Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3bd3535c-508d-3765-b254-2f64988cc166.roa
File: 3bd3535c-508d-3765-b254-2f64988cc166.roa (raw, json)
Hash identifier: opfPTRpYeO0d2f7P9f4/RHtjOzIs/MAjXjyc2FB/92I=
Subject key identifier: F3:C9:C2:7A:87:EE:93:6F:F1:7D:0D:00:DD:48:99:90:98:E6:09:18
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A24372242C09AD94AE30800
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3bd3535c-508d-3765-b254-2f64988cc166.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 64.9.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:37:22:42:c0:9a:d9:4a:e3:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=51884891-6051-4f72-a914-e454b5619377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:f9:94:c1:20:a2:88:d6:90:73:fe:b6:20:
71:fc:98:01:08:89:5b:3b:59:a0:13:9f:23:80:8f:
47:f7:99:18:03:a1:91:80:59:2b:81:86:4a:ad:6a:
08:d8:bc:63:08:f2:99:38:80:67:71:a8:e3:e0:48:
5e:11:79:06:bd:84:65:b1:1b:ba:ab:9e:f9:1c:96:
8d:c4:c7:9f:6d:bf:df:4e:cf:39:80:ae:66:cb:6d:
b0:34:4f:03:4f:db:ec:de:1b:c0:9e:fd:b1:25:1e:
08:94:76:1d:17:5e:4c:02:48:0f:f4:5f:0f:4b:b5:
50:16:12:1b:fc:54:0a:8b:0c:ea:c1:e1:31:b8:fb:
06:f7:9f:60:22:b4:3d:33:46:a5:81:85:5e:5b:4a:
cd:d4:58:a0:a6:76:3e:60:bc:8b:4d:a0:d9:d4:f5:
c7:8e:dd:80:ea:4e:8c:2f:20:1d:c2:5b:b4:a1:37:
96:30:01:f3:95:1e:48:31:53:63:02:14:7a:8d:7e:
bf:d3:73:16:99:46:11:dd:d4:22:00:e1:aa:7b:1f:
9c:41:f2:d5:b1:52:b8:24:b3:d0:24:5a:84:ac:3d:
aa:35:2c:44:3c:15:a9:c0:40:24:8f:21:b3:05:b3:
3f:68:64:24:87:5e:02:f3:82:fc:1c:f9:a8:78:5f:
b7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C9:C2:7A:87:EE:93:6F:F1:7D:0D:00:DD:48:99:90:98:E6:09:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3bd3535c-508d-3765-b254-2f64988cc166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:be:5b:cb:94:6d:e1:e7:45:cb:07:97:3c:1a:76:e7:c8:b8:
82:2b:30:64:ad:e4:88:e8:81:75:78:7c:14:7a:c2:9c:00:3d:
e6:7d:ac:c9:18:87:7e:ac:39:bd:5f:be:f1:f4:5b:6d:61:a7:
19:9e:e9:5e:c8:df:aa:fc:f6:a3:5d:aa:48:ea:c6:78:b8:95:
34:10:e7:4d:3b:41:51:c7:f3:6e:e3:ce:cc:9d:05:5c:76:67:
a3:bf:ee:d6:96:a8:69:78:b1:74:d6:42:30:d1:bf:db:06:1e:
9f:be:34:f5:bc:d9:a5:f9:fb:c8:35:40:6f:ce:a2:ac:ae:01:
3d:5b:d6:63:45:4f:9a:30:f3:b2:b9:c9:d4:12:0b:dc:db:31:
69:76:5d:54:18:37:7e:30:79:e8:6e:3c:eb:69:e3:7b:cb:fa:
ec:1f:a4:b2:7c:db:dd:da:d2:f2:e2:01:e5:48:43:df:5b:7a:
99:d7:23:19:8f:89:2e:20:38:d2:97:13:33:a6:55:f4:07:a3:
25:c8:40:ea:84:37:1c:4f:2b:1c:f6:81:04:44:90:7f:e1:de:
fc:3a:a9:92:2d:90:54:a3:1a:18:de:6d:91:5c:7a:34:e2:85:
8b:06:c6:4b:50:c3:2a:d3:20:75:21:3d:71:07:1d:a7:64:6b:
2c:b0:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:09:20 2025 by rpki-client