Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c68e7213-76f2-339d-a3ee-2918bdb3b39a.roa
File: c68e7213-76f2-339d-a3ee-2918bdb3b39a.roa (raw, json)
Hash identifier: 3J3Or5ZjCFG16+ny/fiEnOvoRqbn5VH36k1qb1WVbL8=
Subject key identifier: CF:8B:EF:FA:7B:16:A4:C5:51:57:A7:9C:BC:19:72:B1:49:59:DF:0B
Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial: 010D0C9F4328584453DEE639AEEFC27495E9A380
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c68e7213-76f2-339d-a3ee-2918bdb3b39a.roa
Signing time: Mon 25 Dec 2023 02:00:15 +0000
ROA not before: Mon 25 Dec 2023 02:00:15 +0000
ROA not after: Sun 24 Mar 2024 01:00:15 +0000
asID: 109
IP address blocks: 173.38.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:53:de:e6:39:ae:ef:c2:74:95:e9:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
Validity
Not Before: Dec 25 02:00:15 2023 GMT
Not After : Mar 24 01:00:15 2024 GMT
Subject: CN=14a5ff7a-45d9-4851-9c3b-e3319a838c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:15:04:61:3d:be:03:3c:cf:fe:0c:47:13:
4d:47:77:93:3a:bf:ad:c2:87:f5:d2:1f:9e:2a:6f:
5e:e2:d9:1f:29:a0:85:b6:6d:e6:a3:db:c7:1a:5d:
3a:c0:14:de:82:17:03:2d:5d:92:1e:37:61:fc:ed:
21:3b:45:64:13:1a:8a:4a:9c:48:02:e5:d3:cb:b5:
51:17:61:a4:83:6d:b2:6d:5d:9c:43:c2:c6:b7:8b:
5a:4b:ea:d2:d3:a5:d7:df:6c:ab:35:71:79:38:30:
b7:34:52:d7:89:15:02:8d:f5:5f:1b:35:ef:89:dd:
8c:ef:82:d8:52:b5:6f:0a:21:7b:4d:0d:6d:c7:26:
42:c2:1f:e8:f0:61:80:f5:79:8d:5c:18:8e:3f:86:
3c:44:10:55:69:13:11:d1:9a:cd:56:41:27:1c:8b:
4a:63:97:03:a7:7d:d5:c5:bf:8a:74:fd:54:9e:2d:
46:4d:86:52:97:13:5d:71:ea:c5:9a:80:00:b2:38:
50:22:33:99:50:a2:a3:64:58:fe:ee:c8:2d:0a:4a:
47:cb:a4:54:65:c0:2d:de:11:45:7a:43:08:99:7f:
e5:87:61:a3:39:4e:40:96:17:bb:56:1c:c8:3c:5f:
a2:03:85:45:f7:12:58:9c:40:e8:e5:32:40:03:13:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8B:EF:FA:7B:16:A4:C5:51:57:A7:9C:BC:19:72:B1:49:59:DF:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c68e7213-76f2-339d-a3ee-2918bdb3b39a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
X509v3 Authority Key Identifier:
keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
sbgp-ipAddrBlock: critical
IPv4:
173.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:cf:87:cb:04:99:b3:5a:de:5d:bd:06:3e:63:b3:bc:78:5f:
a2:d4:4e:54:12:59:4d:b2:62:bb:5d:49:3e:bd:8b:90:a4:68:
a3:5d:b7:f9:0a:c8:c5:e0:36:e7:59:e5:15:4e:a6:27:47:94:
94:92:a8:a3:70:5f:65:9c:ab:17:d7:ed:ff:19:e3:7a:dc:a4:
f1:9a:92:65:bb:96:0a:e3:2e:67:c9:9b:ed:60:d7:64:c6:64:
dd:d9:bb:78:98:4b:85:4e:8b:94:c9:ba:7f:30:be:45:85:b0:
d9:fe:ab:a0:6e:94:96:f9:09:cd:88:2c:c6:01:e4:3a:9a:ab:
d0:34:ae:8f:d5:b2:b1:71:00:3c:18:3a:4f:ae:de:b9:76:10:
6b:1c:14:a0:db:69:81:a1:8a:9b:62:8f:d9:60:0d:98:fd:2e:
c9:64:1c:39:f3:17:9e:dc:05:c2:e8:4e:a7:56:7f:21:3e:4d:
6c:23:79:65:4f:4d:4e:a3:d2:a5:d3:cb:ef:c6:62:08:be:7c:
08:0d:c2:bb:75:f1:ec:48:58:8d:5f:b7:24:04:43:6e:48:a0:
e9:72:28:f8:89:c8:32:38:b5:8c:7f:d2:b3:a1:40:f8:a6:4d:
86:5c:a8:41:0e:0f:ee:2c:ee:ef:7e:ea:e1:90:2c:59:48:e0:
5b:44:7e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:56 2025 by rpki-client