Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/0c7e4532-07ae-3aac-919a-cbab92226adb.roa
File: 0c7e4532-07ae-3aac-919a-cbab92226adb.roa (raw, json)
Hash identifier: f7fWLRjpgK3Bb1KYTMU5OL7izocKsC59J8VaxiBpMEw=
Subject key identifier: A7:CC:46:86:A2:6D:65:D1:9E:AC:A8:67:57:1D:38:15:12:7C:BC:DC
Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial: 010D0C9F43285846556F056507F9969507815C20
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/0c7e4532-07ae-3aac-919a-cbab92226adb.roa
Signing time: Wed 26 Jun 2024 01:00:24 +0000
ROA not before: Wed 26 Jun 2024 01:00:24 +0000
ROA not after: Tue 24 Sep 2024 01:00:24 +0000
asID: 29854
IP address blocks: 67.212.224.0/20 maxlen: 24
68.169.32.0/20 maxlen: 24
69.36.160.0/19 maxlen: 24
206.130.96.0/19 maxlen: 24
208.131.128.0/19 maxlen: 24
209.236.64.0/20 maxlen: 24
2607:fc98::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:55:6f:05:65:07:f9:96:95:07:81:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Validity
Not Before: Jun 26 01:00:24 2024 GMT
Not After : Sep 24 01:00:24 2024 GMT
Subject: CN=253331b2-3609-43c3-9a07-b71290699412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5d:e4:6f:f8:b8:7c:0c:4b:c5:c9:6c:34:1c:
ad:22:10:0a:f2:0f:2d:ce:13:04:81:bc:9e:96:96:
a5:3d:0d:4a:8b:ce:d8:63:7f:3d:72:f2:ce:30:e5:
8b:07:a1:67:e4:84:a7:d2:cc:89:24:a4:80:54:7b:
3b:c9:de:53:cf:91:fe:ea:e3:8e:db:87:d2:9c:56:
62:98:32:c2:04:41:e0:a4:31:65:9c:f9:c0:d5:4c:
31:89:0b:15:86:e1:11:65:a9:fb:c8:c5:1c:b3:8f:
a3:b1:1d:31:65:88:45:2d:7d:1a:eb:ce:20:3b:b9:
8a:27:50:dc:db:3d:2b:2b:ae:a3:f3:cd:75:36:9c:
90:64:fe:18:61:59:f7:c6:75:fe:87:be:89:38:49:
83:47:1f:e3:18:f3:35:32:8c:58:92:3b:11:1f:df:
de:a4:b8:49:88:46:44:69:a2:3e:10:ec:20:dd:65:
22:c2:2d:48:e0:3b:24:ee:36:c4:c1:8f:98:e3:91:
df:8a:92:7c:37:ef:fc:44:54:a0:96:b1:16:c0:9d:
39:1b:9f:9f:ba:50:db:66:24:25:c8:a0:7a:19:b1:
2b:be:cb:27:d0:ad:2f:3a:77:b4:19:d6:e5:8f:d3:
fd:a2:e8:5b:54:d2:24:9e:e1:43:3f:d0:54:7e:d2:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CC:46:86:A2:6D:65:D1:9E:AC:A8:67:57:1D:38:15:12:7C:BC:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/0c7e4532-07ae-3aac-919a-cbab92226adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
X509v3 Authority Key Identifier:
keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
sbgp-ipAddrBlock: critical
IPv4:
67.212.224.0/20
68.169.32.0/20
69.36.160.0/19
206.130.96.0/19
208.131.128.0/19
209.236.64.0/20
IPv6:
2607:fc98::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:a5:9d:18:d5:1f:c1:75:78:28:87:12:02:fa:19:5e:90:1c:
9e:b1:d0:54:57:b0:23:f5:87:66:da:df:f7:63:de:03:45:78:
a7:0c:3a:61:7e:6b:c7:85:0f:e6:f6:4b:76:ab:79:71:17:b0:
be:1d:96:84:22:8b:99:9d:a6:fb:8f:55:f7:3b:ee:3c:b6:c1:
eb:f8:b1:38:4c:87:32:75:55:41:de:c4:54:2e:55:e6:9f:89:
a9:ce:ac:71:79:ce:c9:60:13:75:4d:fe:98:a4:cf:1d:af:2c:
34:5b:e8:9b:4d:22:88:54:55:2a:14:8d:7d:88:64:95:2d:8a:
44:90:5d:38:c4:e0:28:a4:c6:c2:f3:64:5f:cc:00:8e:8e:76:
7a:a3:fd:a0:91:b0:c6:40:72:ad:b0:a9:da:1a:59:12:1f:16:
ae:20:ed:b1:74:e4:b8:15:cd:78:6c:08:3a:d5:21:59:06:2b:
00:f4:f8:a2:15:09:85:5a:de:7c:41:0c:e0:8b:9e:c6:ed:9d:
5d:df:40:dd:1b:99:3f:b8:ad:3d:3c:fa:5e:b4:40:78:e1:ca:
f0:8e:e8:0a:3d:f7:8d:34:a5:13:e2:14:60:f5:8e:01:24:32:
64:9e:34:0e:1d:8b:05:b4:43:2f:e9:1f:46:95:6d:c5:86:1a:
d5:72:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:27:45 2025 by rpki-client