Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a4604979-61fa-318b-a923-e2c4cd29cbc9.roa
File: a4604979-61fa-318b-a923-e2c4cd29cbc9.roa (raw, json)
Hash identifier: bZYsAh+o+JPjP7CRj/8eBEk//KJg5eb5JN6Mgeq62X0=
Subject key identifier: E7:36:52:BB:62:4B:DF:94:3D:59:EA:5A:C3:5E:C1:82:2A:1F:80:21
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC1F66E6360ED56D686C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a4604979-61fa-318b-a923-e2c4cd29cbc9.roa
Signing time: Wed 16 Oct 2024 14:26:37 +0000
ROA not before: Wed 16 Oct 2024 14:26:37 +0000
ROA not after: Tue 14 Jan 2025 15:26:37 +0000
asID: 36850
IP address blocks: 204.84.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c1:f6:6e:63:60:ed:56:d6:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:37 2024 GMT
Not After : Jan 14 15:26:37 2025 GMT
Subject: CN=6fb081cd-1daf-47ea-a4a0-698d655d451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:31:fc:c2:3d:b3:5c:07:32:6d:40:e3:de:c7:
ea:c1:78:b1:76:f7:5a:10:06:66:7e:64:4f:19:a8:
8b:78:b8:0c:56:6b:68:0d:6e:6a:8a:da:8c:0f:91:
58:5d:32:bc:09:5a:f4:d8:55:e8:60:58:77:65:6a:
f5:d3:7f:cc:86:ff:5a:d7:2e:65:a8:16:72:44:e8:
98:e2:92:75:5b:4d:ba:ba:64:04:7b:55:ee:41:0c:
8a:42:d6:23:bb:5e:e6:a1:eb:88:26:d3:98:2a:25:
ab:96:0c:72:c3:1c:94:f6:81:60:4d:d5:bd:53:20:
d9:5d:20:63:bc:f0:f6:fd:16:b2:67:7a:af:18:42:
57:ab:18:c4:76:67:38:60:62:78:10:62:46:d6:32:
48:de:29:9c:5a:a6:27:50:fc:a1:93:96:17:20:cc:
7d:99:8c:ae:5f:f8:06:90:9b:77:0d:bb:a5:c3:8a:
0e:37:db:df:d6:11:84:80:ae:c0:e0:9d:a0:10:8f:
a2:68:11:08:2c:5d:1b:31:58:12:e4:95:e6:b3:1c:
98:6d:d0:a3:70:69:9f:4a:05:0e:5f:5c:0e:68:eb:
10:ea:48:b5:81:42:21:1e:ef:6e:20:08:c3:6f:2c:
bd:79:ee:bb:9f:3b:69:76:61:e3:ee:d1:fa:51:58:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:36:52:BB:62:4B:DF:94:3D:59:EA:5A:C3:5E:C1:82:2A:1F:80:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a4604979-61fa-318b-a923-e2c4cd29cbc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:64:06:d5:4d:4a:27:b4:8e:23:66:fd:26:6b:f4:0f:64:82:
a8:49:0a:7f:ad:8d:28:7c:6e:cf:82:77:43:ad:f6:83:a3:19:
48:04:fe:7f:ca:5e:6c:04:0b:f2:b5:b9:6b:b8:97:c7:0d:d9:
8b:b3:cc:cf:2a:3a:0e:bd:91:ba:be:91:b2:3d:85:75:51:5f:
d9:e4:2c:6f:c0:31:ba:d7:c2:b4:45:2d:3f:14:b3:36:72:64:
c3:a2:fd:29:38:5a:42:13:1e:fe:b5:56:e1:12:78:15:1b:dd:
12:ae:49:00:b7:f5:1c:1a:e3:7b:49:39:9f:0e:5c:ec:bc:0b:
a2:08:62:c0:7a:9f:cf:00:b6:bd:0a:90:79:6d:4c:8b:20:b6:
6e:4b:70:ac:87:13:00:27:f5:b2:3e:0f:90:c4:66:10:ed:00:
e9:79:88:72:a3:4e:59:1a:d4:44:6e:36:86:97:5c:87:ed:ea:
2c:69:2b:a7:c0:04:7b:94:b1:1d:7a:2b:fc:9c:28:f8:70:d4:
bb:bb:b2:23:9e:4a:ee:aa:ed:7c:35:8b:3f:06:5a:3a:0b:1b:
17:03:f3:f5:73:b0:43:04:ff:2c:69:0e:93:4b:36:3f:0f:7f:
7c:76:4a:8c:b0:a0:37:2b:ba:e4:46:8a:fc:f2:f8:3d:97:94:
79:6a:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:20:11 2025 by rpki-client