Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/51d16b3a-e6cc-3727-abd2-9338227fcfeb.roa
File: 51d16b3a-e6cc-3727-abd2-9338227fcfeb.roa (raw, json)
Hash identifier: YnbSpEyBkhn5NrpWMI9H+LfVZivzsi9pmPiLQ6FHtEk=
Subject key identifier: B6:E1:00:A3:BB:67:CF:EC:4B:31:9E:5B:19:A6:5F:59:CF:8A:74:83
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF490B9E0787AF148642480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/51d16b3a-e6cc-3727-abd2-9338227fcfeb.roa
Signing time: Fri 08 Nov 2024 15:05:03 +0000
ROA not before: Fri 08 Nov 2024 15:05:03 +0000
ROA not after: Thu 06 Feb 2025 15:05:03 +0000
asID: 20197
IP address blocks: 204.84.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:90:b9:e0:78:7a:f1:48:64:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:03 2024 GMT
Not After : Feb 6 15:05:03 2025 GMT
Subject: CN=96ef9d9a-2944-4155-acfe-ad742f5555c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:dc:99:e7:ec:4d:6d:36:9b:28:78:c6:f6:
f7:c7:c0:5c:13:8a:1b:6e:e7:ae:91:82:20:64:a0:
26:18:8d:43:e9:81:1a:1d:f5:f8:dc:88:24:fc:32:
dd:ea:4d:47:15:a3:c4:25:b0:4b:72:42:85:55:7d:
00:71:99:a4:37:72:c0:65:1c:32:d8:93:01:f0:b0:
ca:b7:a9:bc:a0:7c:de:6d:f4:4d:b6:38:fd:d4:69:
68:0f:73:03:42:ca:79:cb:c7:27:3b:5c:42:60:f2:
46:ea:e9:9c:bd:28:3e:24:11:6f:2a:1c:2b:c0:0a:
53:bc:aa:43:ac:8a:bc:1c:51:41:3d:93:03:e8:20:
f1:d2:0b:71:20:26:39:73:8b:cd:b2:fc:e7:22:13:
4d:ed:de:be:ff:8c:aa:95:30:6b:72:b7:6d:4d:49:
54:2f:0e:46:95:a0:95:ad:17:83:55:a7:9f:79:d4:
43:e2:52:fd:5e:c9:6b:c8:e3:b2:a2:a9:8e:92:42:
d7:7d:97:89:77:53:a8:ee:82:b5:37:24:9b:c3:06:
f4:f5:ce:fd:2f:20:87:5c:9a:73:2e:96:7d:f7:58:
53:1d:2b:e2:13:73:e7:c9:21:e8:dd:93:91:c2:b5:
da:42:64:ee:d4:09:30:b9:90:47:bb:d6:a3:6a:62:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E1:00:A3:BB:67:CF:EC:4B:31:9E:5B:19:A6:5F:59:CF:8A:74:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/51d16b3a-e6cc-3727-abd2-9338227fcfeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:b0:d9:3e:9d:bd:54:89:32:ef:26:4c:8d:43:97:83:93:7e:
1b:88:59:b9:9f:83:29:24:32:4f:1a:39:44:4d:f0:1c:c5:35:
af:d2:2a:f7:e2:87:39:74:7f:fc:26:a2:d4:4a:b3:49:a7:35:
88:4f:73:38:76:c1:8a:18:3b:f4:5b:45:5b:fa:29:2e:58:b9:
27:53:0d:4c:dc:41:ef:88:62:c3:e7:a9:29:64:e4:af:85:82:
24:80:ff:34:7b:61:7f:5d:4c:54:89:fa:25:ce:16:a8:12:2c:
cf:b7:ec:70:a0:87:b4:8d:18:e3:5c:77:7e:9d:c1:3b:f2:dc:
c2:41:5d:29:6e:a4:1c:2d:45:3d:4e:c6:fd:12:27:35:3c:a4:
80:d1:3e:a9:47:04:1a:9e:9f:26:d2:a7:31:5f:a0:61:96:14:
b5:a8:7f:d9:b3:1c:d0:74:75:cb:70:f4:7c:4d:1f:b7:2d:3a:
d1:22:34:38:24:03:37:5d:61:a5:7b:13:a7:bc:04:25:bb:b5:
bb:7c:3c:3f:3d:8c:cb:af:82:eb:bf:b3:c3:d3:98:22:a8:19:
fb:0c:38:6d:71:2e:27:c5:68:ac:a2:aa:49:ed:a0:d1:ac:ce:
93:7b:e5:72:e3:1e:d4:69:02:16:57:cb:e8:10:6a:be:d8:f5:
37:c7:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:35 2025 by rpki-client