Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9cc1bb9d-871e-3f4b-9254-03bbcb046489.roa
File: 9cc1bb9d-871e-3f4b-9254-03bbcb046489.roa (raw, json)
Hash identifier: cptFiX3+IhfSCiTaqRaQtzS8bfxYi2xvGklxHhuDJnw=
Subject key identifier: 69:D2:68:0C:5C:A6:FC:6E:B7:7F:FE:5A:B5:E5:4A:AC:F5:36:3A:AF
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847D87BB73282C2C8ADEB571D20
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9cc1bb9d-871e-3f4b-9254-03bbcb046489.roa
Signing time: Mon 11 Nov 2024 16:23:49 +0000
ROA not before: Mon 11 Nov 2024 16:23:49 +0000
ROA not after: Sun 09 Feb 2025 16:23:49 +0000
asID: 394437
IP address blocks: 66.249.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:d8:7b:b7:32:82:c2:c8:ad:eb:57:1d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 11 16:23:49 2024 GMT
Not After : Feb 9 16:23:49 2025 GMT
Subject: CN=0ed5a615-33c8-47a6-9b61-ec8877b2e27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:24:47:7c:95:03:aa:25:fd:63:26:c5:27:
9b:36:e4:5e:c2:92:58:99:a5:37:0a:c3:f7:a0:c6:
9b:1a:be:d3:b3:a0:bb:9d:01:d2:02:fa:88:6c:6d:
7b:7d:d8:27:dc:86:68:ed:0b:5c:63:69:4f:68:a8:
c8:96:01:de:3a:56:88:13:01:69:d3:2a:69:b7:73:
a9:e3:ca:16:8d:bf:be:d2:a5:3c:a5:e0:27:60:d3:
d2:66:1f:7e:43:dc:c3:67:09:29:80:f1:f3:78:6d:
0b:c3:14:3a:77:e1:c0:98:a2:b3:fa:6f:60:d1:93:
e7:c0:33:35:a8:50:fa:b4:db:16:8d:9f:80:af:b3:
93:6a:58:6b:12:9c:8f:4e:e1:50:d4:e6:66:94:0e:
db:e7:c5:57:68:bf:bc:c3:1b:77:1f:37:86:50:49:
0f:00:5a:80:e9:ad:8f:2d:2d:de:47:d6:68:b4:a1:
40:11:b9:38:cc:b0:9e:09:ae:2b:88:cd:4c:17:3b:
40:ac:3d:06:b5:cf:7e:4a:25:0f:34:06:cd:97:a3:
42:97:cf:05:a0:8e:46:f2:c2:ab:c0:2f:57:32:02:
92:1f:49:8c:c1:8e:c0:83:1c:6e:6a:b6:9c:f3:d8:
d0:7b:25:4b:81:f2:7e:be:a2:0b:51:63:f5:50:20:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D2:68:0C:5C:A6:FC:6E:B7:7F:FE:5A:B5:E5:4A:AC:F5:36:3A:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9cc1bb9d-871e-3f4b-9254-03bbcb046489.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:35:8b:f6:d2:f4:58:a1:8e:45:91:b0:98:78:a8:db:2e:ae:
01:b7:8e:a0:7e:53:74:39:d8:fe:db:d4:fb:b8:3a:46:4d:ba:
5d:3e:5f:02:e9:d7:9f:12:71:6b:42:a7:da:d0:5b:29:69:0e:
28:b2:d0:5d:bf:6c:41:08:99:9e:2c:e3:6f:94:95:eb:81:e4:
f0:a6:e9:16:f8:bb:82:79:c3:dc:bd:33:09:8b:32:54:65:fb:
0c:5f:4b:71:fb:13:c5:b7:92:67:93:f6:e9:71:46:35:42:1e:
35:4d:7b:fe:58:a3:2a:74:e8:d5:b9:43:fa:a0:83:2d:bb:54:
bb:ca:1f:4d:dc:5b:ad:35:3e:8b:25:86:b5:f0:c8:84:72:3d:
db:84:c4:4e:5d:29:b0:bf:8d:87:e5:2b:49:02:9b:84:da:2c:
2d:df:af:d1:14:58:ac:6d:a0:9b:82:52:08:a5:59:30:d4:84:
9a:a5:d1:e0:0c:f7:39:13:ce:fc:10:b7:df:63:74:49:b8:0a:
87:ac:fa:b5:8e:b3:17:6b:4d:84:a0:6a:0b:e0:ac:3c:ab:d2:
bd:28:1d:35:97:e5:9b:a5:2c:79:fa:53:5b:8b:e2:e3:20:8e:
98:4c:a1:bd:f9:e4:4d:8e:59:71:ba:29:15:7d:fc:3e:5f:27:
78:83:b4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:22 2025 by rpki-client