Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/14939afb-7078-3043-8608-b15e290dcf48.roa
File: 14939afb-7078-3043-8608-b15e290dcf48.roa (raw, json)
Hash identifier: eEWemfEYZJ+7iWfC9Nne5IsUxu5gRKdB/y9ZIfmIju8=
Subject key identifier: 17:6D:0E:B5:99:6F:67:6D:E9:D0:D6:39:D1:7F:65:5A:DF:0C:37:AB
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F4328584299D3B1C249A9681359F33480
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/14939afb-7078-3043-8608-b15e290dcf48.roa
Signing time: Wed 19 Jul 2023 17:50:29 +0000
ROA not before: Wed 19 Jul 2023 17:50:29 +0000
ROA not after: Tue 17 Oct 2023 17:50:29 +0000
asID: 834
IP address blocks: 200.229.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:99:d3:b1:c2:49:a9:68:13:59:f3:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jul 19 17:50:29 2023 GMT
Not After : Oct 17 17:50:29 2023 GMT
Subject: CN=2b5fe5d5-b311-457e-a765-430ec0289b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:a2:85:f4:de:d3:13:08:4f:f5:73:f0:53:
3a:7d:e8:b8:b1:09:08:05:24:be:5b:e0:14:3d:a9:
0d:a2:7f:8e:67:7a:45:fa:b4:94:e6:78:95:b1:63:
3c:45:1b:42:ff:a4:80:d2:f4:78:12:0e:84:dd:dd:
d8:bd:27:fa:5a:90:8c:a0:6d:e0:dd:fe:48:25:f8:
e6:0c:bb:d0:e4:4a:41:e4:71:dd:32:53:af:92:93:
eb:1b:38:54:8a:70:eb:75:29:38:74:d6:d2:c8:47:
64:84:98:58:6f:46:5b:39:10:68:56:b8:64:9d:4f:
cb:7b:0a:77:ae:fb:53:6b:1a:7b:e1:af:b6:88:35:
c3:7c:6a:f6:94:54:27:72:18:92:b2:8d:41:be:ac:
a2:8b:8e:e3:31:71:a8:5b:b6:09:f1:3f:6a:4f:db:
d0:5c:4f:1c:0f:5d:0f:d3:33:e0:ca:04:60:f8:8a:
a1:a8:20:59:ae:71:ab:ae:79:c0:6b:5a:45:10:1d:
af:55:3a:c7:b5:bf:4f:d4:aa:36:6a:4a:c5:0e:b0:
c6:53:90:58:8e:55:22:df:5d:d4:af:c1:fc:b7:fa:
be:85:1b:f1:d3:c5:8a:2d:4c:6d:d7:b1:86:94:46:
36:42:19:75:f3:68:19:46:b7:cc:a8:2e:c1:22:79:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:0E:B5:99:6F:67:6D:E9:D0:D6:39:D1:7F:65:5A:DF:0C:37:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/14939afb-7078-3043-8608-b15e290dcf48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ad:41:ca:08:11:8d:9f:37:9f:a2:1d:e1:76:f5:e2:84:0e:
22:49:30:27:d4:9c:8c:d7:04:ad:3e:34:7c:6a:6b:4b:a8:ef:
86:7d:61:2f:7b:b1:32:f2:37:31:79:15:f9:9b:c1:a5:b5:cc:
07:d6:da:0b:2c:55:9b:a9:0b:48:fa:dc:a9:86:55:4d:ad:31:
fc:5c:67:2d:d4:4e:7d:91:22:12:98:5f:d8:37:67:97:20:ac:
b7:42:7e:8a:88:a5:69:3f:85:98:55:c5:2a:75:8e:b3:1c:eb:
0b:08:ae:80:9b:48:6e:57:e6:cb:a7:78:8b:22:1a:ef:14:4a:
98:69:4a:ee:77:2f:bd:2f:b7:2d:8d:77:15:a8:4d:e7:05:b1:
9a:a2:82:b1:03:c9:95:dc:d9:f8:7b:6d:a7:40:ca:88:3c:f9:
72:23:8e:ab:75:86:d2:2e:3d:a0:64:67:35:c9:1a:94:fc:f8:
54:29:d3:18:20:e2:95:16:4c:da:20:ff:84:5e:da:2d:a0:af:
e3:a1:61:e3:0f:39:4d:7c:4f:99:c5:67:12:ed:1b:78:72:b0:
3a:45:81:f1:40:b4:c8:43:0a:82:f9:3d:07:72:3a:92:b0:dd:
a1:98:83:44:db:e8:0e:28:36:1a:a7:ec:a1:b0:d2:ee:5b:83:
a7:b0:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:51 2025 by rpki-client