Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24ec7507-7bb6-3981-97de-e935af889b0c.roa
File: 24ec7507-7bb6-3981-97de-e935af889b0c.roa (raw, json)
Hash identifier: 4/uIDO/4grTCIjpUeDj4d94S76XsR2/CHaqN2+yf/nY=
Subject key identifier: 04:9A:C2:18:94:56:41:E0:3A:AA:07:77:6F:BA:BC:1E:BA:4B:35:9E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4825C3D7757E59B66D140
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24ec7507-7bb6-3981-97de-e935af889b0c.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 192.154.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:82:5c:3d:77:57:e5:9b:66:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=2d16a68a-3a44-4c7e-8711-dd033bd27b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:eb:d0:9c:0d:e5:62:0b:ff:2b:b3:30:b2:
f3:11:4f:1b:72:3c:a2:60:a7:83:0d:2d:39:cd:17:
7f:28:56:37:59:78:d7:29:2e:9b:68:d6:83:69:9f:
cc:89:5f:ad:73:3d:5f:51:40:bb:d8:46:86:e8:f1:
bf:7b:74:58:f3:fa:f2:9f:02:35:bf:92:4d:6e:ae:
4f:bb:72:ef:f7:a3:b1:df:55:4e:da:c1:81:18:07:
db:91:4a:0d:20:cc:65:1c:63:6b:93:ec:6d:b9:8f:
4d:2c:53:ba:af:a5:1b:90:6a:4d:3d:f8:18:1b:a3:
2a:6d:14:f8:e1:d4:5d:70:ed:17:95:c0:1e:4b:75:
80:46:cb:60:a8:ff:0a:06:33:d1:92:54:83:ef:b4:
f7:cf:87:b1:4b:bb:ab:7d:17:3f:90:dc:fc:68:5b:
9f:6b:54:75:e4:cd:4b:9c:96:88:fd:a6:ff:e3:16:
30:2d:57:1d:75:7c:80:bb:c5:59:14:9c:59:27:35:
2a:e2:87:c5:18:94:f6:19:6f:5f:45:31:f5:fa:a3:
3b:9a:af:b9:ab:18:3b:4d:aa:cc:71:74:7a:04:04:
b8:e5:ca:a5:97:4a:e9:10:1c:10:66:f9:cb:d9:b5:
9e:52:d2:19:4a:5d:99:5f:70:af:c1:f8:40:ae:85:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9A:C2:18:94:56:41:E0:3A:AA:07:77:6F:BA:BC:1E:BA:4B:35:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24ec7507-7bb6-3981-97de-e935af889b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ba:11:ce:34:99:c9:26:14:7c:0c:dc:17:49:12:5c:9f:17:
85:fc:ba:6a:fa:09:2a:e2:e9:ec:14:bd:ab:a9:f7:1b:99:c3:
a6:d4:da:45:17:71:fb:76:60:2a:61:68:c3:e4:9a:0f:3f:50:
e7:8c:ab:14:d8:58:11:8c:31:4c:68:3a:73:b6:30:d5:2a:44:
5e:2a:8b:9a:66:f5:50:7a:b4:d0:4f:b4:2d:4b:66:47:0f:00:
ec:c4:1e:e4:32:11:32:f4:8c:78:6b:09:56:45:66:0e:ee:d0:
e4:8f:69:73:e5:22:16:8d:78:b7:8a:b5:51:b0:15:36:53:33:
4e:f5:41:5b:71:96:54:2c:ba:28:5a:29:60:d4:41:69:d1:ee:
de:5d:13:6e:71:9f:f5:59:f1:88:30:e6:d0:d5:54:77:ec:af:
1b:57:e8:53:d1:08:ac:93:86:e0:1c:43:61:56:58:9f:b7:f6:
aa:37:50:65:d4:67:8c:0b:a2:85:55:d2:b1:07:86:79:c7:2a:
c7:37:f2:d3:49:08:97:aa:5a:ef:87:ba:13:74:99:74:da:23:
17:a5:ee:96:91:59:a2:f1:82:af:eb:fb:84:43:39:be:1b:f9:
57:ab:a6:03:f1:d6:bb:6f:cd:c3:d4:22:9d:1f:31:0b:35:86:
61:58:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:30 2025 by rpki-client