Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/871e36c3-9104-30ec-a110-46ca1d390074.roa
File: 871e36c3-9104-30ec-a110-46ca1d390074.roa (raw, json)
Hash identifier: SuYeaNhkNw7XLglYX5DqZ4PAj8/J8HIKivKe1bpk5O4=
Subject key identifier: 27:93:E1:9E:06:ED:04:DB:B8:46:48:77:77:39:AF:F9:F4:61:C6:02
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB7BE47443CE780909080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/871e36c3-9104-30ec-a110-46ca1d390074.roa
Signing time: Wed 16 Oct 2024 14:26:32 +0000
ROA not before: Wed 16 Oct 2024 14:26:32 +0000
ROA not after: Tue 14 Jan 2025 15:26:32 +0000
asID: 81
IP address blocks: 128.109.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b7:be:47:44:3c:e7:80:90:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:32 2024 GMT
Not After : Jan 14 15:26:32 2025 GMT
Subject: CN=35292d96-0329-46e2-9b88-bca505fa7cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:d5:d6:1a:8e:53:d8:33:a8:b9:e0:f9:a6:
a7:98:21:f8:5e:ae:77:df:0c:de:77:38:52:07:33:
74:8a:47:91:e5:c3:31:81:b7:72:fa:94:66:b3:d5:
4b:53:1a:4e:e4:74:87:de:e1:c3:a6:85:96:dc:56:
03:cf:d7:2f:aa:ed:8e:f3:51:11:20:30:79:3b:e7:
42:0b:fc:3b:7a:33:d6:89:90:b5:7e:7c:26:b1:7c:
b6:a9:42:1d:0c:c5:57:b7:e8:b3:12:72:6c:86:aa:
db:56:5b:f0:85:00:85:e3:18:89:d2:70:60:de:74:
e6:1b:c5:41:dc:1d:36:df:b4:1c:20:c5:78:09:ef:
09:9c:02:41:0a:db:0d:70:85:d0:4e:c1:75:1b:87:
cf:48:6b:6f:b7:e1:6b:c5:4a:4e:74:8b:de:2f:91:
9a:8c:8d:56:2e:a1:d4:cf:cc:aa:e4:fd:71:30:b2:
02:36:af:b9:c9:6e:97:9e:5b:5b:38:83:a8:c4:06:
51:39:01:40:7e:2e:9e:cf:00:d4:8a:f1:3b:17:de:
cc:c1:b4:8b:8c:5c:db:ab:78:35:87:37:32:a5:57:
5f:85:f9:6b:ea:88:0a:de:14:cf:51:0b:19:e6:53:
3d:62:c4:e1:33:fc:f3:8c:90:30:7c:79:db:1a:86:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:E1:9E:06:ED:04:DB:B8:46:48:77:77:39:AF:F9:F4:61:C6:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/871e36c3-9104-30ec-a110-46ca1d390074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:99:72:cb:99:34:e6:ce:ec:f0:4d:28:20:8e:c9:8e:47:ce:
fa:8d:6d:13:d3:b7:22:e6:9e:85:70:73:34:6f:dd:8b:c9:df:
14:2a:36:5d:af:03:22:19:27:f0:0b:40:21:08:ee:d2:04:93:
43:f2:29:36:47:f7:8a:d2:c6:e5:f3:fb:fe:cf:8e:72:4d:00:
cf:2a:2a:98:4b:28:1f:ba:b4:ec:d8:5a:95:40:3a:c9:fa:ed:
b2:84:bb:e6:d0:11:41:4e:85:af:61:a3:45:73:96:1e:5a:09:
69:3b:f4:e0:84:6d:90:0f:ed:ac:29:22:8d:35:fa:31:11:a9:
c0:48:9e:78:66:9c:98:7f:cc:94:31:90:38:17:3f:14:5b:66:
5a:04:f8:90:23:8b:6f:40:6c:7d:36:34:48:28:48:4d:dc:6d:
59:c6:a4:58:1c:7d:c7:0d:a1:9f:e6:3a:d0:1c:89:e6:6e:77:
89:b7:24:9e:d5:b7:11:fe:8a:cf:f1:51:3c:99:35:2f:37:89:
db:d5:41:d4:c3:76:6c:fc:51:da:55:17:4f:fd:1a:71:17:29:
73:63:7b:4e:48:99:3d:1b:60:77:a2:bc:dd:32:eb:34:b1:de:
ad:c0:0b:0c:2b:2d:57:1c:4a:3b:28:13:a5:64:16:ac:da:89:
4d:cc:79:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:29 2025 by rpki-client