Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065bdec8-d71a-36d8-82de-fc435e60a089.roa
File: 065bdec8-d71a-36d8-82de-fc435e60a089.roa (raw, json)
Hash identifier: RqM7uZH6Ed87mKg3ta6heV2k1mDa4yDXpIx4z0diUWg=
Subject key identifier: FB:C1:58:77:29:22:9B:3B:70:C1:B6:57:18:4E:52:F6:48:5E:14:99
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285846126EB808E4668B1F67E017C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065bdec8-d71a-36d8-82de-fc435e60a089.roa
Signing time: Sun 02 Jun 2024 01:00:26 +0000
ROA not before: Sun 02 Jun 2024 01:00:26 +0000
ROA not after: Sat 31 Aug 2024 01:00:26 +0000
asID: 14663
IP address blocks: 72.9.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:12:6e:b8:08:e4:66:8b:1f:67:e0:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jun 2 01:00:26 2024 GMT
Not After : Aug 31 01:00:26 2024 GMT
Subject: CN=3bdd6bf9-8e72-4b0e-9699-f1900431e340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:50:c1:54:11:82:d8:ac:dc:14:dd:85:0a:
ee:12:34:e1:65:a0:39:b5:c3:12:a4:2c:d4:85:a8:
47:0e:b3:a1:88:cc:71:fe:a1:15:28:50:dd:2c:22:
78:30:b2:cb:01:39:e9:41:2c:9d:f6:bb:ec:23:b9:
70:f1:ed:4b:61:de:71:a3:c4:59:2e:d4:ec:bc:7e:
d9:83:96:0d:e5:67:3f:68:fe:15:e0:b4:e7:f2:c4:
ff:da:3d:02:b4:50:11:3e:4a:dd:bc:83:91:69:e7:
28:fb:66:c4:2f:ff:12:7e:b6:c8:47:04:67:f3:f3:
5c:b9:ed:26:7e:eb:86:28:9f:d0:80:86:1c:d6:96:
34:5b:bf:76:f8:43:e2:0b:c9:9c:74:cd:61:b5:47:
c9:a7:a1:97:68:f6:6a:3d:59:f2:65:2f:da:08:f1:
e9:c0:f7:c5:01:2a:44:07:6a:47:1f:d1:cf:23:5c:
d5:53:9a:32:48:91:69:36:69:5b:e4:0c:f9:07:73:
60:0e:53:b9:8c:25:9a:31:1a:b5:f5:75:91:a8:45:
f3:e8:d7:62:32:67:5e:58:29:10:ba:ed:ef:97:d7:
ad:0c:71:76:1b:cd:8a:ef:1d:d8:e9:18:42:24:6f:
6a:07:83:36:29:e0:d3:f1:4d:f2:c5:04:e2:f2:40:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C1:58:77:29:22:9B:3B:70:C1:B6:57:18:4E:52:F6:48:5E:14:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065bdec8-d71a-36d8-82de-fc435e60a089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
df:87:5c:09:74:08:b2:93:4d:bf:3c:7a:5b:b3:6f:a7:b9:ab:
15:01:18:7d:fc:c1:6a:cb:6a:ca:78:2d:7a:57:be:4c:93:0c:
d2:da:82:60:b0:73:6a:2d:9c:b4:6a:14:61:cb:2f:32:d1:85:
33:da:6e:b4:40:6f:49:bb:31:da:2a:02:7c:67:f8:70:e4:8e:
a1:4e:1c:45:7b:44:7a:05:cf:c2:a6:8e:f7:98:51:57:2e:89:
af:51:f8:87:93:8a:65:2a:7c:6a:2c:e2:6f:ad:3d:1c:65:70:
d3:21:77:a2:99:7a:f9:d5:80:05:1b:ec:5c:d4:ab:d1:01:9d:
17:51:5d:07:d9:bc:67:7f:19:be:e2:d9:c6:1c:c4:21:2c:b8:
b2:af:70:52:54:0a:92:7d:0c:70:46:0e:a9:bd:8e:2b:0a:c3:
ff:a9:c2:98:a1:12:39:ad:f8:fd:63:e4:cc:52:e9:7b:9f:33:
94:76:b9:5d:c9:b5:06:f1:2c:aa:0f:dd:86:c9:23:14:50:9d:
5f:8e:a3:fa:b6:f2:e0:d3:52:bb:80:7f:c1:0f:8a:11:7b:f5:
08:16:d9:18:38:59:34:19:ca:ec:70:e7:6f:c2:4a:2a:57:39:
b8:3b:e1:72:7a:df:c2:3a:4d:d9:83:75:05:26:7d:a4:ac:d2:
23:b4:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:11 2025 by rpki-client