Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/dfd20097-ef42-39a3-b7db-e59dcfbd70f1.roa
File: dfd20097-ef42-39a3-b7db-e59dcfbd70f1.roa (raw, json)
Hash identifier: nVLb9s8nTrPTU7yij9NIlpTHYlGDg+Fic8ZuSjDlpEY=
Subject key identifier: 58:08:E1:F1:EC:EA:63:96:83:A8:55:46:34:EE:EF:43:07:D2:B2:FD
Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Certificate serial: 010D0C9F43285847DB9BD913D172884A68491B80
Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/dfd20097-ef42-39a3-b7db-e59dcfbd70f1.roa
Signing time: Tue 12 Nov 2024 19:16:00 +0000
ROA not before: Tue 12 Nov 2024 19:16:00 +0000
ROA not after: Mon 10 Feb 2025 19:16:00 +0000
asID: 1299
IP address blocks: 72.251.128.0/19 maxlen: 24
158.62.224.0/19 maxlen: 24
209.25.224.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:9b:d9:13:d1:72:88:4a:68:49:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Validity
Not Before: Nov 12 19:16:00 2024 GMT
Not After : Feb 10 19:16:00 2025 GMT
Subject: CN=0d778a3d-faba-4fe1-9faf-567e5c823478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:a6:be:71:c6:c9:e3:9c:ef:b7:13:2a:73:
7a:d3:f1:ba:66:dc:98:92:f9:c6:d9:0e:c4:00:20:
6d:32:2f:e8:fa:40:71:d6:f4:5c:d0:c1:70:6c:8a:
b9:13:b6:ff:39:b5:72:0b:e6:fe:fc:4c:cc:df:16:
d9:5f:58:52:bf:ab:35:25:02:c1:f3:08:ce:bc:3a:
42:b9:11:d3:9b:93:ad:9f:45:c5:c7:09:b3:92:dc:
e9:e7:1d:99:c7:10:df:21:e0:4b:05:22:06:99:20:
aa:30:ff:be:00:09:01:36:e5:b4:2e:2c:53:16:bc:
34:c5:f3:8a:1a:2b:ed:50:22:c1:72:1b:7d:a9:a2:
62:42:6c:7d:fd:68:70:e6:9f:3a:70:e2:fc:48:b6:
03:80:4d:59:71:7e:1c:e2:56:01:6c:2e:16:f2:b9:
7d:3c:1c:a8:f7:35:3d:be:f5:be:9a:09:f0:e4:74:
50:45:e3:ea:71:00:f8:ca:a1:9e:aa:59:e1:66:d5:
67:d4:2a:08:ee:b9:78:1b:40:e0:44:77:3a:b9:71:
8e:9f:61:94:10:1f:f8:0b:2b:c0:e4:e1:e3:ef:7d:
17:0e:28:d0:c9:e8:15:27:b8:e8:f4:d5:49:e8:7a:
e0:9b:3d:1d:97:a0:f9:7d:f8:e6:e7:a6:3c:93:c3:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:08:E1:F1:EC:EA:63:96:83:A8:55:46:34:EE:EF:43:07:D2:B2:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/dfd20097-ef42-39a3-b7db-e59dcfbd70f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl
X509v3 Authority Key Identifier:
keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
sbgp-ipAddrBlock: critical
IPv4:
72.251.128.0/19
158.62.224.0/19
209.25.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:65:57:49:fc:b9:22:a1:8c:cb:a8:06:a3:0f:14:95:8e:06:
65:a1:fc:93:3c:bd:be:97:28:94:2a:50:64:ff:9d:f3:b2:10:
e2:e7:7d:b9:63:ca:7e:22:ee:31:f2:1a:5f:05:c3:20:2a:f0:
24:fb:e7:03:53:95:03:f1:b5:cc:05:e8:52:9a:87:9c:8e:79:
69:f6:ad:52:b8:9e:37:a4:4e:e1:19:7b:45:9a:2a:ac:c1:2e:
d7:22:db:30:af:6a:0c:5d:81:ec:87:e4:1f:e4:09:8c:7c:58:
c1:a6:66:ee:0c:66:67:0e:00:e6:c5:81:c4:20:88:b5:f7:f3:
e5:cb:f0:f8:0b:94:57:a8:70:2f:3b:5a:c2:86:e1:ba:59:6b:
e9:fe:58:f1:c3:13:b0:3a:93:bb:41:96:ef:8a:56:8e:5d:a4:
4e:cb:fd:d5:3b:5c:4d:07:ba:fd:d0:99:9b:9c:5b:8d:e2:23:
f7:b0:9e:3a:5a:fc:c7:80:8f:6c:82:89:98:e2:55:2b:af:44:
ab:4c:13:d4:17:49:49:fb:be:f1:71:69:f0:f3:13:35:bf:88:
d5:c5:9f:d2:52:b3:96:cf:e1:04:b8:c5:e3:d0:78:e8:04:d5:
b7:d3:18:b4:8e:98:01:13:7a:c4:a2:f0:5b:12:15:ab:44:77:
07:7c:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:23 2025 by rpki-client