Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/387b6080-f3f5-3474-a0b0-156941ca62ba.roa
File: 387b6080-f3f5-3474-a0b0-156941ca62ba.roa (raw, json)
Hash identifier: uakF2vjy5+hQUnsdR8XCe2rV2/MQU2n0btcrLWd9jug=
Subject key identifier: A5:EC:E9:C7:1E:2A:08:61:C4:5E:F6:B2:EA:8B:52:15:45:CB:47:95
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285847C25D58C30B09AFAA30479680
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/387b6080-f3f5-3474-a0b0-156941ca62ba.roa
Signing time: Sun 03 Nov 2024 18:14:51 +0000
ROA not before: Sun 03 Nov 2024 18:14:51 +0000
ROA not after: Sat 01 Feb 2025 18:14:51 +0000
asID: 834
IP address blocks: 200.229.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c2:5d:58:c3:0b:09:af:aa:30:47:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Nov 3 18:14:51 2024 GMT
Not After : Feb 1 18:14:51 2025 GMT
Subject: CN=c79f4594-3d18-4c31-a4b3-6186cf8961b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:55:cf:2a:9e:6f:72:63:b5:73:3f:3a:4b:
c5:40:c5:a2:50:9f:fc:6f:fb:53:6e:42:95:e7:b0:
22:c3:3c:f4:a6:71:05:dd:0b:ae:5f:39:02:25:8b:
99:8b:e4:af:9c:84:33:e4:6b:63:f0:a8:08:f6:ed:
31:46:9e:bc:16:47:47:e0:ba:bc:25:fb:ec:e0:fc:
13:c4:fb:a3:70:a1:b4:82:2f:3d:02:64:50:5b:c3:
90:a6:40:f4:02:39:5f:63:97:f8:a1:1d:41:07:d3:
b6:51:98:b3:ec:a4:5d:27:95:a6:89:15:c9:ba:ab:
18:97:60:5c:bb:c6:06:16:98:cf:fe:e0:5d:44:17:
08:a9:88:98:43:fa:39:af:ab:cd:16:06:b2:32:25:
4b:e4:bc:81:44:f2:35:fe:80:1c:42:90:a6:d1:3a:
28:03:3f:ec:c5:2f:8b:9f:03:2f:d1:45:f9:06:e6:
f0:33:ea:85:22:e3:94:40:4a:fc:ef:8b:92:77:f5:
11:cf:8a:44:c7:09:b8:c7:b5:87:83:e9:af:83:42:
20:b3:9a:7f:4d:ac:80:91:6f:17:d2:df:83:c8:bf:
0f:4a:47:df:f2:14:0a:00:61:d5:e7:8d:b9:be:58:
e0:57:31:9e:fe:ba:0c:70:b3:da:a9:b2:a1:34:5b:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EC:E9:C7:1E:2A:08:61:C4:5E:F6:B2:EA:8B:52:15:45:CB:47:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/387b6080-f3f5-3474-a0b0-156941ca62ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:2d:3e:bb:da:b2:20:7d:74:05:0a:9e:bf:45:d6:16:9c:76:
21:ec:70:d7:7b:ef:96:07:af:31:36:ef:b9:58:e8:0d:2e:e0:
01:c3:87:06:8b:b9:01:9d:3c:2b:7b:d0:13:7f:a2:69:80:13:
dd:3f:5a:b9:da:26:17:a7:1c:2a:f9:2a:d4:8f:6c:90:e4:7e:
00:5f:71:15:bd:80:11:3f:46:eb:34:1c:0c:88:82:a1:d0:0a:
44:07:16:ba:b4:41:df:22:57:35:f9:b0:cc:4c:e1:f9:c7:1c:
e8:dd:76:a9:4e:d0:e6:bc:3a:fd:e2:0e:a8:ec:59:84:ec:a9:
1f:07:07:be:3b:7c:05:bd:97:1c:c8:7a:da:5a:cd:64:8b:79:
3d:a7:7b:46:e5:29:3b:ee:8c:6a:59:59:57:c0:2e:e6:73:d3:
4c:d8:d7:69:55:15:f2:3c:fa:4a:8e:62:98:a7:89:81:c0:bf:
40:f8:54:35:26:b5:a8:f8:5f:16:cd:13:0c:07:79:fd:18:a8:
15:5c:51:e3:25:38:8e:25:74:85:ce:b4:05:7a:d5:17:1d:7d:
31:6e:25:5c:87:6e:74:a8:81:16:ce:b7:be:86:16:33:e2:30:
cb:fa:0a:64:98:94:f3:be:e7:85:15:3a:f0:16:e8:36:d5:99:
be:be:c0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:51 2025 by rpki-client