e5:3b:11:e4:98:b8:f7:0d:62:7f:db:
80:e6:43:7b:71:67:57:44:2b:2e:2e:3d:3a:31:f0:7e:bf:17:
16:89:af:b5:59:db:d2:d9:46:9a:52:ad:1a:2c:cf:8d:b6:13:
ee:eb:1e:05:52:e4:da:42:b0:6f:5b:67:4e:7c:ff:ab:e3:51:
82:45:6b:23:53:9c:2f:29:d2:bf:06:0a:e6:3c:db:be:17:32:
da:84:3c:0d:ea:f8:a0:5d:a7:73:8e:89:2e:21:be:8c:d7:f8:
82:73:db:c3:11:31:e5:69:8f:9b:d6:31:a3:84:46:ba:58:be:
9d:c4:7e:5c:7e:a3:35:a4:3d:c7:b2:2d:de:22:8e:c8:9b:e3:
da:68:06:d6:7b:01:8e:8f:54:1a:7c:f8:83:9e:ed:28:f2:83:
ff:81:b7:ba:cb:2d:7f:2a:aa:f8:75:bf:3c:31:8a:95:dc:7c:
ce:1c:0c:7b:2a:73:eb:a7:53:8c:6f:76:2c:a8:dd:65:3c:7f:
5c:ad:98:a8:4f:ad:20:92:a9:73:9b:45:0d:bc:06:e3:b2:ec:
da:80:98:ce:49:24:2a:5e:3d:a0:89:42:bf:e6:02:37:1d:cd:
e9:47:a6:75:dd:58:12:ea:c2:91:c8:82:b7:99:b5:64:6d:52:
f6:33:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:17:16 2025 by rpki-client