Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b63ac3e1-8444-3a2a-aeed-8d96f5bfb603.roa
File: b63ac3e1-8444-3a2a-aeed-8d96f5bfb603.roa (raw, json)
Hash identifier: v/GGVbs3E0hS2b2dd1xjP2QVMPqvijskmFd//Jvvdk4=
Subject key identifier: 49:6F:0C:12:BC:5C:17:E9:28:0E:06:F3:CE:5B:CB:C5:BC:BD:92:F3
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848075F93A6DE112621DC1F0B90
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b63ac3e1-8444-3a2a-aeed-8d96f5bfb603.roa
Signing time: Thu 28 Nov 2024 11:30:07 +0000
ROA not before: Thu 28 Nov 2024 11:30:07 +0000
ROA not after: Wed 26 Feb 2025 11:30:07 +0000
asID: 20057
IP address blocks: 172.94.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:5f:93:a6:de:11:26:21:dc:1f:0b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 28 11:30:07 2024 GMT
Not After : Feb 26 11:30:07 2025 GMT
Subject: CN=0662a9b5-3c2f-4490-90f9-9ab22fd9c99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:77:9b:02:97:88:e5:33:ec:8a:ba:97:f7:
35:04:8c:a6:84:85:62:99:a2:34:d8:53:fb:e4:ee:
75:6d:7b:d0:2f:a6:fd:6c:a0:e4:5f:cc:ae:fc:05:
65:89:5f:b9:b8:87:80:23:2a:d8:57:fe:26:08:8f:
c8:3b:3f:80:ef:9a:5d:8c:44:0a:a2:17:b2:9b:ab:
5f:1b:f1:a4:58:26:8c:6b:5a:c4:c9:4b:63:60:db:
39:c8:9e:3b:07:6c:85:7f:9f:a8:0f:bc:bc:13:c8:
10:44:a4:d3:70:36:a4:33:11:38:9d:cb:db:41:ef:
74:19:f1:98:a1:97:68:fb:50:94:92:1e:f4:6c:ed:
47:42:9a:ef:3d:6b:78:cd:05:76:19:de:81:e4:db:
ca:ce:d8:9e:6d:26:23:a7:8a:7b:47:7e:c6:56:e9:
49:6a:43:02:14:ce:d3:ee:41:7c:90:5a:ec:4a:7f:
55:7e:25:82:ec:e8:9f:77:d8:98:25:44:0f:8b:fb:
10:0f:84:18:55:af:f5:2e:17:73:86:01:55:37:cf:
e5:8e:cd:42:c5:7b:1e:ba:a4:df:16:a1:ad:d9:03:
b4:1a:5b:f4:60:85:14:77:d0:a3:80:25:4e:02:40:
2e:8a:53:5c:cf:d5:3f:0e:6c:12:f8:bf:42:ec:6f:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:0C:12:BC:5C:17:E9:28:0E:06:F3:CE:5B:CB:C5:BC:BD:92:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b63ac3e1-8444-3a2a-aeed-8d96f5bfb603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:53:c8:03:1a:49:0f:37:cb:ff:3d:af:2f:48:91:8a:e3:3c:
7d:91:76:25:97:14:65:de:7b:e5:b9:eb:13:34:7c:c5:ff:04:
3c:36:03:ef:ad:68:02:6d:60:36:da:74:f0:b2:ca:46:88:6c:
f8:6e:d8:88:b2:2c:44:ad:a4:ea:c3:66:e2:16:a9:a4:0c:90:
95:45:b5:8f:44:3f:ba:e2:2f:e7:d7:a7:1d:ae:ac:aa:1d:97:
6c:89:bb:7c:6b:37:38:ad:da:b8:aa:cc:34:79:6e:d2:71:5b:
30:2d:4f:a1:99:8c:96:a3:6e:bf:a2:ed:55:d3:7a:2f:6e:9c:
bc:c0:33:74:a3:a9:72:69:d0:42:7b:fb:a9:0e:8f:ec:f7:72:
f6:96:71:d2:f5:26:c6:f4:f4:6d:41:cc:05:f1:96:20:93:ef:
70:19:8d:4d:8d:bd:27:62:94:4f:cd:97:e2:ef:fd:99:40:37:
f8:48:fd:6e:76:a1:20:98:3c:e7:99:a7:34:36:bf:65:1b:da:
32:2f:bb:6c:5c:d1:c7:64:85:d3:fb:e8:77:3d:32:ab:a4:e3:
1b:8d:c1:24:8c:f8:9c:aa:da:43:d9:5a:4c:ae:d1:73:ec:71:
b9:a7:70:40:6f:5a:39:81:14:1a:65:9e:96:35:b2:5c:b8:15:
42:a3:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:05:50 2025 by rpki-client