Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/96463360-b0d9-3f62-bbae-701cd1b2ad5f.roa
File: 96463360-b0d9-3f62-bbae-701cd1b2ad5f.roa (raw, json)
Hash identifier: vwZqvx/T7uxRHv/MziQwc8jNoy3yEttEUStOfHv7y5M=
Subject key identifier: 1F:70:A6:EE:B1:A9:00:FC:CE:34:A0:F7:09:83:02:9B:8B:ED:EF:75
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584806450819F975BC856FD84480
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/96463360-b0d9-3f62-bbae-701cd1b2ad5f.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 32489
IP address blocks: 172.94.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:08:19:f9:75:bc:85:6f:d8:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=728cc1b2-f999-467b-85bb-98d149ee23c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:7c:5b:9e:06:84:42:17:d1:12:be:76:c7:
72:2c:94:f4:19:c0:f2:87:a7:c2:45:2c:06:0b:0b:
f1:de:eb:b9:9f:c0:38:56:ef:00:13:77:de:7b:dd:
40:47:a9:60:10:10:c8:fd:32:1c:2e:d4:34:fd:66:
13:64:25:bb:68:5c:a5:7d:3b:a7:5c:1c:f7:01:10:
6d:e9:71:63:6a:6c:ed:cd:b9:4d:bc:0b:da:78:f2:
f9:3f:30:a4:6b:34:27:19:0e:46:ed:44:ce:56:6e:
7c:df:8d:02:f2:84:b4:c1:e5:a3:b6:fa:42:75:0f:
b5:93:4a:b5:21:ff:97:a5:72:1b:7e:93:f8:fc:e7:
59:dc:5d:e5:62:31:3e:64:d5:89:f7:ad:99:0b:2d:
4a:5e:ce:88:57:f6:13:64:e0:cb:e2:38:00:03:94:
cb:23:ad:13:b5:44:3b:e2:16:3b:4c:4c:55:22:ec:
1b:cd:81:e5:b2:52:44:98:cd:a1:6d:65:63:35:e3:
d3:9f:70:6d:e2:23:ee:b8:91:51:fb:a7:41:6e:fc:
10:09:f3:ca:f8:0d:ca:76:0a:10:9e:56:4b:b0:1c:
51:2a:90:ba:d8:ee:6a:cb:b8:86:ab:c3:2b:b7:60:
89:e8:3b:a9:df:60:d4:fb:e8:52:4f:06:13:d2:57:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:70:A6:EE:B1:A9:00:FC:CE:34:A0:F7:09:83:02:9B:8B:ED:EF:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/96463360-b0d9-3f62-bbae-701cd1b2ad5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:59:26:ce:13:7d:07:69:28:e6:0e:0a:8e:ce:c4:47:77:f1:
47:47:30:9a:86:c6:9c:c3:61:39:58:1a:2a:00:01:0c:02:ef:
a0:ab:82:eb:2f:59:d4:9d:7b:dc:65:0d:da:2a:9d:31:59:fc:
56:e2:d4:f2:6e:3c:fd:06:62:7b:bc:f2:1a:81:42:6a:9f:be:
12:81:08:84:9d:58:68:92:7c:fd:65:2b:e5:bf:9f:7a:d6:37:
c9:82:ea:eb:72:e1:4c:9d:aa:48:47:44:33:54:27:b4:92:d7:
19:58:db:ec:c8:7b:32:d2:fb:68:52:7d:53:f0:dc:15:75:e9:
3d:d0:4e:26:15:8d:6c:26:39:aa:cd:41:30:dd:a5:72:96:48:
64:f9:c7:1d:a2:7a:03:80:3f:3d:7e:37:26:f2:8b:ad:3c:6a:
df:77:39:af:27:12:b7:95:3c:68:6c:00:55:3c:c7:f1:42:ca:
b7:d5:c6:fb:14:66:2a:0d:4f:a8:4a:2a:96:e0:3f:3e:f5:6a:
38:12:52:d2:62:f2:3a:16:9f:99:a0:7d:81:36:09:5d:20:7b:
d3:42:6f:32:fb:91:6c:ce:25:27:a9:f3:f9:83:3f:57:3a:37:
67:55:3a:cc:84:20:dc:28:4b:d6:48:01:79:03:fc:0c:99:3f:
13:7d:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:58 2025 by rpki-client