Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6afba3b5-6729-3556-ad41-6cac35dca0cc.roa
File: 6afba3b5-6729-3556-ad41-6cac35dca0cc.roa (raw, json)
Hash identifier: GsEMY6Mh97YY5WuY+r0KK4sAlXWT6QtCHZegspJpKvs=
Subject key identifier: 4A:84:30:C9:1F:CB:E7:FB:15:DE:97:09:33:3E:B1:48:F4:B2:8C:A0
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285842CEA0858B0BD3BA374C5F5800
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6afba3b5-6729-3556-ad41-6cac35dca0cc.roa
Signing time: Mon 07 Aug 2023 15:45:13 +0000
ROA not before: Mon 07 Aug 2023 15:45:13 +0000
ROA not after: Sun 05 Nov 2023 16:45:13 +0000
asID: 834
IP address blocks: 217.20.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ce:a0:85:8b:0b:d3:ba:37:4c:5f:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Aug 7 15:45:13 2023 GMT
Not After : Nov 5 16:45:13 2023 GMT
Subject: CN=26e4dca1-4350-4d2b-83df-0a0ba3858853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:c6:00:5e:26:45:47:05:d3:f6:ae:0d:60:
70:81:87:52:d7:ce:88:51:a7:05:a6:69:75:93:b9:
fc:a9:f6:17:64:f9:29:7d:6d:8b:09:40:7e:6d:8a:
53:ed:c0:11:15:15:2c:18:27:35:86:42:30:79:60:
58:d7:cb:08:84:c8:79:df:98:44:53:62:84:36:88:
6f:58:2e:3f:4e:70:79:2d:f5:d8:ae:27:c1:5e:05:
50:5b:00:2f:cc:76:ed:6a:ab:9c:38:30:5b:08:2a:
82:4b:7a:6a:aa:d1:8b:ff:ee:64:e9:e8:c2:47:5f:
d4:a1:55:91:c0:e4:6e:10:67:5d:09:f5:4a:60:c0:
e0:00:a6:fd:06:51:ed:20:1f:04:54:62:9e:24:9f:
d8:c5:73:78:be:30:52:00:cd:9b:9d:7d:6e:36:2f:
67:10:be:4e:dc:5a:64:96:2d:64:75:cd:eb:88:17:
52:09:80:44:02:17:35:03:99:22:98:ee:48:95:bd:
2e:d1:58:fd:d0:5c:4b:7a:86:5b:b1:c1:cf:bf:4b:
ba:05:8a:84:41:54:ba:1a:7e:91:76:d6:a7:e3:99:
f0:30:92:ad:89:50:a9:e1:d3:9b:5e:fd:24:67:65:
d4:6b:ba:bc:17:78:65:63:71:c9:d2:40:50:53:52:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:30:C9:1F:CB:E7:FB:15:DE:97:09:33:3E:B1:48:F4:B2:8C:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6afba3b5-6729-3556-ad41-6cac35dca0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
217.20.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:e3:de:6a:34:5e:b6:6b:df:a9:f1:21:4d:0d:81:94:69:af:
ea:48:7d:83:ec:ba:62:ed:27:58:66:78:b3:55:1b:f8:77:eb:
aa:ed:28:f2:22:ff:04:f2:64:1b:e0:e2:08:1b:85:40:f9:c5:
57:49:de:cc:6a:f6:0c:25:3b:f8:b5:16:be:73:99:52:af:48:
e4:79:b6:e1:b5:cc:8a:f5:c5:a2:4d:9e:54:96:f4:03:c0:4b:
b6:15:26:c5:d2:ab:91:d8:65:87:79:0e:5a:d3:ca:e2:48:62:
8e:29:30:0e:9d:e2:fe:f0:75:7a:ec:1f:0c:f1:55:d8:f7:6d:
fa:74:79:de:e2:cf:5a:60:0a:6e:72:ba:e1:e7:8e:de:0f:c6:
ac:30:d3:b1:f7:f3:0f:77:b4:e6:74:db:a5:4c:7b:c7:5a:8c:
90:2a:7a:3b:85:f2:2f:65:f6:b0:a2:3c:d0:23:9c:97:3b:c6:
27:a8:dd:61:ab:0f:0c:ad:a4:96:57:f0:0a:c4:77:33:7b:cf:
e0:22:bd:3f:13:6c:08:a0:1d:75:ec:1a:1c:5b:e8:1f:88:10:
b5:28:15:bb:e1:5c:fd:34:f2:ec:ea:10:20:ab:d9:93:fb:f8:
20:99:50:6f:3d:ec:77:21:24:b8:35:0c:c8:a2:9c:95:5e:03:
3e:f8:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:01:15 2025 by rpki-client