Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/d5a6fdd8-d8b7-3741-b93a-a083f622b45b.roa
File: d5a6fdd8-d8b7-3741-b93a-a083f622b45b.roa (raw, json)
Hash identifier: crcFaFWX3xf44tWpLJR/pkYfq4S/LWRDDsDva+/P03o=
Subject key identifier: 35:42:12:CE:74:EC:7D:5C:0F:CA:FA:2E:AB:8B:1F:88:9E:3F:73:E3
Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial: 010D0C9F43285845DF47AFC2C643F7B5275117F0
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/d5a6fdd8-d8b7-3741-b93a-a083f622b45b.roa
Signing time: Tue 14 May 2024 17:15:47 +0000
ROA not before: Tue 14 May 2024 17:15:47 +0000
ROA not after: Mon 12 Aug 2024 17:15:47 +0000
asID: 400518
IP address blocks: 204.197.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:df:47:af:c2:c6:43:f7:b5:27:51:17:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Validity
Not Before: May 14 17:15:47 2024 GMT
Not After : Aug 12 17:15:47 2024 GMT
Subject: CN=4c1e00fe-65ae-47b8-8d5a-cc6d3c522b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:9f:6d:e8:ca:29:89:e2:e6:33:0c:88:31:
8f:6a:0d:5f:5b:0f:c4:e1:ed:c7:d6:1b:35:e2:5e:
78:ca:2c:16:f7:a3:6e:7f:15:53:be:38:90:66:4e:
b6:7b:6d:90:2a:a1:da:0a:16:5a:3e:74:c0:f9:9d:
13:3d:e6:ab:3a:fd:7b:25:27:0d:57:dc:f4:a4:59:
3b:fa:e4:2b:46:a3:ec:b0:03:db:85:c7:c7:ed:23:
05:b3:6a:14:a4:49:40:c0:8a:4d:af:69:06:6b:55:
41:91:af:ca:d2:03:9d:92:4a:c1:e4:2d:be:47:30:
81:fe:02:73:78:f8:da:14:2c:ae:d3:8b:4b:24:b1:
a2:c2:da:c4:aa:3c:4f:eb:23:bc:6c:1a:a3:35:0f:
a4:86:48:c6:1e:57:42:5f:8b:17:26:f6:a7:12:ee:
b7:b3:a9:c4:21:1a:54:e8:31:0c:3f:75:16:90:4a:
e6:d1:e2:a5:4a:33:49:da:14:fa:c4:e3:1d:b4:cb:
6f:27:b7:92:4f:03:db:fe:92:c1:c4:b0:e2:90:71:
ac:61:5b:d1:db:5c:71:89:0b:5e:33:12:3a:79:95:
3f:94:a8:ec:95:38:07:00:1d:ee:73:74:a6:7e:a9:
6f:6c:38:d3:c8:0c:88:25:fd:5b:c8:53:f7:e6:c2:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:42:12:CE:74:EC:7D:5C:0F:CA:FA:2E:AB:8B:1F:88:9E:3F:73:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/d5a6fdd8-d8b7-3741-b93a-a083f622b45b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
X509v3 Authority Key Identifier:
keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.197.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:2e:b2:21:ba:59:d0:cc:be:3f:00:80:2b:c9:11:4a:4a:a0:
3e:fa:92:95:f7:b3:1e:b0:d1:15:22:48:77:5a:1a:f5:3a:49:
0f:cb:f3:05:75:9d:ee:61:85:a3:b0:4a:25:e2:6c:f2:3e:a1:
16:ec:5b:d4:c1:28:7b:ab:60:d5:b1:3b:0e:4a:52:6b:7f:2f:
d5:3b:e1:9b:88:80:3b:fa:29:d3:03:e6:b8:e0:e6:75:76:a4:
54:90:5d:9b:7f:5e:18:6b:cf:e0:75:5b:a6:c0:76:ba:df:80:
3e:a6:b9:3c:87:72:05:e8:40:d7:3b:9e:37:9f:02:bc:06:14:
a6:83:60:fe:29:c8:f1:93:f4:c3:a5:92:6a:0d:ac:49:9e:72:
0a:6a:dd:70:42:18:7e:0e:82:a1:3f:03:b1:0e:16:ba:8a:5a:
64:47:9a:2f:d0:5e:7f:1c:c0:f0:26:6a:f3:7d:de:ee:ad:d6:
4b:1e:bc:4f:19:49:23:7d:5c:9c:b2:df:4f:10:91:82:c0:a0:
5e:a5:1a:29:be:a0:0a:5a:f3:c7:f4:4c:e3:d8:62:93:83:06:
7e:3b:a3:cb:f7:9e:51:8c:fb:8c:15:f8:c4:80:1f:17:54:18:
db:7c:b9:12:80:a8:e6:c8:81:9f:88:5c:a4:a2:7e:43:0a:04:
19:c5:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:21 2025 by rpki-client