Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a68d25d-47ef-3613-9080-4419eac609a9.roa
File: 3a68d25d-47ef-3613-9080-4419eac609a9.roa (raw, json)
Hash identifier: 4cfVA3qKyCTDYlTS9fRPKIEO/GBmuLvvObQjCL4IDNU=
Subject key identifier: 43:CC:B5:57:EC:D0:E3:E6:8B:16:DB:D6:AD:9F:E5:86:81:BF:53:80
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC1486CC56196E1A11D00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a68d25d-47ef-3613-9080-4419eac609a9.roa
Signing time: Wed 16 Oct 2024 14:26:37 +0000
ROA not before: Wed 16 Oct 2024 14:26:37 +0000
ROA not after: Tue 14 Jan 2025 15:26:37 +0000
asID: 6559
IP address blocks: 204.84.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c1:48:6c:c5:61:96:e1:a1:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:37 2024 GMT
Not After : Jan 14 15:26:37 2025 GMT
Subject: CN=d9d7239c-8f4f-4b11-b790-e7facbfb5911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:69:21:be:26:3e:17:83:1d:fd:98:c2:63:
36:bd:df:23:01:5e:5b:a1:c6:5c:e5:eb:c2:36:9f:
c4:ca:2c:f1:4c:55:01:a3:75:b3:90:09:ec:f1:17:
e0:22:4d:c7:1a:21:6f:60:3f:60:2d:8f:d7:00:97:
d8:5a:35:f4:bc:bf:36:16:20:e7:04:35:b2:f3:80:
4f:37:4e:49:81:53:e4:26:35:6f:85:a0:63:ba:35:
54:fb:49:51:7b:0b:e7:d4:ee:b1:d9:5c:85:75:86:
5f:25:97:5e:8f:6e:b3:ff:f3:ab:0b:8b:9d:e0:5e:
3e:47:01:fd:ac:67:2a:c4:ac:fe:6e:16:5c:c3:7c:
8c:3f:86:1e:de:e3:93:cd:31:b6:c7:f6:af:f1:b9:
24:82:53:25:b5:53:70:f5:c4:19:bc:57:fa:c0:8f:
c8:29:28:0e:88:e9:a7:e1:6a:30:8d:15:43:69:1a:
d0:d5:1e:67:fe:0d:00:61:4c:32:17:a8:c6:37:2c:
6b:ef:59:8b:1b:d3:99:03:58:c0:81:08:1a:6f:a4:
cb:7f:fc:50:d6:81:fd:c6:5f:19:47:e6:74:7e:d2:
7f:4f:5c:6e:c1:d4:62:5b:fc:62:e7:b2:dc:47:78:
a0:f9:62:c5:08:e3:28:6d:55:62:3c:69:f6:09:7c:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CC:B5:57:EC:D0:E3:E6:8B:16:DB:D6:AD:9F:E5:86:81:BF:53:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a68d25d-47ef-3613-9080-4419eac609a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:b5:37:91:52:68:c3:e5:4d:a5:d2:af:63:83:22:45:fd:2d:
55:f4:45:d7:50:99:e3:c4:2f:f1:cc:b8:f0:98:60:97:77:3f:
14:7e:b4:18:a1:e3:13:a2:e7:ca:8b:f6:29:6b:12:9f:43:8d:
9c:68:09:2a:10:f0:c7:df:58:9a:a5:4f:44:2c:aa:f0:6f:83:
7f:bc:ee:2d:fc:d7:04:ee:ba:16:51:2a:8a:68:e0:a8:52:3f:
b0:06:72:e1:eb:f1:4b:89:9d:75:fc:04:28:5f:cf:ff:33:13:
64:0c:5e:87:95:11:af:94:97:42:0c:6d:e8:ad:77:95:e4:43:
aa:0d:7f:d7:0d:ad:bb:75:9d:7b:27:01:3a:5e:34:2f:e0:50:
6c:de:b1:fd:19:4f:f6:61:f3:08:cd:c4:9b:2c:6d:07:e3:6e:
f1:1b:35:b9:d2:85:dc:17:54:99:e3:a4:2f:c4:1f:f4:e8:c0:
aa:ca:43:01:68:33:8e:ec:90:81:ec:04:29:d6:bb:b9:3e:71:
8f:fb:1b:d0:4f:16:0e:8b:7c:f9:51:0b:41:7c:77:9e:f7:65:
68:eb:ac:2f:fb:ac:c0:d4:8b:c2:70:76:2b:c7:b0:a2:c5:77:
1d:11:20:bb:6a:27:a2:99:8f:0e:d8:40:c5:e9:69:44:75:d5:
4d:d7:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:57 2025 by rpki-client