Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bf77543c-4ffe-3d0e-b06a-be3ad48fd6a4.roa
File: bf77543c-4ffe-3d0e-b06a-be3ad48fd6a4.roa (raw, json)
Hash identifier: oLw6Zes6PNshH5zMOKGDytdw3zeEDyVo6foAbTMHRaA=
Subject key identifier: 47:BB:02:A6:32:6A:6A:B8:57:0D:8B:2F:E8:F5:A8:A5:49:0C:A7:05
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847D88405CA3F93FACFF6D9E4C0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bf77543c-4ffe-3d0e-b06a-be3ad48fd6a4.roa
Signing time: Mon 11 Nov 2024 16:40:34 +0000
ROA not before: Mon 11 Nov 2024 16:40:34 +0000
ROA not after: Sun 09 Feb 2025 16:40:34 +0000
asID: 394437
IP address blocks: 72.20.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:d8:84:05:ca:3f:93:fa:cf:f6:d9:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 11 16:40:34 2024 GMT
Not After : Feb 9 16:40:34 2025 GMT
Subject: CN=3534874b-4e9c-4260-952c-235e96e3ae6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:9d:53:00:7a:94:17:fa:95:7d:a3:34:fe:
8e:f6:eb:a8:80:6d:81:b9:a8:d8:f3:3e:4e:50:93:
79:74:e6:bf:87:54:8f:4b:02:68:e7:71:d5:37:c4:
3d:6b:3e:e2:f8:af:88:cf:4c:2f:8b:bb:11:c0:5e:
c8:50:3c:f1:25:a6:8d:bf:70:57:f5:bf:5e:c2:d0:
f9:f1:7d:7b:bc:d1:8d:49:15:bb:14:dc:81:31:08:
e9:57:f3:b8:ad:a1:56:58:20:68:5a:1e:54:7e:33:
27:1d:b1:56:93:0b:a7:82:5f:8f:55:c5:03:8d:29:
da:fa:72:c9:5c:a7:d0:87:7d:93:a4:ce:d9:04:6a:
51:b9:36:85:d9:42:95:92:ef:f4:3f:ab:47:81:5e:
1a:a7:e3:d6:d4:be:f8:2d:9e:2e:67:c6:e2:72:43:
46:76:33:eb:a1:20:2b:1a:f2:c7:ed:d5:55:ba:25:
aa:92:53:32:fa:d7:10:ec:36:cd:cb:1d:6e:e4:2d:
3e:b7:6c:7e:60:ec:26:82:e3:25:60:95:8d:6d:76:
5d:d2:3a:65:85:2f:e4:65:ec:46:ea:a3:85:d3:ab:
ac:a4:bb:48:e2:ce:9a:8a:29:74:e5:fb:86:2f:f5:
74:a9:08:a7:43:36:e3:8d:ae:ec:50:d1:a5:a1:0f:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:02:A6:32:6A:6A:B8:57:0D:8B:2F:E8:F5:A8:A5:49:0C:A7:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bf77543c-4ffe-3d0e-b06a-be3ad48fd6a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:53:2b:81:43:f8:25:48:80:b9:e5:1c:4e:a8:ba:51:fc:d9:
97:02:bc:32:b1:aa:1a:c0:df:7f:09:75:e9:a9:ea:e9:56:57:
df:c8:b1:f9:6e:b5:b7:db:e9:b1:b4:39:3b:60:4a:bc:ed:6d:
32:16:9e:ae:c4:ad:bd:5c:bd:78:47:da:0a:ff:d2:a8:c0:d6:
38:79:4f:90:10:18:8a:d3:bb:b8:c4:55:fc:77:7a:14:50:9d:
75:40:09:e9:c1:ce:8f:93:7e:4f:b2:24:73:36:86:96:60:7b:
3b:c2:8d:b2:de:e6:8b:cf:a8:7c:ea:02:37:e5:bf:22:d0:a8:
61:a5:0d:39:e4:cd:a4:b7:15:dc:ba:cd:18:43:ca:fd:07:db:
91:3b:5f:a3:90:28:fc:dd:3b:20:e2:a0:3f:87:48:b8:b7:fe:
44:b1:32:2c:d5:2d:47:08:8d:06:0e:60:32:1e:7c:fb:06:a9:
50:26:57:d1:d2:16:2a:1c:6f:ec:01:06:7f:31:05:66:3a:9a:
84:d9:77:3e:e4:40:dc:31:f2:ca:33:0e:38:8d:47:12:7f:a6:
25:8f:57:53:a2:24:35:3d:5d:bc:7e:3c:3b:bc:53:be:59:70:
a1:f6:6b:db:5f:d1:e6:cf:4c:e2:c1:e0:95:00:3e:ba:09:f2:
ce:3f:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:15:23 2025 by rpki-client