Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/568a4704-0bc8-3c91-831f-39bbe11f0e6d.roa
File: 568a4704-0bc8-3c91-831f-39bbe11f0e6d.roa (raw, json)
Hash identifier: 5bwVw2Ua8OCrePwdBMKUkFvi1J3Iuc5BjzjY01SaeCE=
Subject key identifier: CC:E8:25:45:B1:1E:87:04:66:4C:D7:2C:9A:81:AE:97:25:EC:D6:FF
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F432858481B0CEBA6D2421052FA4DC800
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/568a4704-0bc8-3c91-831f-39bbe11f0e6d.roa
Signing time: Thu 05 Dec 2024 12:39:45 +0000
ROA not before: Thu 05 Dec 2024 12:39:45 +0000
ROA not after: Wed 05 Mar 2025 12:39:45 +0000
asID: 60223
IP address blocks: 64.112.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:0c:eb:a6:d2:42:10:52:fa:4d:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Dec 5 12:39:45 2024 GMT
Not After : Mar 5 12:39:45 2025 GMT
Subject: CN=4f35a4a2-d1b9-48e7-bc2c-dfe2b10af051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:d7:99:ef:d7:71:92:cc:79:8a:3e:b4:4c:
42:b5:96:68:18:f7:04:2e:31:b6:e2:62:c9:e6:1c:
45:74:6b:97:50:7c:c4:1d:16:e3:e4:34:81:d4:73:
18:19:8f:bc:7e:1e:15:b8:36:3b:60:8f:6e:6f:78:
ac:b8:57:16:dd:0e:53:59:c9:f0:bd:42:b7:70:cb:
b0:b5:ec:3e:0b:1f:2b:3a:81:62:8c:51:2a:dd:ce:
61:90:da:8a:6b:41:52:9c:0a:54:c8:84:99:08:6d:
25:9c:76:73:8f:70:e6:d0:f0:89:c4:94:de:35:4a:
93:f5:2e:a4:5e:ca:d0:74:2b:83:93:e9:75:1b:d4:
fd:21:36:69:c7:f2:e3:68:3f:8b:c3:14:5d:85:14:
fa:88:31:66:86:e8:95:56:25:18:d8:06:2a:c2:ca:
4b:a3:49:0a:ed:0d:75:77:77:28:e9:ae:56:ed:a0:
c5:6b:b7:04:07:d3:8b:8f:9b:10:16:f7:54:1f:f4:
9e:ee:0b:ab:fc:48:fc:ea:16:83:4c:99:49:2b:a6:
9e:0f:2e:0e:c0:00:c8:46:3a:c0:f8:49:41:70:f7:
38:33:92:b3:11:25:02:c3:29:68:19:33:d7:36:31:
1f:2b:65:d7:8a:86:cb:e1:40:56:54:94:f1:86:c1:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E8:25:45:B1:1E:87:04:66:4C:D7:2C:9A:81:AE:97:25:EC:D6:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/568a4704-0bc8-3c91-831f-39bbe11f0e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d5:f2:38:4b:d8:6a:af:3d:00:bf:56:ea:53:20:ce:a6:29:
ce:c0:bf:ef:86:c5:3d:e6:e6:81:7d:af:a9:9f:76:d5:b1:5d:
fe:32:8d:bf:65:64:1d:b5:5f:1c:18:7b:0c:d7:1d:0e:c5:48:
d3:66:90:f2:50:80:ae:9c:85:c8:5d:2f:b4:76:ff:4b:20:2e:
94:f4:53:27:c0:1d:e0:ef:b0:2c:30:bb:5f:78:58:13:b7:c8:
97:ea:fb:09:53:6f:81:7f:1f:0b:58:96:26:d5:bf:89:96:f4:
eb:71:a7:86:36:60:ca:9e:fa:2a:17:1d:c0:ab:6a:51:2e:10:
0f:6c:24:1e:0a:25:88:22:05:fe:04:90:30:fe:41:ab:4f:c3:
80:31:58:ba:1a:8f:c0:8e:57:3b:9a:73:fa:0c:03:35:37:5a:
be:0c:fc:87:d1:23:af:4d:3c:2d:27:d8:d4:a2:b3:24:42:6d:
2b:c8:d6:01:b2:e1:ce:3f:d8:55:5a:91:31:49:67:80:01:fe:
cf:49:7c:52:d5:75:88:e8:5f:07:1f:96:58:6f:16:b9:35:5c:
d4:68:3b:ea:b0:36:a5:55:5a:cf:5b:fa:33:e1:f4:e8:c5:c6:
2a:c3:27:c4:f3:cb:63:ea:0f:d8:1d:21:32:7f:5b:4b:5d:b0:
e5:57:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:35:20 2025 by rpki-client