Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b2423d97-32a5-3194-b1de-b6fb3ffd7410.roa
File: b2423d97-32a5-3194-b1de-b6fb3ffd7410.roa (raw, json)
Hash identifier: rdDibpYkmoQvDL3EkIMqS9rPOEBUnBfjWXIoC4xk9FU=
Subject key identifier: F8:20:09:AE:3A:8C:EA:FD:04:46:8F:2F:17:B4:70:56:38:A1:30:6F
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF490F23F2A5E1D8759EA00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b2423d97-32a5-3194-b1de-b6fb3ffd7410.roa
Signing time: Fri 08 Nov 2024 15:05:03 +0000
ROA not before: Fri 08 Nov 2024 15:05:03 +0000
ROA not after: Thu 06 Feb 2025 15:05:03 +0000
asID: 36850
IP address blocks: 204.84.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:90:f2:3f:2a:5e:1d:87:59:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:03 2024 GMT
Not After : Feb 6 15:05:03 2025 GMT
Subject: CN=3095fcbb-3585-4401-88cb-834cc5e8eebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:c3:3b:a2:cb:87:09:4b:0c:1b:75:75:20:
ba:e8:be:51:8a:e0:5b:74:3a:e9:99:85:4f:6b:4d:
e5:99:5d:7c:6c:a0:b1:ea:79:01:b2:ed:45:39:d1:
d6:0a:9d:8a:22:e3:7e:21:4a:8d:61:74:3f:50:cc:
93:3e:2b:e9:02:85:6e:0e:53:30:15:9d:01:84:15:
39:0e:3e:b4:d3:f4:3f:5f:d9:fe:c1:75:9e:00:6b:
16:eb:e4:fe:ee:0f:53:05:f8:1e:71:8b:f5:c6:c6:
bb:83:d4:52:67:3c:19:93:85:18:47:36:04:f4:14:
ab:44:4c:d3:cb:1e:47:ca:93:8f:73:ee:b9:0f:43:
5f:9e:44:e3:dd:01:1a:c0:0e:cd:fb:2a:b8:e0:78:
af:b1:13:79:46:c7:d3:ed:ce:43:18:ae:a0:fa:9a:
30:c3:46:40:4a:0c:81:6f:4f:9e:ee:ca:ec:de:22:
1c:9f:01:3a:a8:b2:98:7a:52:50:be:3a:fa:71:24:
06:98:86:dc:d0:ff:72:ab:96:48:48:a0:98:60:1c:
57:5a:36:5d:58:cf:96:6f:ee:60:e1:e5:cf:a7:e9:
30:cf:25:af:26:7f:ae:db:eb:d9:a5:02:58:eb:0e:
fd:d6:f1:e9:7a:9f:b4:36:26:bb:88:5a:90:cf:16:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:20:09:AE:3A:8C:EA:FD:04:46:8F:2F:17:B4:70:56:38:A1:30:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b2423d97-32a5-3194-b1de-b6fb3ffd7410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:54:f6:90:e4:3e:49:3c:7f:cf:d6:98:1d:91:30:74:06:3b:
13:89:d4:19:f8:32:df:14:9a:4c:68:da:be:1d:97:69:f1:8e:
f4:81:1f:d4:c8:7e:96:bd:e4:f1:46:c0:29:11:d6:ce:d5:a5:
cf:79:be:0b:6c:fd:df:85:09:f9:34:03:e5:ff:a4:f8:36:3b:
0a:fb:03:f5:5c:b4:e6:0b:7b:76:aa:ed:d9:3d:86:f1:f4:73:
ff:ee:d0:c0:a2:78:94:d2:f9:59:46:d2:ee:6e:54:31:81:18:
fd:dd:4d:87:b8:cf:8b:a7:0d:04:b0:89:a5:93:ee:98:68:7d:
9b:f0:2a:04:c2:5b:81:6b:a0:a2:49:a0:53:cb:c4:84:17:bb:
9b:a4:d2:1b:ee:be:73:0c:e1:7f:d0:45:80:98:e4:d8:18:a8:
62:18:2d:66:c9:4a:35:66:27:ba:bd:e7:d6:4c:b1:60:36:94:
93:6b:59:d5:8d:99:e7:77:be:cb:77:e0:c8:16:49:f6:96:f7:
4e:a0:4a:c4:09:22:43:a9:70:e8:a0:c1:fc:6e:91:0b:75:52:
fc:ec:ba:0c:4b:d6:b9:ce:8d:30:df:b8:73:43:14:30:85:4c:
c8:af:da:26:6e:a3:a6:2d:97:8e:48:84:cc:2d:8a:e3:5a:78:
3b:ba:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:34:04 2025 by rpki-client