Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f1be346b-eaa8-3ff9-95e2-28ae7852e178.roa
File: f1be346b-eaa8-3ff9-95e2-28ae7852e178.roa (raw, json)
Hash identifier: cjcNPZyiC8jzmM74CJ75WEflWrJwMQKADgfBiMbvFYw=
Subject key identifier: 2B:CE:4C:AB:57:CC:D9:89:69:CA:C2:33:EB:6A:46:38:FB:68:AC:33
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847845667A56F4A086F639088C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f1be346b-eaa8-3ff9-95e2-28ae7852e178.roa
Signing time: Sat 12 Oct 2024 13:00:42 +0000
ROA not before: Sat 12 Oct 2024 13:00:42 +0000
ROA not after: Fri 10 Jan 2025 14:00:42 +0000
asID: 64267
IP address blocks: 216.230.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:84:56:67:a5:6f:4a:08:6f:63:90:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Oct 12 13:00:42 2024 GMT
Not After : Jan 10 14:00:42 2025 GMT
Subject: CN=86f1dfbc-c7eb-4a94-9326-c4bbb0f6e9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:25:34:ab:7b:4d:2a:36:d0:be:f2:a4:1c:
fd:a6:0e:b8:7e:0d:90:5b:7f:d2:5b:91:75:ef:f5:
d8:71:ba:f0:7d:09:76:ec:d2:ad:19:69:41:fe:88:
6b:18:85:f2:de:19:5e:d5:4b:1e:22:dc:ff:e0:72:
27:b3:f6:d5:c4:3c:7f:95:c3:ce:f6:ee:26:cb:ee:
20:a6:8c:44:a5:aa:83:0e:db:fa:9e:c5:43:4b:5e:
3b:af:3f:cc:4f:d4:54:83:96:70:40:ce:9e:cc:be:
54:3d:cf:98:8c:42:80:9f:25:cd:3b:2e:bf:b5:2f:
d3:ca:9a:d5:7e:95:a4:c7:f3:2f:c3:2c:56:fb:af:
b0:ce:f7:a5:3a:6d:aa:bb:7d:e9:56:41:03:29:46:
10:af:b8:2c:0d:23:20:36:16:79:e6:4a:fc:86:ed:
5f:c7:0b:5f:a8:d9:ef:18:f8:87:2d:49:97:a5:0d:
e2:fc:ee:01:4a:a7:c6:d3:dc:04:0b:0c:8e:18:7d:
5d:b0:09:d7:25:6a:63:bc:0f:cf:8d:80:9b:b4:59:
bc:14:e2:b0:73:8c:6b:b8:9c:f4:4e:d7:5f:e1:ab:
2d:ca:d6:70:06:47:f0:77:92:81:a1:f6:84:89:ec:
fe:1e:43:f8:cd:8d:49:a4:c9:82:ed:61:91:ab:c5:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CE:4C:AB:57:CC:D9:89:69:CA:C2:33:EB:6A:46:38:FB:68:AC:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f1be346b-eaa8-3ff9-95e2-28ae7852e178.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
216.230.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:08:e8:98:a8:ae:3d:5d:17:5b:26:55:e7:f8:64:3c:12:36:
41:18:25:a4:7b:62:fc:03:c9:ea:aa:93:d1:68:13:3f:36:f3:
84:42:36:0e:a4:8e:bb:6c:75:2c:54:0e:ed:30:9d:04:ad:8e:
b8:05:b8:d4:f5:a0:6b:67:76:bc:af:7a:9e:18:ba:7e:05:52:
6b:02:f5:10:c9:84:ce:4c:34:fd:29:05:12:fd:15:52:58:40:
3e:90:04:54:6e:10:ed:ab:25:bc:be:7e:73:64:00:65:08:59:
2d:cb:2b:69:21:52:54:a7:ee:e1:6c:0d:7e:1a:81:1d:8a:2e:
30:6c:2f:aa:af:e9:dc:37:5d:5d:8b:81:c9:72:5e:1a:df:12:
04:c0:26:92:d2:ca:90:43:db:e5:f7:f1:e3:8d:30:46:7e:9a:
2b:54:26:a6:b1:73:29:b2:e7:bd:cf:c9:16:2a:81:44:3c:d3:
57:cf:92:68:8c:cd:6e:97:9e:01:8b:76:6c:ec:20:04:14:0e:
bb:fb:c7:b5:a0:09:ef:1f:c2:99:8b:ea:8f:29:8b:bf:5e:6d:
da:52:06:86:3c:2c:34:ef:ca:ee:d4:20:ed:50:8b:8e:00:32:
78:6d:85:81:07:cb:dd:e9:4d:3e:75:32:95:ea:93:9e:66:7a:
f1:50:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:23 2025 by rpki-client