Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/31a46b59-087b-31c1-b014-674a2947518a.roa
File: 31a46b59-087b-31c1-b014-674a2947518a.roa (raw, json)
Hash identifier: N+oYJdR63AnZF3BQ1r+OEnDJL3+cPIcDK8MZdnVMtPo=
Subject key identifier: 5B:73:0B:75:1A:2D:A4:54:88:79:88:9D:D1:F1:96:51:62:3E:E0:7F
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848801D429D031A5BB955877D00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/31a46b59-087b-31c1-b014-674a2947518a.roa
Signing time: Fri 10 Jan 2025 17:29:19 +0000
ROA not before: Fri 10 Jan 2025 17:29:19 +0000
ROA not after: Thu 10 Apr 2025 16:29:19 +0000
asID: 65205
IP address blocks: 68.67.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:1d:42:9d:03:1a:5b:b9:55:87:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 10 17:29:19 2025 GMT
Not After : Apr 10 16:29:19 2025 GMT
Subject: CN=6f417e8a-0ce4-4a78-96d1-0560f0aa93b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:e3:0d:52:1e:57:04:6e:8b:02:94:1c:dc:
ac:a0:80:21:85:1d:ef:ca:cd:98:e1:be:af:f6:38:
59:37:37:5d:12:52:57:f1:7f:f1:06:b8:ef:53:d8:
9f:2b:c7:43:e5:51:5f:02:75:a7:01:2c:ad:11:4a:
fe:87:c8:cd:be:4e:39:fa:98:da:3e:ea:91:32:2b:
14:19:84:7e:6c:06:f0:a8:80:37:0a:35:00:82:e4:
e4:df:0c:9e:13:71:d3:0b:f2:6d:73:a7:c5:95:97:
76:c1:5b:a9:24:1c:6c:17:39:9b:df:88:8c:b3:98:
b7:30:07:9c:fc:6d:36:57:fd:11:dd:91:33:00:7c:
c5:af:1e:4f:9b:1f:bb:10:3b:4a:e2:da:31:c0:4f:
c8:a8:82:6d:1c:dc:24:d7:4e:59:67:02:fe:b1:5a:
c6:50:eb:2c:d6:b5:f1:f3:48:c1:a6:a3:cd:a8:39:
4c:1f:b2:15:eb:59:d7:61:ea:d0:e9:06:f7:8a:cd:
28:8d:3e:29:9b:a4:12:45:2e:92:04:94:6c:37:89:
c6:06:73:a0:7c:bf:e0:42:6b:60:94:19:e6:73:04:
35:9d:08:5d:60:30:b1:cf:46:cb:c8:16:04:58:af:
58:b3:6a:5e:ee:e9:01:ff:f9:37:04:a1:a1:f6:d0:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:0B:75:1A:2D:A4:54:88:79:88:9D:D1:F1:96:51:62:3E:E0:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/31a46b59-087b-31c1-b014-674a2947518a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:b6:b2:92:5d:c9:9b:65:11:82:53:53:52:43:5b:b7:ac:4b:
7b:13:b2:20:3b:18:13:21:b5:3d:a5:d0:15:92:cf:cf:95:2c:
88:ab:22:bb:2f:06:2f:df:26:13:e0:14:44:5f:ea:0f:49:f9:
02:7b:f5:01:ac:c5:f9:04:36:a1:94:4d:93:e8:d6:78:fd:e8:
a5:fa:52:4c:82:f8:b5:69:87:00:72:a7:f1:65:d6:5e:0e:86:
83:8a:cd:8d:65:bd:c6:7f:fe:1e:7d:a6:0d:a2:19:69:de:3d:
36:31:b6:84:20:61:e4:50:b6:d8:0d:e9:ae:09:74:6e:de:ee:
af:df:ad:e5:fa:19:e0:82:90:d4:94:fd:7b:15:f4:60:5a:fb:
20:87:a4:e2:01:5d:3a:9d:e5:96:38:db:5c:67:73:78:e9:ee:
ba:3e:1c:52:84:79:3e:da:71:e7:58:8e:3f:3a:11:27:ea:73:
e6:b9:0c:4b:05:db:32:b7:b3:c2:f4:db:9b:1d:c6:48:35:e4:
65:5f:f7:7e:4b:94:ed:92:d0:a8:ef:f0:e7:74:4c:73:e1:d6:
1d:bb:a3:88:8c:07:2b:20:7d:c6:44:b5:e0:24:49:6e:87:21:
1a:e3:6b:48:ff:26:f5:e1:ad:f7:29:76:63:e7:99:db:f4:50:
53:b5:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:18 2025 by rpki-client