Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4ab4eb7b-3bd8-3e15-a17e-2cd2380e64c9.roa
File: 4ab4eb7b-3bd8-3e15-a17e-2cd2380e64c9.roa (raw, json)
Hash identifier: DTWzvYglY4OALSDZhdXZZ7w+9CIN5ck9iGT7XyHfbn8=
Subject key identifier: D6:79:8B:D7:6C:60:2A:5F:35:BE:63:90:C8:80:58:69:A0:C4:91:1C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF481ED17E3D5E06CAD5D68
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4ab4eb7b-3bd8-3e15-a17e-2cd2380e64c9.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 192.101.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:81:ed:17:e3:d5:e0:6c:ad:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=cd305df1-bf68-4153-b488-47055cf5fcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:43:20:56:aa:70:0f:cb:9c:92:e6:68:73:
61:5a:a4:03:36:50:fb:2d:a8:68:b8:01:de:98:be:
d7:f8:21:52:4c:f1:b9:eb:01:b2:44:33:c8:e0:4f:
61:5d:2b:8c:c4:9b:f8:29:a5:01:b7:97:0d:16:a2:
8e:d5:50:da:89:24:4c:3c:b9:3a:be:5b:56:58:5a:
2b:ae:01:37:53:f3:da:07:55:24:ef:4a:99:bc:fd:
6f:b5:8e:fe:f8:51:e8:e9:7c:d6:4c:f9:51:08:ac:
20:96:bd:e3:05:d7:cc:bf:ec:8f:a7:08:32:8c:26:
bd:e6:f7:79:4a:92:75:ce:9c:ee:a4:8d:73:58:53:
eb:8f:03:dc:64:93:70:bb:bb:6d:ba:05:b6:a8:8d:
59:92:00:9f:26:8f:7b:45:d6:ca:b6:08:18:22:f2:
93:cf:30:73:2d:92:07:e2:bd:ad:ae:69:8d:8c:6e:
73:3c:5a:57:1f:6f:07:b0:76:2e:c7:46:ed:73:02:
11:59:7a:e5:20:9c:cf:5e:6b:b9:80:c2:a9:86:b4:
62:91:c7:f3:3c:17:bc:f6:3b:86:e7:dd:93:82:06:
25:f8:b3:46:36:bd:9a:ac:1d:7d:0c:fd:eb:cf:1c:
a1:43:c2:0d:d6:87:af:ca:e0:ee:83:92:45:de:7c:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:79:8B:D7:6C:60:2A:5F:35:BE:63:90:C8:80:58:69:A0:C4:91:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4ab4eb7b-3bd8-3e15-a17e-2cd2380e64c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:f6:6b:64:fd:97:bf:99:54:9c:4d:ee:c0:3a:e0:b3:a2:9f:
c8:2a:b9:24:83:c7:41:78:b2:6b:72:b9:4b:8b:0f:54:20:37:
a0:b5:2f:a4:f9:af:48:c5:55:8a:ec:11:2e:ab:31:24:fb:b9:
19:70:4d:20:f2:1f:25:0d:ae:98:7a:2e:20:09:7d:c9:5c:ba:
f2:83:74:40:4d:6c:36:a9:bf:2f:7a:25:0b:cb:d2:f9:9e:d0:
c9:77:72:82:77:1c:0e:dc:98:01:62:66:61:c7:9d:d2:11:41:
cd:f2:2e:d0:5a:b3:aa:b9:02:f7:78:87:dc:7d:30:dc:42:a9:
1e:d7:de:b0:66:66:db:97:e3:fe:c2:08:12:a2:c0:44:c9:0c:
36:f0:c7:4c:09:dc:3c:7d:02:aa:7a:af:44:76:55:f8:63:45:
2f:ae:8b:e5:7d:0e:26:9f:fb:70:87:91:c0:c7:ac:96:02:c7:
9a:10:b8:ad:b4:6c:8e:2f:ce:23:68:64:8b:db:92:90:e1:14:
15:08:0b:a5:03:e1:dc:cc:59:32:5d:14:a7:09:97:dc:1a:05:
84:e4:1e:be:9e:53:ce:c5:87:92:b9:ad:e2:b7:f8:5f:27:32:
d1:71:de:d9:99:f8:8c:1f:aa:19:f2:1a:e1:c1:37:c2:ba:a3:
e5:a0:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:16 2025 by rpki-client