Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c4fb9232-b35d-3f22-a418-037a7bfd1e8d.roa
File: c4fb9232-b35d-3f22-a418-037a7bfd1e8d.roa (raw, json)
Hash identifier: xT9K+HlRys3Ffg8chUQIs6r9ypRtrcC8IrKhJGoREKY=
Subject key identifier: 99:78:73:4D:8D:28:D6:04:58:A8:BF:79:7F:66:7F:8D:32:AC:52:AA
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285847C3448C70C21F703443396180
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c4fb9232-b35d-3f22-a418-037a7bfd1e8d.roa
Signing time: Mon 04 Nov 2024 02:00:36 +0000
ROA not before: Mon 04 Nov 2024 02:00:36 +0000
ROA not after: Sun 02 Feb 2025 02:00:36 +0000
asID: 19437
IP address blocks: 200.229.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c3:44:8c:70:c2:1f:70:34:43:39:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Nov 4 02:00:36 2024 GMT
Not After : Feb 2 02:00:36 2025 GMT
Subject: CN=97637d24-f485-4155-804e-f67fdb8051d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:c1:49:0c:44:27:66:5f:ca:98:a4:3f:df:
f5:55:5f:67:a8:49:4f:af:51:31:9a:4f:5b:39:71:
8c:b9:74:ac:6e:6e:7f:30:e0:57:84:04:82:e5:b1:
9c:0b:a9:25:3c:26:75:06:49:e9:5c:89:ca:12:ee:
1c:c4:e7:ba:7e:11:d0:e9:0a:d9:4e:ca:01:46:5f:
42:58:91:74:0d:57:d7:e0:e5:d0:38:b4:dd:3c:92:
58:fb:71:0d:8d:aa:41:c5:f4:f4:b0:79:f4:5c:ed:
34:20:b0:ad:c0:fd:0d:de:52:6b:79:a7:e6:eb:17:
11:01:66:03:a0:fb:24:d5:35:03:7e:74:35:17:95:
df:14:62:f8:fb:53:fa:6e:e8:c9:a3:0f:39:9e:f9:
c8:4a:a8:fc:77:2c:9e:09:68:eb:b3:9d:6c:24:24:
05:4a:44:b6:d9:09:dc:c7:42:a9:a1:0a:00:d7:65:
82:6b:c3:e3:47:b3:aa:f1:d8:5b:4e:2c:75:b7:32:
59:24:b6:33:0a:d9:b2:b2:87:4a:ec:ae:a4:21:83:
21:38:95:0d:8e:54:c2:26:d0:2f:25:ba:82:ae:5e:
c6:61:80:84:b7:5c:07:00:97:bf:92:6c:e6:6f:92:
b5:46:12:e0:d2:ba:05:53:83:2a:0a:57:75:4e:e0:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:73:4D:8D:28:D6:04:58:A8:BF:79:7F:66:7F:8D:32:AC:52:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c4fb9232-b35d-3f22-a418-037a7bfd1e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:18:c8:e9:0c:dd:99:ff:df:dd:68:5c:34:d8:8e:3d:51:6c:
52:ac:d7:19:72:f7:c7:b9:0c:73:2d:e1:ef:15:6a:f2:4f:d0:
7b:73:97:1d:8e:b2:1f:88:5c:1a:dc:72:e3:6d:8f:6b:4d:8b:
a2:f4:38:7d:7e:e9:b2:1e:09:01:52:bb:d7:8c:b6:b8:cb:a1:
f5:82:dd:d1:2e:ea:ad:94:35:fd:b1:28:4e:c4:c2:f3:86:6a:
c4:f1:c2:ed:f4:ca:5e:ff:28:82:3d:85:4c:f6:49:4b:3e:b5:
02:60:4f:cf:59:d4:b0:ef:1c:c2:fb:16:8d:2d:8a:22:24:66:
e6:b6:ce:20:3f:1d:14:01:a2:de:81:e2:df:b9:35:93:c8:a3:
62:e4:a1:00:3b:b7:f0:dd:14:79:43:8b:f0:54:25:20:a9:7a:
11:86:8a:49:1f:52:0e:f5:ac:7f:44:af:de:4f:c5:4d:41:40:
4f:2b:eb:66:6f:48:73:71:a6:00:8d:1e:93:47:a4:92:08:2c:
1b:ee:7f:50:a9:85:96:2e:43:78:9d:39:d2:ad:82:50:89:51:
ba:ea:61:3f:7f:38:86:86:e4:ac:28:e2:f5:1c:c6:72:6d:88:
e3:66:46:db:ce:98:cc:0e:68:d8:6d:9c:24:21:91:7a:3f:70:
06:a3:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:37 2025 by rpki-client