Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d45297cb-9591-39ec-90a1-15e94fa9634d.roa
File: d45297cb-9591-39ec-90a1-15e94fa9634d.roa (raw, json)
Hash identifier: 3nfeK4RQnVmiGtFzLyaP2y5wr/vIYUzrw5G/8P7UMT0=
Subject key identifier: 50:D1:87:6C:C1:6C:D1:F6:6A:02:C6:24:4E:3F:97:7A:F4:30:5F:3D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847FE2CAFDE2166F5A0E6934EC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d45297cb-9591-39ec-90a1-15e94fa9634d.roa
Signing time: Mon 25 Nov 2024 04:25:19 +0000
ROA not before: Mon 25 Nov 2024 04:25:19 +0000
ROA not after: Sun 23 Feb 2025 04:25:19 +0000
asID: 21859
IP address blocks: 206.123.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fe:2c:af:de:21:66:f5:a0:e6:93:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 25 04:25:19 2024 GMT
Not After : Feb 23 04:25:19 2025 GMT
Subject: CN=fad14c3b-a0ce-4da4-a093-d230ec9a65a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:1a:44:28:e1:75:02:e8:2a:1e:6c:eb:db:
43:95:ad:8f:17:77:42:b9:42:6b:3a:67:40:6c:83:
e5:01:81:fb:fe:11:75:0b:43:1e:7b:4b:da:34:63:
37:ad:86:13:f8:b7:bc:74:6f:e7:e9:37:b2:96:b8:
26:c9:fb:df:4f:3b:04:b4:ef:6f:dc:51:01:f5:ad:
72:d6:d5:e4:9c:a3:73:c4:08:00:aa:62:64:db:fa:
d3:1e:6c:9e:e9:76:6b:85:6d:9f:b5:89:3a:c1:a5:
67:27:73:68:78:5f:0d:75:60:ff:60:4c:24:d0:60:
27:14:92:b9:ac:04:2d:8f:c4:4a:f4:88:75:c6:0a:
32:51:4a:56:20:03:5b:4e:4b:44:b2:da:62:36:75:
49:ce:5f:da:59:8a:8e:8e:2f:3f:fc:d6:02:b2:f2:
82:3a:97:92:e4:58:b8:a5:64:7e:c3:f3:2d:da:a4:
39:a2:66:d9:8b:ac:39:6f:01:f1:dd:88:04:e0:a2:
89:43:18:a9:29:6e:96:66:57:4f:35:ea:9e:d2:ed:
a7:5c:06:10:3a:6a:1e:93:58:06:de:6e:e9:d9:cc:
c1:72:3b:bd:f7:1f:ac:e8:a2:52:07:a5:41:ec:79:
9d:90:61:9e:5a:f7:6a:f2:c0:1d:17:81:17:f3:cd:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:87:6C:C1:6C:D1:F6:6A:02:C6:24:4E:3F:97:7A:F4:30:5F:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d45297cb-9591-39ec-90a1-15e94fa9634d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:f4:c4:45:b7:48:3f:77:e8:b1:53:81:ac:6b:8d:5f:bc:bd:
ea:c4:2b:98:10:78:da:ff:22:94:a4:08:fb:7a:2b:72:cf:b1:
f9:66:ed:2f:3d:82:51:b8:bb:97:33:64:c7:01:14:d1:85:f3:
d6:6e:dd:86:a6:4e:29:f3:fe:db:80:8b:fe:ad:97:17:e4:f6:
36:56:7c:9e:62:dc:c5:7b:b8:62:d5:51:ad:57:55:34:6d:44:
9d:58:bb:fd:22:b2:2d:f4:be:47:ae:42:d8:d8:01:d9:bd:2d:
92:d2:b5:a4:cc:10:a8:f9:19:93:6a:1a:9f:ba:b8:62:6a:3b:
e8:1c:ab:4d:57:fc:40:74:37:4c:7a:66:5d:fc:59:d2:a6:51:
44:a4:af:23:89:f3:a6:7f:bd:5b:ec:f4:32:4e:a1:88:63:d0:
dd:40:23:79:47:e0:e8:1e:5c:2d:61:06:2a:90:85:54:e1:e9:
4f:a1:86:39:23:0b:d4:59:58:d8:b5:08:06:fe:57:5e:40:d6:
41:4d:dd:7e:99:28:59:06:6f:24:fa:ba:8c:c1:76:7d:ff:98:
20:04:a3:ad:f6:6a:38:50:1d:6c:22:fc:c1:c8:38:2b:db:7f:
1c:04:3a:eb:3c:7c:fb:fd:cd:95:8c:70:98:ea:46:93:03:fa:
c2:d6:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:04 2025 by rpki-client