Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d1f58744-7b4b-39fd-b434-5fe276fff485.roa
File: d1f58744-7b4b-39fd-b434-5fe276fff485.roa (raw, json)
Hash identifier: Br2Dx6R19No/RYRpHQKXT0SvJdWt0CiR/6Ocf2JpCmw=
Subject key identifier: 4A:66:2F:14:0A:1F:2B:AF:DE:FB:BB:47:81:A8:1B:17:85:24:64:A8
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285848598E9A4C0A73C0718A7FFF90
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d1f58744-7b4b-39fd-b434-5fe276fff485.roa
Signing time: Fri 27 Dec 2024 22:01:09 +0000
ROA not before: Fri 27 Dec 2024 22:01:09 +0000
ROA not after: Thu 27 Mar 2025 21:01:09 +0000
asID: 212238
IP address blocks: 96.43.106.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:59:8e:9a:4c:0a:73:c0:71:8a:7f:ff:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Dec 27 22:01:09 2024 GMT
Not After : Mar 27 21:01:09 2025 GMT
Subject: CN=c18050b1-1cb2-40eb-b1a1-c52b0b848e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:28:56:38:1b:ba:6a:9d:8d:15:e6:55:1e:
f5:3c:a6:7f:09:cd:62:50:cf:09:6a:15:96:7f:e3:
45:d5:a9:c4:22:87:37:c3:6f:a5:9c:97:92:38:60:
39:61:17:45:e2:51:64:d4:f4:5a:75:d6:3f:03:9e:
33:39:7c:3a:b4:11:ef:8b:3e:99:8e:99:ee:d7:19:
0c:fb:9c:7b:dc:6a:44:40:44:b0:32:93:61:19:ab:
13:30:78:bc:1a:c2:6a:b0:57:a5:7f:d3:c5:42:a7:
f7:91:47:0e:d6:cd:4d:03:55:e0:60:38:74:be:be:
2a:72:aa:8f:e9:6f:a6:3b:9b:44:dc:0f:4d:e4:df:
c9:80:79:0e:61:a6:26:5c:2a:ca:97:fb:b9:44:2c:
58:1e:6d:a6:a0:0f:80:f1:15:18:2e:e5:0f:bb:d2:
1e:f3:c8:54:16:cd:4f:0b:62:44:d0:54:b2:3a:31:
ce:f3:f7:da:d1:1e:0f:5a:50:f2:a1:88:f9:df:9b:
03:e7:5e:d1:12:b2:51:e3:fb:2d:21:a7:2d:6a:d6:
83:ec:96:85:1c:22:eb:6d:35:ed:c1:d0:32:ea:1e:
ca:53:46:8f:6b:34:3b:16:4d:31:05:2f:a2:d4:fc:
0a:ab:2f:09:9e:4d:4b:0d:51:fc:81:bd:59:24:8e:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:2F:14:0A:1F:2B:AF:DE:FB:BB:47:81:A8:1B:17:85:24:64:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d1f58744-7b4b-39fd-b434-5fe276fff485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:2e:51:6b:2d:97:47:bd:c8:38:f3:28:bb:68:78:c4:bd:c0:
4a:44:d1:61:61:87:70:5b:79:db:6c:df:b9:0d:c6:af:90:8c:
fd:48:55:e8:d0:c5:09:98:5b:a7:bb:ae:3e:da:0f:aa:fd:41:
36:1e:93:28:cd:b6:37:30:aa:0b:ac:05:4d:05:a6:af:a3:23:
ee:a1:6c:04:c3:4e:8d:73:40:3d:9a:ef:7d:b9:78:0a:25:9f:
34:ea:71:15:4b:e0:f2:5a:fa:7f:ef:fd:f2:db:98:da:ce:6d:
74:cb:cc:b7:22:e7:94:fa:ea:6f:06:40:da:51:91:2c:3f:df:
9e:b2:91:48:b1:4f:07:05:99:7c:18:86:09:94:e4:52:f7:1a:
8f:60:b6:86:e0:e0:bf:71:0d:b0:a8:ac:30:5f:31:2a:fe:d3:
16:b3:8c:13:75:ee:a2:04:f1:a8:15:ea:a0:ea:be:c9:4f:cf:
bc:c8:f7:f6:91:13:0e:97:61:67:51:51:c9:fd:98:cd:fe:93:
a1:29:c7:59:59:05:14:d2:b9:c5:d8:76:41:ab:eb:e4:85:95:
02:6f:fc:01:dd:ee:b9:6a:21:1c:d9:80:32:ba:11:f3:ff:6f:
c5:b4:09:1f:32:27:13:8e:58:64:6d:3f:e7:a0:88:d9:d4:41:
b5:85:d1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:35 2025 by rpki-client