Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a10eb6b-0b92-391c-98c1-8d907dfc944c.roa
File: 5a10eb6b-0b92-391c-98c1-8d907dfc944c.roa (raw, json)
Hash identifier: SWFmmhph0rgnhC4E6iokviGTCbHKQy9Jo+yfKIBMfqA=
Subject key identifier: 09:23:AC:74:57:E4:B2:28:46:F5:AE:5F:81:12:02:A5:89:7C:C5:80
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847BB274C0676280BD21453AF00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a10eb6b-0b92-391c-98c1-8d907dfc944c.roa
Signing time: Fri 01 Nov 2024 04:15:17 +0000
ROA not before: Fri 01 Nov 2024 04:15:17 +0000
ROA not after: Thu 30 Jan 2025 05:15:17 +0000
asID: 212238
IP address blocks: 206.123.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:bb:27:4c:06:76:28:0b:d2:14:53:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 1 04:15:17 2024 GMT
Not After : Jan 30 05:15:17 2025 GMT
Subject: CN=9ff4949e-bd48-4ffe-a312-27e05371786e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:97:0a:ff:24:82:ff:08:7f:0d:40:3c:bd:
d2:fa:1a:4f:f3:ff:28:f3:65:12:3d:b4:18:7f:e8:
e5:32:d3:28:b8:a3:4b:28:65:ce:d3:c2:f8:d0:7c:
aa:3e:be:a9:f6:1c:40:f6:7a:86:aa:de:45:01:4e:
0b:b9:06:a4:3d:34:d6:69:1c:2a:e6:34:34:ff:e4:
4a:dc:68:4e:10:cb:0a:4a:d5:a6:e8:12:81:66:a7:
5c:19:0b:a6:08:15:7b:f7:c0:ad:60:0e:93:22:e4:
85:e7:de:8d:15:e2:50:57:e5:0d:87:f9:ea:a9:96:
d1:8b:31:e4:da:05:04:53:8c:0a:1e:2c:69:97:55:
bf:52:54:69:4c:1f:98:21:15:7f:d2:ad:ad:cd:bb:
a5:77:4a:19:90:78:1c:53:b1:2b:1d:86:29:5e:3f:
00:6c:56:d7:94:25:98:3e:6f:80:a0:ef:c1:31:e0:
9d:69:b7:f0:d3:05:04:99:4d:29:cd:a5:1d:30:7d:
a0:5c:0e:24:66:1d:74:0e:1d:50:54:6c:db:32:91:
b8:9d:b5:79:41:1e:5f:b6:99:36:ab:18:6b:22:c7:
e7:04:ac:b7:aa:52:fb:a3:a2:73:01:c9:17:00:06:
8a:be:20:3c:aa:d9:8f:ce:5c:ff:a8:27:0f:0d:32:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:AC:74:57:E4:B2:28:46:F5:AE:5F:81:12:02:A5:89:7C:C5:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a10eb6b-0b92-391c-98c1-8d907dfc944c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:a8:09:41:e8:2a:f1:50:d1:b3:da:c6:eb:29:9c:07:d8:f2:
38:f7:89:0a:8b:02:1e:56:28:ab:fa:c9:bc:70:36:11:38:cd:
5a:a7:1f:e2:06:12:ae:67:8f:e7:6e:57:52:65:b8:17:25:c9:
64:45:e5:79:63:83:28:32:fc:ba:c1:0f:1c:d6:50:07:58:a0:
7f:89:0d:b5:d8:11:88:bf:cf:79:3e:03:d6:67:ac:80:37:b3:
a5:f7:31:fc:8d:03:38:7b:55:7f:aa:43:b0:02:e6:5b:5a:5c:
33:73:f1:3e:d4:20:32:00:f6:ea:b7:9b:5f:07:06:d3:76:44:
fc:f7:dc:9a:27:70:4b:94:b0:84:b0:80:33:d3:b8:2e:ab:8f:
5e:24:3a:50:fd:96:8b:f4:21:85:78:6a:88:dc:c0:5e:9b:e2:
44:c6:40:d9:7b:52:f7:71:70:3e:fc:6d:e0:a7:6d:f6:2e:65:
dc:d2:9a:89:ee:4a:94:7d:38:09:44:8a:bd:79:fd:4a:39:a7:
2e:8f:7e:b9:00:fa:6e:f7:97:ee:a1:08:b0:83:32:e2:32:40:
04:27:61:62:df:d9:58:94:e9:55:bf:05:80:e1:27:95:8b:b4:
7d:8e:96:00:0a:d1:f8:75:fb:6d:4d:ef:8a:56:78:be:ce:b5:
a1:0b:e4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:36 2025 by rpki-client