Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f3032585-e178-30fa-8341-cc7e6ea9fc35.roa
File: f3032585-e178-30fa-8341-cc7e6ea9fc35.roa (raw, json)
Hash identifier: maQYUAS3CGi6E1Oxzm2/vzyo6bMC4Vl79fNBtgvk8m8=
Subject key identifier: 27:A4:4C:05:86:02:EA:64:05:BB:1F:91:0B:2D:CF:94:EB:01:90:BE
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285847DF2F53C1A98A930803D05700
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f3032585-e178-30fa-8341-cc7e6ea9fc35.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 47890
IP address blocks: 192.190.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:53:c1:a9:8a:93:08:03:d0:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=170dcb13-59e0-4354-8cd5-d2e8ae7370ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:93:38:6c:93:6d:c8:14:03:2f:29:38:44:
ab:77:70:45:24:50:96:4f:63:f9:e3:41:bc:e7:b9:
a0:68:2a:cd:2c:ca:5a:b0:02:5c:cd:d0:14:18:19:
bb:d5:23:aa:c5:8a:20:7c:0e:c3:e3:1d:b0:c0:a9:
2a:b5:cb:ef:0f:06:6a:75:c8:d2:0a:03:bc:bd:37:
1e:d3:18:21:1e:f0:cc:03:fb:91:d7:15:8e:d3:2c:
20:70:51:e7:72:a0:6b:58:54:57:c9:30:b8:b2:bd:
87:c1:d1:58:6d:e1:63:92:30:6c:a3:bd:54:9e:f2:
5d:a7:b4:54:0b:9c:ed:3d:23:d9:cb:5f:d5:d2:95:
22:2c:07:a7:f2:1a:4e:3c:81:4e:88:85:a0:a4:f3:
ce:74:55:76:26:65:b0:3a:cb:9d:ed:6c:32:82:e9:
a2:c7:fe:24:dd:c9:52:a4:e8:d3:da:74:a3:0b:e1:
fe:77:2c:8e:8e:92:6f:ca:82:52:91:75:c9:48:3f:
2e:4e:78:e9:28:a6:27:69:45:b2:4d:68:19:f1:ea:
d7:0c:db:ee:c5:82:c3:8b:7d:fe:cd:a9:7c:7e:b2:
89:d0:ae:13:5d:d6:50:7a:64:c0:8c:bd:a8:92:54:
f8:c3:44:84:d9:5c:7f:dc:2a:3d:a7:e9:6d:5b:04:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A4:4C:05:86:02:EA:64:05:BB:1F:91:0B:2D:CF:94:EB:01:90:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f3032585-e178-30fa-8341-cc7e6ea9fc35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.190.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:f3:c8:2d:12:0b:48:90:cf:bb:68:ec:23:24:19:69:6e:9a:
76:c6:3a:1a:6e:7e:95:a5:96:6b:2a:a4:e8:37:95:a6:87:1f:
1f:dd:5e:1b:77:4f:8c:7f:91:bc:c7:16:d7:f7:87:7d:b9:52:
24:6f:10:0e:56:f6:2c:b0:bf:42:6d:3d:c1:d8:af:41:c9:2a:
b1:b1:7c:dd:32:67:69:a7:9b:d8:9b:5b:1e:01:15:88:17:a0:
51:23:28:83:81:ef:96:a9:fb:6b:67:c4:1d:62:2b:79:ff:59:
20:65:60:3f:3e:3e:91:08:7d:aa:a7:a4:23:73:49:83:6e:b0:
36:59:12:f6:db:a6:b7:ff:04:e2:32:76:3c:9f:22:00:f2:c9:
3e:71:05:2e:c0:d4:91:47:93:9d:14:a0:31:fb:71:33:6d:e5:
7c:1e:02:2a:86:e1:e1:40:75:90:d7:21:a5:62:34:51:4d:3d:
fa:d2:92:b3:47:45:ee:32:d8:5c:f0:a8:2e:0a:9f:1b:44:ea:
62:a6:35:92:19:03:57:83:24:b8:fc:ce:42:8a:b2:0d:8a:23:
18:bc:5d:78:f1:d2:e9:e7:54:a3:3b:6a:71:f7:92:cc:1c:cc:
58:87:62:aa:fa:5e:4a:df:83:fd:64:f6:84:65:06:04:d6:e9:
a6:67:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:44 2025 by rpki-client