Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ffaf4f72-3511-3d94-9af1-23c9d195c6d5.roa
File: ffaf4f72-3511-3d94-9af1-23c9d195c6d5.roa (raw, json)
Hash identifier: Sb4ZfnqraSpUZYYqp8d/P8IVoWx37IC0tIF+mGaqJbw=
Subject key identifier: CF:4D:52:DC:4F:39:7F:CE:BB:7E:12:D0:B1:71:AE:A0:4B:12:7E:CB
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285841E471A454294A057089A656C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ffaf4f72-3511-3d94-9af1-23c9d195c6d5.roa
Signing time: Mon 15 May 2023 18:31:13 +0000
ROA not before: Mon 15 May 2023 18:31:13 +0000
ROA not after: Wed 26 Jul 2023 07:20:26 +0000
asID: 207633
IP address blocks: 200.229.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:71:a4:54:29:4a:05:70:89:a6:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: May 15 18:31:13 2023 GMT
Not After : Jul 26 07:20:26 2023 GMT
Subject: CN=549eb8a8-fc0a-448c-8a19-3fd990282a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:0e:8c:fb:f4:b9:d7:0e:64:9a:f0:f2:22:
65:17:4f:51:63:d0:99:3d:60:ca:b2:ea:36:c8:bd:
f2:74:cc:34:47:ff:23:1f:12:f0:d7:08:11:51:f9:
92:02:6f:0d:a3:33:31:53:e7:77:94:49:39:08:44:
fc:15:d6:57:b7:fc:1a:46:fa:69:a7:0e:50:54:9e:
08:12:62:e7:79:d1:f3:66:dc:7d:9a:9b:4d:0f:d6:
2c:59:32:07:14:d7:3e:51:15:ed:f4:71:64:24:76:
ef:25:2f:3e:fc:1d:0d:00:f5:5c:db:8b:ed:89:ee:
74:ac:c1:e8:cc:20:a2:0b:ab:3a:c4:22:c7:50:c1:
e5:e8:ad:b0:89:8d:4e:0a:d2:f8:16:45:1b:ca:41:
b0:1d:92:15:a5:28:d0:bb:18:51:90:cc:dd:b0:40:
8a:17:dc:6e:88:f5:f1:3e:25:49:45:5a:ad:4a:94:
7c:8d:ae:89:0c:b3:ba:eb:08:77:4f:09:13:65:44:
2d:11:a6:0c:8b:6f:12:0a:f0:f4:da:a2:31:07:d0:
51:88:eb:25:f3:40:6b:81:92:db:4e:99:aa:27:ea:
84:5e:2a:91:e9:39:ab:39:d5:0c:cf:62:a8:9b:c4:
a8:5e:77:00:1b:9a:d0:70:54:63:02:94:7e:67:d4:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4D:52:DC:4F:39:7F:CE:BB:7E:12:D0:B1:71:AE:A0:4B:12:7E:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ffaf4f72-3511-3d94-9af1-23c9d195c6d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:86:8e:1e:23:6a:0a:6f:c9:0c:ba:43:44:eb:10:1c:f5:14:
c4:01:3c:0d:01:27:f4:a7:56:a8:c5:88:7d:c2:1b:05:91:86:
2e:cc:ea:2d:c6:45:c7:5d:ff:a9:d4:09:c0:ef:eb:8b:94:4f:
f6:74:14:f1:4d:2e:9b:24:31:2f:ed:c6:e2:c1:06:3a:bc:59:
87:72:86:88:36:d8:85:b0:28:d0:98:ff:f2:e7:c6:0d:12:fd:
68:7f:63:74:7b:5d:73:ea:89:1b:5b:86:ff:71:5c:b0:27:78:
0c:9d:e7:3e:4d:94:bb:be:48:af:d7:4a:95:aa:8b:cb:6e:da:
0a:77:1c:4b:8b:9e:75:2b:02:fd:be:c4:24:ab:09:6d:f5:1c:
dd:4a:8e:64:c8:0a:77:e6:ad:74:f8:6a:4a:2b:2f:92:30:e5:
a7:04:f5:c7:14:2d:ab:5a:96:b5:1c:6e:df:f2:a9:c0:ec:59:
0a:d1:a7:cd:e0:25:01:e3:39:58:b0:31:82:9d:f2:b3:45:31:
dd:4e:0b:09:4f:63:6c:fc:c2:0c:17:d2:af:7e:d1:f0:ea:e0:
07:f9:dc:5a:a2:95:04:ae:54:55:d8:7e:89:b3:65:b8:bc:06:
89:b2:10:bb:34:d3:73:bb:ef:2d:da:0e:1f:cf:64:cc:65:95:
0a:21:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:23:53 2025 by rpki-client