Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/322f17d3-42cf-3963-942d-1ffb31eedde0.roa
File: 322f17d3-42cf-3963-942d-1ffb31eedde0.roa (raw, json)
Hash identifier: QEl6B0X48tKvZQKeE37OImpy7950gZADZ/nEjfEYzqg=
Subject key identifier: 2F:F1:BD:E2:EE:88:F2:4A:84:0A:82:1D:6B:EF:62:D8:A8:58:6E:C2
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F432858483DD4C1FD98BB2DF85FEB8520
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/322f17d3-42cf-3963-942d-1ffb31eedde0.roa
Signing time: Tue 17 Dec 2024 23:39:53 +0000
ROA not before: Tue 17 Dec 2024 23:39:53 +0000
ROA not after: Mon 17 Mar 2025 22:39:53 +0000
asID: 834
IP address blocks: 96.43.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3d:d4:c1:fd:98:bb:2d:f8:5f:eb:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Dec 17 23:39:53 2024 GMT
Not After : Mar 17 22:39:53 2025 GMT
Subject: CN=7f5d0aef-6ce2-4087-a52b-49c02bdbbdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ce:ac:21:f1:9f:42:ea:6a:dc:59:06:0d:db:
91:c6:b0:41:c7:1f:85:7d:9f:4c:5a:e4:fd:56:ca:
5d:12:5d:0c:24:3e:86:0e:f1:a3:62:e2:8d:72:ae:
2e:87:89:2b:b6:8a:03:82:9f:4a:d2:0d:87:d6:da:
d1:b7:b9:eb:8d:73:ac:f9:11:26:fe:00:b9:ec:8b:
8a:68:36:f4:0f:1e:e3:62:e0:f6:95:05:bc:8c:14:
22:8d:16:9f:64:83:de:15:82:1c:a3:50:b3:47:bf:
2a:ac:c7:28:b9:0b:5c:72:1e:29:4e:5b:43:38:5a:
09:0e:d9:89:b3:f7:61:53:e0:91:3d:55:9d:e7:3b:
6f:cd:26:44:06:ba:9e:25:6f:6e:be:48:de:1a:16:
f8:68:f7:e1:98:71:6f:49:2c:d4:70:a6:96:17:d9:
b5:cc:1d:f1:04:bd:36:b9:e2:a8:a6:35:da:3b:3d:
84:09:1a:d8:48:86:34:1a:27:1a:d6:16:c6:56:25:
69:67:6d:fa:75:f1:7d:64:53:8c:1f:b4:7e:5c:dc:
4a:c1:3f:07:f9:45:ea:bf:2b:5b:1b:8b:e8:ec:b7:
cf:79:6d:06:3b:ca:11:60:e9:ed:57:c9:b3:a4:63:
02:e0:d1:7b:e0:df:90:d9:48:8e:68:b2:5c:c2:78:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F1:BD:E2:EE:88:F2:4A:84:0A:82:1D:6B:EF:62:D8:A8:58:6E:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/322f17d3-42cf-3963-942d-1ffb31eedde0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:58:63:70:de:39:01:d2:b7:0f:ba:2e:f6:1d:f4:c9:47:7a:
37:c9:b2:56:28:28:7c:f5:cf:46:bb:f2:0c:8d:a7:44:37:6f:
a7:b3:88:80:69:b2:fb:90:7a:12:06:5e:12:e4:4b:a4:32:87:
ce:20:2c:54:d7:b7:87:0d:ba:26:eb:2d:55:5b:12:ac:4d:9f:
bd:81:c6:14:82:51:c8:5e:92:b9:9e:ba:ec:4a:36:34:3d:c2:
2b:7a:84:20:d5:0b:36:ae:28:00:50:a8:07:da:64:fc:a5:c3:
5c:61:44:7e:d4:ad:70:d2:d0:d7:96:a1:f6:2d:8b:7d:c8:f7:
27:6d:92:08:39:54:6e:88:93:5a:0c:0d:e7:69:23:86:a3:38:
7a:5d:88:7e:44:9a:56:42:0c:48:69:cc:7b:59:e3:04:18:07:
80:91:bf:66:dc:d5:63:29:f2:a9:5b:29:6e:91:3b:99:f1:8e:
ba:5b:7d:47:b1:8d:a6:41:e1:b2:77:da:ea:0d:93:ae:d2:c7:
4c:fc:74:70:b6:2b:38:b5:98:56:e0:9a:09:b2:8d:81:9a:fd:
a3:18:f7:58:b1:12:ca:9d:bb:02:e0:a8:4c:42:e0:77:4a:ab:
0d:a3:a1:af:80:79:32:bf:35:54:f7:3e:b8:93:f1:d3:dd:fc:
d1:b2:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:20 2025 by rpki-client