Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/72856782-c425-326d-a806-64f39e1c1e68.roa
File: 72856782-c425-326d-a806-64f39e1c1e68.roa (raw, json)
Hash identifier: QRVWMzOm5FdPKhCk8FRRvGFqSSQPYsRqDGJbTGRm9PA=
Subject key identifier: 3A:EF:C3:A2:69:6F:A2:9C:10:64:F0:81:3C:7B:FF:51:CE:D9:6E:C3
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285846B2F52515F3B89394703D0800
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/72856782-c425-326d-a806-64f39e1c1e68.roa
Signing time: Mon 29 Jul 2024 13:00:38 +0000
ROA not before: Mon 29 Jul 2024 13:00:38 +0000
ROA not after: Sun 27 Oct 2024 13:00:38 +0000
asID: 6079
IP address blocks: 216.24.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b2:f5:25:15:f3:b8:93:94:70:3d:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jul 29 13:00:38 2024 GMT
Not After : Oct 27 13:00:38 2024 GMT
Subject: CN=549734fc-0bd8-4d7d-98f8-504762539719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:10:10:9c:0d:3e:89:66:49:ba:b2:76:bd:
c9:8b:64:db:fd:06:9c:22:55:0c:8e:0d:5e:b9:f9:
ff:a8:31:dd:bf:65:b8:7f:6a:6d:ec:b1:d5:5a:eb:
f8:60:3d:31:1e:b9:1c:13:61:b4:2b:43:14:18:4b:
50:28:b5:1c:7b:51:d4:c0:28:86:30:6b:b7:77:ea:
1a:55:06:b0:22:7c:21:3d:d1:e2:f4:52:9f:1c:d3:
20:49:c0:1b:99:99:f1:e0:ce:1a:59:5f:be:29:b3:
62:e9:00:a7:ee:44:cd:a2:a9:86:ac:c2:be:ee:6c:
0f:35:91:ce:e6:ed:eb:20:d5:ee:58:78:be:7b:0f:
2f:0c:24:c3:a4:73:95:13:a8:64:a9:3d:e1:af:05:
d7:9c:d5:23:2c:3e:cb:e2:f4:13:52:c9:80:36:cf:
d4:53:27:1e:59:56:10:a9:15:85:2f:87:2f:ed:18:
90:c6:d7:31:e8:d4:7f:90:8d:6b:f3:8d:ae:21:fb:
35:5b:a5:6a:d5:d8:69:e0:5e:10:0c:9c:b5:b4:24:
00:00:00:9a:e8:c7:c7:0b:ee:9f:4d:77:18:bd:d3:
3b:91:1d:ea:55:72:7f:c7:1d:48:69:17:38:33:34:
a5:a8:83:64:e4:78:b4:d1:3b:45:68:fe:21:7d:8d:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:C3:A2:69:6F:A2:9C:10:64:F0:81:3C:7B:FF:51:CE:D9:6E:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/72856782-c425-326d-a806-64f39e1c1e68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:2e:b4:fc:5c:e2:63:32:ef:8e:0f:78:86:22:0d:5a:90:8f:
51:68:10:ba:88:03:b2:7c:61:b9:58:e0:3a:64:05:cb:cd:9a:
c6:e4:e9:2a:bd:4b:e3:1a:3d:02:14:79:54:80:87:91:39:70:
9a:68:03:e5:f6:a0:01:5b:ac:2d:19:c4:76:3c:78:c8:5b:01:
b4:8d:f5:76:3d:78:45:ff:53:22:98:e5:fd:a8:8f:a9:8b:dc:
e6:f3:f0:23:9d:23:00:4e:a5:f6:30:e6:d1:68:7d:e2:90:8c:
f7:e9:49:59:18:a8:dd:0a:19:a6:11:78:7a:6c:c5:85:31:13:
0b:02:74:9d:4c:34:33:63:10:cf:e6:fc:97:0e:f9:2e:1a:81:
3b:e7:80:80:5d:78:f5:16:ef:78:d0:84:23:59:0f:5f:5c:a3:
6d:1e:3b:c9:6e:5f:e0:c6:82:6c:3e:9f:c5:1b:d9:7d:8c:1c:
f5:8f:f4:8b:62:7f:85:94:e8:bc:24:47:58:20:23:b4:ca:f0:
c9:ff:21:ae:5a:8c:33:c3:cf:c9:78:ca:db:d2:49:67:aa:61:
fe:a7:12:ae:c7:da:e1:93:61:ee:d2:8d:67:6a:02:a8:4a:17:
73:8b:1f:95:66:81:a1:72:93:81:bf:87:5c:45:43:73:60:9c:
31:04:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:45 2025 by rpki-client