Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4/6976f9a3-1e8c-3370-8e78-8e16dbbcc2bf.roa
File: 6976f9a3-1e8c-3370-8e78-8e16dbbcc2bf.roa (raw, json)
Hash identifier: yjQ8XKipTzLI3090y3aWfKF5xsoZnVGSBwmtJPXjwnQ=
Subject key identifier: DC:F1:C8:0A:A8:41:8F:7A:84:B5:1E:43:80:49:2C:EF:DD:7C:E7:E2
Certificate issuer: /CN=c25fae3c-7a75-46fa-859f-1921cb2d70e4
Certificate serial: 010D0C9F432858478E1A34F6DB6C2A8A6F16DE00
Authority key identifier: 14:6A:6C:23:CE:7B:E8:A4:2E:E9:D9:58:8B:F5:4B:F6:ED:1D:65:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4/6976f9a3-1e8c-3370-8e78-8e16dbbcc2bf.roa
Signing time: Wed 16 Oct 2024 00:57:32 +0000
ROA not before: Wed 16 Oct 2024 00:57:32 +0000
ROA not after: Tue 14 Jan 2025 01:57:32 +0000
asID: 14755
IP address blocks: 64.58.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8e:1a:34:f6:db:6c:2a:8a:6f:16:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25fae3c-7a75-46fa-859f-1921cb2d70e4
Validity
Not Before: Oct 16 00:57:32 2024 GMT
Not After : Jan 14 01:57:32 2025 GMT
Subject: CN=d25abd21-b217-4e00-9ee2-74ba2751e357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:51:76:0e:15:14:97:23:bf:70:de:80:9a:
ab:6b:a7:7d:86:97:59:0c:c3:16:3f:29:be:df:5f:
eb:31:e6:f5:a0:63:b6:ca:3b:5c:d9:84:db:6a:4f:
7c:8f:ab:98:0a:26:aa:f8:9a:2b:6d:0a:66:4e:a0:
b6:5a:01:27:cc:cc:8c:99:a7:bd:86:21:00:1f:5c:
c8:f3:e6:d6:9a:28:4d:2a:bb:1d:31:07:3a:54:11:
48:de:df:ef:81:89:83:8e:2e:e2:96:46:71:0e:a6:
01:6d:18:c8:9c:e1:a5:71:18:3c:6d:4d:5f:de:b7:
e4:93:7c:80:c0:4a:f9:96:d9:67:6d:c0:fc:fd:ea:
04:79:fa:e4:19:e0:60:9f:c7:08:a7:b2:f8:b0:70:
eb:4e:f3:a5:8a:80:b3:f3:06:d0:2d:d8:5c:66:c6:
83:b5:4d:49:09:ca:49:60:0f:c3:98:88:8e:7f:62:
be:9d:f4:8b:21:de:3d:a9:94:e1:f7:5b:a1:a1:e5:
4a:20:dd:49:bd:da:69:97:8d:14:19:ad:6b:a9:50:
7b:9a:38:64:28:ba:f9:61:00:56:d9:03:d6:03:c9:
95:5c:c0:3b:87:4a:d6:0d:94:08:a1:60:be:e0:49:
9a:bb:a6:b4:6c:65:1b:dc:98:57:34:e2:77:89:68:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F1:C8:0A:A8:41:8F:7A:84:B5:1E:43:80:49:2C:EF:DD:7C:E7:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4/6976f9a3-1e8c-3370-8e78-8e16dbbcc2bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4/c25fae3c-7a75-46fa-859f-1921cb2d70e4.crl
X509v3 Authority Key Identifier:
keyid:14:6A:6C:23:CE:7B:E8:A4:2E:E9:D9:58:8B:F5:4B:F6:ED:1D:65:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c25fae3c-7a75-46fa-859f-1921cb2d70e4.cer
sbgp-ipAddrBlock: critical
IPv4:
64.58.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:30:6c:7a:74:e7:c3:db:94:e8:49:af:63:71:39:bf:56:86:
bc:f4:13:26:78:4a:58:76:d4:29:61:e8:e7:67:6f:fc:44:6b:
49:de:92:7d:69:56:2a:e0:c5:f4:a1:ae:62:2b:51:7a:44:2d:
e9:ba:51:ab:04:fc:83:65:12:8c:be:65:92:11:67:7d:db:8f:
90:c2:36:78:c3:a2:aa:27:28:56:db:c4:91:fd:34:3b:47:be:
68:6d:79:a1:5f:a7:b6:f5:b9:ba:73:48:ce:5a:c9:46:7a:df:
72:da:cb:0a:8f:cd:3b:5a:38:81:e0:58:64:b7:59:c6:e1:2e:
da:06:c5:21:46:e8:d3:14:be:60:2c:6d:67:02:4d:22:19:94:
e2:6b:21:22:ab:ae:32:09:69:ce:4b:15:a5:ba:c8:d7:7e:e1:
fb:82:65:a9:83:ff:71:9f:fc:92:ca:08:eb:7b:26:dd:28:1b:
da:d2:6c:fe:4d:f2:71:97:ce:25:c4:1c:d0:0d:ab:49:31:89:
14:e2:fb:e8:49:eb:36:9e:a1:4e:23:a1:ae:ff:2d:05:e6:4a:
09:d7:81:6f:03:38:6a:ac:46:bd:f3:0c:57:c5:5c:31:73:1f:
37:3c:a4:24:3e:ea:e8:42:e5:bf:fa:63:e2:8f:dd:af:5e:42:
31:24:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:38:50 2025 by rpki-client