Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ff485ce6-dc9a-389a-a760-a40fe72d17b6.roa
File: ff485ce6-dc9a-389a-a760-a40fe72d17b6.roa (raw, json)
Hash identifier: Cy2Rmtu2brBsnDzbHnOr2CVXHN11rmjCSMRWCLxmk1k=
Subject key identifier: 7D:87:33:3A:FC:A5:1F:0D:68:8A:3A:B0:C7:30:38:E7:93:FB:1C:16
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285847AA0689577EF1203129CFFF80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ff485ce6-dc9a-389a-a760-a40fe72d17b6.roa
Signing time: Sat 26 Oct 2024 01:00:31 +0000
ROA not before: Sat 26 Oct 2024 01:00:31 +0000
ROA not after: Fri 24 Jan 2025 02:00:31 +0000
asID: 53356
IP address blocks: 216.24.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:aa:06:89:57:7e:f1:20:31:29:cf:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Oct 26 01:00:31 2024 GMT
Not After : Jan 24 02:00:31 2025 GMT
Subject: CN=676f31fd-879c-4568-a15e-2f31328b030c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:85:9e:37:e7:b0:c6:4b:53:99:a4:e1:ce:
88:f2:b6:96:9e:6d:e5:f0:9c:be:55:b7:ce:b3:ce:
d7:34:37:d2:e8:37:3c:bb:40:46:5e:3d:ca:b0:be:
6a:b8:22:64:32:a9:9a:d7:47:20:c4:85:7a:85:e7:
da:f4:34:f2:58:18:18:ad:c4:81:87:27:c9:e3:19:
2b:16:7c:9f:68:d6:66:55:7f:6e:fe:77:78:d3:d5:
46:c8:b9:27:be:a9:d4:4e:c0:7a:31:a2:85:fa:59:
9d:8d:9d:8a:73:36:3d:0d:03:e7:1c:7b:0e:0a:1f:
1f:3b:d2:72:0c:52:2e:a5:c7:19:ce:a1:d4:eb:73:
b0:8a:18:6a:d5:4c:e0:c0:f1:1b:88:d6:32:bb:63:
42:94:ac:82:9a:c8:69:34:5a:51:c5:d1:88:ed:7a:
8a:40:53:08:80:3a:94:0b:08:5e:ca:63:e7:9d:9a:
24:3f:2f:e7:62:63:0b:f5:20:ac:f8:69:eb:43:52:
81:a5:c5:ba:5d:97:77:c3:d7:d0:75:2e:98:f4:e4:
25:03:97:50:0d:da:94:06:1f:c1:0e:aa:8f:21:98:
3e:f0:d3:ea:c2:25:57:ea:5f:12:4f:0c:63:7d:ed:
c4:96:6b:46:94:da:1e:a5:a1:b6:53:2e:0a:e3:c9:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:87:33:3A:FC:A5:1F:0D:68:8A:3A:B0:C7:30:38:E7:93:FB:1C:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ff485ce6-dc9a-389a-a760-a40fe72d17b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:2f:f6:ed:51:c5:35:41:07:46:e1:9f:6e:a6:d3:c1:77:e3:
9a:24:08:53:dd:58:08:26:ab:02:a9:04:fc:34:69:4b:b9:32:
9c:90:da:ee:ce:7c:7b:d3:1b:c5:2b:81:9f:18:ed:b4:68:0a:
4d:33:e9:56:9f:0c:10:3f:8d:aa:84:03:df:eb:d2:60:43:78:
94:bc:21:9e:e4:fc:dd:67:e0:f4:7d:6b:d7:89:1c:7a:24:38:
ba:ba:74:53:4b:8d:3a:eb:8c:c0:e0:8c:ee:7d:07:1f:54:39:
3b:98:4f:2d:19:df:fa:6b:74:e0:ce:a4:1c:bc:9e:7e:49:35:
32:d0:7f:0e:45:f7:eb:9a:73:7b:1b:2f:ad:6d:0e:28:48:74:
3f:4d:a8:ae:c8:a5:a8:ca:99:42:e3:38:a6:5a:5e:02:60:ba:
6d:7e:de:ee:b5:a1:56:49:06:c6:83:fd:03:84:f0:b0:b4:43:
01:4b:60:70:8d:1a:f0:4c:8c:1c:c5:96:31:18:24:d8:a6:f9:
d5:e0:81:95:18:23:4f:7e:39:f4:81:ec:7f:d8:26:63:6d:74:
25:fb:f6:56:09:33:90:38:3e:1e:08:65:2c:58:b5:0e:f9:65:
2e:d3:4b:c3:54:8b:88:cd:20:b5:d1:08:e1:da:42:a3:c9:70:
3e:5c:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:53 2025 by rpki-client