Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bc041b3e-a537-3f2b-be6a-4e50a19d70a6.roa
File: bc041b3e-a537-3f2b-be6a-4e50a19d70a6.roa (raw, json)
Hash identifier: qHIyWtbUHgoxsxmHUc6/bbCdspNH0EusccsqpNSph8s=
Subject key identifier: 0E:68:5E:16:2F:CF:2E:82:72:05:7C:C6:D6:47:2A:85:DA:D4:FE:31
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC186BE2369FC80BAE140
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bc041b3e-a537-3f2b-be6a-4e50a19d70a6.roa
Signing time: Wed 16 Oct 2024 14:26:37 +0000
ROA not before: Wed 16 Oct 2024 14:26:37 +0000
ROA not after: Tue 14 Jan 2025 15:26:37 +0000
asID: 6559
IP address blocks: 204.84.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c1:86:be:23:69:fc:80:ba:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:37 2024 GMT
Not After : Jan 14 15:26:37 2025 GMT
Subject: CN=4cf9397c-224f-4f0c-bc6b-101194bc2d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2f:3a:55:85:9d:9e:0b:27:17:7a:a0:0d:d5:
e3:4d:20:97:16:4c:94:e4:0e:7d:98:56:8a:1e:16:
11:07:22:17:d0:3b:6a:24:a8:79:a5:89:89:4e:1f:
39:99:bd:04:b4:29:87:61:91:be:d3:e9:42:0a:a4:
05:6e:22:eb:4b:19:fb:59:f2:32:63:f5:f4:1e:ab:
a9:5d:fc:a7:00:96:a1:15:98:82:89:a6:9b:38:66:
0c:53:1f:8f:b6:e3:3e:15:54:7f:82:56:88:cc:68:
9b:5b:78:13:df:67:08:77:90:f3:76:d9:4e:53:76:
38:c5:d2:46:ee:be:be:59:42:34:84:e7:91:da:10:
5e:14:b8:f1:55:46:5a:d2:25:75:3c:30:89:a6:88:
60:b5:76:0d:c8:a7:6d:33:a1:58:fd:d3:f1:76:3c:
6d:80:73:51:0f:73:43:ac:79:98:6c:ae:f2:78:8e:
52:c6:91:db:73:f7:2e:b0:4c:17:47:41:94:4b:5b:
1f:0f:a2:45:af:b0:76:7c:9b:77:38:1b:9f:90:48:
a0:2a:3d:62:e6:4c:a8:cf:c5:e0:0d:fb:14:c6:fb:
78:95:83:de:88:ea:40:71:6c:80:9a:30:2f:76:98:
8d:cb:b5:da:09:00:34:8a:70:d3:d2:fa:d6:57:f5:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:5E:16:2F:CF:2E:82:72:05:7C:C6:D6:47:2A:85:DA:D4:FE:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bc041b3e-a537-3f2b-be6a-4e50a19d70a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:81:8a:90:73:da:e6:2c:47:5c:99:52:78:44:07:35:fe:b9:
7e:81:85:5a:30:71:c0:3d:36:a0:6c:4f:2f:1a:4e:36:67:08:
58:b1:f1:e7:b6:5b:21:da:88:e2:3f:83:f5:45:c2:b7:f9:45:
f3:34:17:91:2e:4d:f9:86:6d:26:6e:2c:f0:61:e0:e0:46:34:
bc:35:8f:c2:d1:3e:19:b0:bc:39:2a:32:0c:d0:64:9f:37:8c:
df:5b:88:f9:1a:15:50:f5:a6:dc:bc:a1:35:26:de:ed:97:d0:
01:75:fe:ab:b0:4a:e8:b4:db:90:c4:6e:05:3a:5e:4c:c1:1d:
bc:99:3d:05:6b:d4:2c:4e:64:7f:b5:f0:1f:ed:a5:ca:f4:2b:
57:2f:7a:60:e8:0c:bf:95:5e:db:c4:4f:c8:6c:9f:f3:b4:54:
47:45:fc:7a:ba:3e:04:29:0b:ad:bd:b5:d2:d1:66:a9:c0:68:
ce:bc:82:2d:70:ca:80:e7:8a:b9:99:c4:ff:f7:bc:24:82:cd:
1e:45:cb:04:3b:9c:63:b6:cc:88:9a:05:3a:da:95:ce:6d:ac:
8d:60:8b:58:c4:eb:0d:da:56:43:47:78:67:48:53:09:94:c7:
62:e7:63:fe:bf:78:a7:36:e5:e3:ed:cd:8b:be:3b:42:1a:b6:
c7:ed:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:13 2025 by rpki-client