Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0967298-1da8-32ef-9123-4a50a1143d2b.roa
File: e0967298-1da8-32ef-9123-4a50a1143d2b.roa (raw, json)
Hash identifier: ysem5aV427RZFkNlzf4DBSAwh/LdPAqB3+nWdN71MCI=
Subject key identifier: 9D:1F:C2:6A:E2:DC:DB:65:17:C7:7D:37:58:B0:2C:56:C6:1A:A0:BC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858477BABDA3B41A5F10CFD3867C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0967298-1da8-32ef-9123-4a50a1143d2b.roa
Signing time: Wed 09 Oct 2024 10:30:38 +0000
ROA not before: Wed 09 Oct 2024 10:30:38 +0000
ROA not after: Tue 07 Jan 2025 11:30:38 +0000
asID: 212238
IP address blocks: 206.123.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:7b:ab:da:3b:41:a5:f1:0c:fd:38:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 9 10:30:38 2024 GMT
Not After : Jan 7 11:30:38 2025 GMT
Subject: CN=f662d445-5693-4918-96ad-766dce16c715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:3e:97:ab:fa:b5:b2:9f:bb:ee:c1:8c:5f:
b9:16:55:70:83:95:20:43:91:d7:c5:ed:ea:6f:3d:
ad:71:bf:b9:99:00:44:48:97:75:eb:d2:c1:1c:f6:
98:10:51:e1:a1:a3:55:fe:72:48:94:4f:42:05:bc:
8b:33:d8:7a:b7:93:92:a8:8c:7e:c4:d3:d5:02:3a:
f2:ff:26:c0:47:17:5e:52:3d:35:3e:7d:7a:4e:91:
80:32:d3:3f:26:17:0f:01:ef:5e:39:ed:50:c5:3d:
18:6f:70:67:ab:48:09:ef:c6:d9:4e:65:9e:50:d7:
c5:6e:4b:b9:e9:93:df:18:a5:bc:7e:a2:df:c3:ca:
54:d4:0c:6b:52:b5:fb:23:36:b0:bc:44:7f:55:9a:
51:3a:19:42:1b:76:a7:bf:da:9f:99:50:cd:e2:fd:
ae:eb:c4:d9:da:92:a1:c0:2e:f3:aa:bc:a8:97:7f:
60:de:6c:21:1a:61:2b:16:c2:22:d9:0b:80:69:4d:
df:84:3f:91:53:0c:be:fa:34:98:c1:8e:03:bf:6e:
a2:15:4b:03:be:34:db:18:42:cd:17:e6:1e:53:a0:
47:c9:da:df:c5:13:0a:2e:47:7b:a9:96:7b:87:cd:
81:e2:54:d2:04:69:27:0b:b9:73:0d:c0:af:54:ff:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1F:C2:6A:E2:DC:DB:65:17:C7:7D:37:58:B0:2C:56:C6:1A:A0:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0967298-1da8-32ef-9123-4a50a1143d2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:35:6c:7f:c1:0d:7d:34:43:80:4f:86:df:e2:f9:6e:31:36:
5e:b4:e7:ed:5b:55:12:75:d9:a9:5b:e1:6e:5e:6f:5b:88:86:
ff:31:a6:67:83:7a:0a:30:82:9e:2c:21:98:90:77:61:d1:97:
8a:bd:27:ad:18:d9:86:ff:38:33:a0:a1:dd:cc:d8:9d:f5:f0:
a6:4b:49:17:09:e9:35:d4:e3:bb:dd:f0:80:ae:a2:ad:63:73:
68:37:26:c6:f2:ae:1e:08:af:a3:e3:4b:1c:33:bc:b2:eb:8f:
95:dd:8e:74:d6:7c:d1:8c:06:d3:6a:9c:27:95:74:ae:11:9b:
6d:b7:a4:65:81:65:bd:14:2c:17:80:f0:66:be:03:44:87:d8:
00:6c:7b:f6:ac:d6:3e:0a:09:fb:af:67:6e:2f:e5:6d:31:7b:
18:96:ad:d0:4f:90:bf:f0:69:80:38:fd:b2:db:bf:db:fe:04:
c2:09:91:57:af:64:9f:e1:9c:67:a4:45:98:cd:d7:1e:47:c7:
e1:69:ea:0f:98:1c:59:72:7a:78:fa:b7:69:8a:b0:e0:5a:14:
de:be:0b:de:64:9c:27:95:58:f1:a6:41:9a:4b:d2:4a:60:29:
b8:ab:5c:4e:1e:7c:e5:c2:7e:fe:dc:7f:51:20:c3:9f:ba:20:
bd:ec:c6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:47 2025 by rpki-client