Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ebcc50fd-d3f6-3c8f-bdce-eafb17b64b89.roa
File: ebcc50fd-d3f6-3c8f-bdce-eafb17b64b89.roa (raw, json)
Hash identifier: KZLoIQwieELrF65uOMQ6/NEoqcYNtetCWnN10XbPrd8=
Subject key identifier: AA:A0:FD:9E:F3:CC:90:A5:38:C8:C4:F0:94:36:89:35:68:15:05:66
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848075ED762504DE55F04485600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ebcc50fd-d3f6-3c8f-bdce-eafb17b64b89.roa
Signing time: Thu 28 Nov 2024 11:28:38 +0000
ROA not before: Thu 28 Nov 2024 11:28:38 +0000
ROA not after: Wed 26 Feb 2025 11:28:38 +0000
asID: 134176
IP address blocks: 172.94.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:5e:d7:62:50:4d:e5:5f:04:48:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 28 11:28:38 2024 GMT
Not After : Feb 26 11:28:38 2025 GMT
Subject: CN=ce692dcd-d868-4aca-9b8c-1af0e47906b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:3b:1d:4d:30:19:99:45:3c:09:2c:5f:29:
bf:cb:de:0b:20:4a:8b:f3:84:64:26:f5:51:97:9f:
1f:f6:a9:c5:6b:6e:f2:83:3d:88:7c:ec:df:ce:85:
c4:24:08:ba:f7:7d:86:3f:67:e4:3c:da:2b:90:00:
bf:2a:2e:5b:34:12:2c:ed:20:5a:ec:c2:8f:37:0e:
b6:6d:41:7c:cd:07:d3:aa:ff:bb:08:b4:b0:0c:d6:
f4:76:1a:e2:0a:24:43:a8:90:b9:ca:e5:7b:da:53:
be:69:85:77:47:f5:cc:1e:ed:25:1e:63:da:9e:bb:
04:56:7c:60:2a:0d:7d:41:9b:e3:d0:40:2a:21:9b:
70:94:c0:be:0f:b8:f7:26:2e:b0:70:f8:64:32:32:
03:0e:6c:fa:57:ca:7d:bc:a2:33:d1:11:86:5c:d5:
ef:40:0a:a2:37:e3:5d:2b:c1:d5:d8:f5:e2:59:d1:
e6:46:5d:bf:46:8c:3b:02:2a:04:3a:af:a7:73:58:
f5:de:d3:a1:f4:0d:e2:3b:4f:3e:0f:32:23:61:2a:
9a:89:35:a3:1f:28:9e:eb:9f:11:25:de:53:dd:ca:
f3:12:18:d1:49:59:ca:01:97:51:8c:7b:1e:67:57:
f8:05:a2:5a:95:39:3b:15:35:0b:01:f2:69:c9:9f:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:FD:9E:F3:CC:90:A5:38:C8:C4:F0:94:36:89:35:68:15:05:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ebcc50fd-d3f6-3c8f-bdce-eafb17b64b89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:f5:77:ee:be:e4:ad:f0:f7:3e:4f:18:e2:89:07:e0:e0:13:
6e:60:2e:2c:2a:91:61:f5:8d:6c:96:38:2a:13:33:ad:a4:57:
94:fb:36:d9:5b:0e:f6:95:13:a4:2d:6f:2a:fd:4e:8b:5a:73:
d8:73:f0:e1:2e:d3:78:97:ee:c9:f3:7a:36:07:7a:71:1d:39:
70:f5:44:79:8f:37:2b:3a:ea:8f:7a:a0:df:1f:15:7a:c2:9b:
7d:70:2b:a8:f7:54:fd:10:8b:c3:86:28:a0:2b:c9:93:d2:e1:
bf:b1:5d:ae:d7:df:07:1a:83:8f:a6:82:69:a9:59:c4:5f:b0:
c6:9e:a9:20:72:f0:4a:bf:07:84:41:9d:9d:42:8b:c7:1c:5b:
89:3b:e0:f5:fd:8b:53:21:3b:db:11:78:80:48:eb:57:eb:5a:
f6:d2:50:76:f4:1c:7b:a8:ce:81:4b:44:bf:c8:67:44:36:9b:
b5:68:9b:61:ca:5f:44:1c:b8:3b:e8:b2:4b:8f:d2:ee:0b:d5:
ed:65:7f:42:83:2e:88:4b:81:39:98:99:54:87:49:3b:13:99:
42:56:d7:c2:61:f4:12:66:0a:af:65:b4:9d:e7:f1:62:52:18:
8d:18:7f:e7:dc:8c:73:a6:fb:f8:ed:b7:fa:a1:ee:98:4f:bf:
86:26:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:52:19 2025 by rpki-client