Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fb7f0579-b813-38b4-849f-a6b4e8c89e5c.roa
File: fb7f0579-b813-38b4-849f-a6b4e8c89e5c.roa (raw, json)
Hash identifier: Z1EvlQ6+a0J74TpDkWRAerijb9ZmMAikdDkghialSIM=
Subject key identifier: 7C:75:18:0A:EE:5C:91:BA:07:04:8B:D9:FD:FC:47:43:C5:F2:C5:1D
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328584309FDA010D0A9A25814BDCC00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fb7f0579-b813-38b4-849f-a6b4e8c89e5c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 208.117.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fd:a0:10:d0:a9:a2:58:14:bd:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=000cbc71-b2bd-436e-9657-cb53f314bbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:07:ff:2e:d5:d8:a0:07:d0:ca:00:54:33:df:
86:8d:92:1e:fc:8c:40:8d:13:35:11:cf:55:f5:35:
74:2b:30:62:e8:e8:90:b3:ff:1a:55:6b:53:5f:fb:
02:85:75:b8:13:54:a4:d3:ad:4b:43:ae:e6:e5:ce:
94:3e:8e:ca:ad:61:ef:90:0e:c4:52:58:82:7b:fe:
bd:bb:81:30:fb:c4:60:34:8b:7b:da:bf:60:06:73:
de:c2:a0:c4:64:1b:d7:61:e5:a3:66:25:e9:82:29:
32:a3:f5:fe:5e:e0:01:ac:fe:d5:12:c7:65:18:4d:
19:b7:e2:7c:80:f4:5e:05:d2:b7:64:51:45:be:a3:
a4:00:23:59:43:1d:a6:dc:73:21:f2:e4:5d:9d:c6:
20:a9:6c:ae:79:52:a4:1f:40:7b:eb:ff:c5:0e:f9:
dd:ae:28:27:ec:40:86:fd:90:28:83:ae:9c:af:3c:
af:a9:b6:8e:b6:19:92:e8:27:ac:41:4b:8c:ba:b2:
9a:7e:08:b3:08:d2:f3:41:65:31:a2:bc:ba:ea:09:
26:9c:c7:e4:22:ce:c4:27:0c:b5:fe:87:d1:57:09:
39:d7:de:f0:bf:5f:c4:9f:19:11:1d:a0:a2:7b:a9:
66:cc:38:3d:fc:e7:77:f9:68:5f:e3:fd:a5:8d:e5:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:18:0A:EE:5C:91:BA:07:04:8B:D9:FD:FC:47:43:C5:F2:C5:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fb7f0579-b813-38b4-849f-a6b4e8c89e5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:fb:57:b2:c7:8c:2f:9a:ab:49:7d:33:f5:61:a6:8b:61:85:
92:c2:a0:28:c6:76:af:cb:c3:8c:91:18:f0:0d:a6:26:29:73:
aa:e7:9b:dd:d1:56:e4:80:ae:7d:a4:12:07:b4:b2:18:6d:02:
09:c1:6d:94:45:ce:b5:c2:7d:64:22:59:21:6a:d9:75:5b:5f:
4f:9b:59:b9:02:6a:9e:58:69:c9:09:62:d2:80:a2:8a:4f:84:
72:91:0e:a1:ab:59:19:26:94:b0:98:55:c3:5d:34:98:0d:7f:
09:a2:85:f3:72:59:6c:12:bf:72:f1:02:a2:da:e5:34:70:bb:
de:77:c6:ec:71:d1:4e:e9:ae:b3:1f:38:f3:5c:0a:91:05:af:
8d:15:0c:33:c9:dc:7c:f7:92:23:e2:78:81:9c:dc:d0:b4:15:
e4:86:c3:6c:ad:c7:4b:d0:ff:95:dc:a1:ea:81:4c:38:f4:49:
da:17:f3:19:52:fa:a7:a3:18:c8:48:f2:3b:aa:05:21:9f:d4:
83:a9:5e:f6:b7:78:c1:85:64:3d:17:55:4a:06:52:83:98:ca:
e2:d1:f9:4c:c9:49:d4:e1:aa:63:62:c7:45:32:b3:2f:46:2a:
1b:67:ef:59:bb:a7:12:e9:fd:d6:13:81:9b:f3:e2:e8:05:37:
38:b9:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:40 2025 by rpki-client