Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/8396f18b-014e-304e-b632-7496a9ee38b4.roa
File: 8396f18b-014e-304e-b632-7496a9ee38b4.roa (raw, json)
Hash identifier: nu3vNfq6NnWqJob0F1xVt3X6qXDKWGwJcX3O+XMp8aI=
Subject key identifier: 8E:1E:00:BB:DA:C4:2F:AC:08:A3:37:17:1D:5A:9C:C8:78:AA:2E:C5
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F432858482CA2154F59FD50F2F6F2F900
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/8396f18b-014e-304e-b632-7496a9ee38b4.roa
Signing time: Wed 11 Dec 2024 19:49:02 +0000
ROA not before: Wed 11 Dec 2024 19:49:02 +0000
ROA not after: Tue 11 Mar 2025 18:49:02 +0000
asID: 174
IP address blocks: 208.31.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:a2:15:4f:59:fd:50:f2:f6:f2:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Dec 11 19:49:02 2024 GMT
Not After : Mar 11 18:49:02 2025 GMT
Subject: CN=c300e24e-ca14-4501-97e9-629b46533d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:0d:30:26:d9:51:11:2d:e8:b3:5c:bc:07:
da:bc:96:63:79:e4:34:ed:b1:8a:dc:de:66:ea:75:
60:e4:29:a3:3b:20:cc:5b:90:c9:98:f9:f0:f5:a9:
5e:d2:62:77:37:13:4f:6c:30:26:56:6b:d2:35:64:
5f:c7:71:e5:b1:ae:6c:15:a2:06:eb:7c:df:9f:aa:
c2:90:74:31:87:4f:3b:8d:de:60:82:74:e0:cb:79:
c1:fd:d8:9c:b6:ba:48:ed:f9:f8:a2:a1:51:bd:2d:
a6:28:0d:a3:5e:01:f5:ed:33:84:19:76:fa:69:73:
e1:0d:3a:5e:bb:0b:65:79:16:b9:f4:47:b5:1c:03:
c6:0a:f0:d9:02:85:4d:ff:fc:ca:19:26:a8:5e:2c:
cd:fa:e2:fb:e1:3f:df:a9:f8:85:40:12:9c:c7:fd:
5d:d5:4c:ec:cc:41:b4:2d:15:8c:29:58:d4:4d:b3:
09:09:c5:b0:3d:f2:ea:9f:8b:53:93:fd:e5:58:bc:
44:a1:22:d8:ec:13:26:81:5a:19:ab:ac:6e:f0:39:
ee:cb:95:12:6d:fd:ad:e4:50:d4:4f:ba:ad:ad:4b:
ce:7d:9c:97:bc:fe:8b:92:78:07:1f:80:37:d9:6f:
9b:68:5b:fc:16:bc:c8:98:a1:cb:c7:42:49:9f:d5:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:00:BB:DA:C4:2F:AC:08:A3:37:17:1D:5A:9C:C8:78:AA:2E:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/8396f18b-014e-304e-b632-7496a9ee38b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.31.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:5f:db:80:72:fd:39:f3:82:c3:9e:cb:77:a6:bf:fe:3f:a2:
9f:e0:16:bb:69:b2:89:4d:e3:ef:30:67:58:03:68:b3:f2:9e:
14:8a:9a:ea:c6:1a:1e:63:2a:9e:25:e1:27:90:83:6b:86:9e:
97:42:2f:7b:ac:64:37:dd:ef:fa:2f:69:ac:1a:68:d1:e0:a5:
51:9a:7e:47:5b:39:41:eb:33:e9:86:2f:e7:a8:ae:89:b1:bd:
50:07:02:09:06:3e:1f:0e:d8:2b:f9:4b:40:60:f5:d3:b9:4c:
ac:50:7d:c9:70:f6:87:fc:68:29:73:8c:4a:1c:a5:dd:7f:78:
ca:62:7d:39:96:65:78:77:a3:45:d1:6d:28:e1:15:a6:6c:c8:
e7:62:30:bc:08:fb:06:16:59:1d:11:b2:be:b2:61:fb:82:b8:
d4:1e:f2:86:dc:68:7a:5c:9e:0e:6d:63:3e:be:9b:71:17:64:
c5:cb:55:ef:ef:42:aa:55:cd:61:64:a4:45:88:f2:16:95:63:
35:86:39:84:c2:fc:0b:0f:f9:61:e0:63:f6:2d:21:e0:5f:46:
a5:7d:84:92:a7:92:39:bd:5a:f8:58:78:8e:25:a1:44:37:4f:
20:6f:e4:cd:ae:d9:91:26:04:89:7d:d5:5f:d4:0b:79:7a:9f:
13:6b:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:11:31 2025 by rpki-client