Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/da7f9201-c72b-3a64-b358-1f8014effa9f.roa
File: da7f9201-c72b-3a64-b358-1f8014effa9f.roa (raw, json)
Hash identifier: isu042nq+XbKHHQ04mmGTyKSrdwnoysXkqTrjBcpDZc=
Subject key identifier: 55:C7:2A:0F:1B:D8:A5:90:83:B3:D0:12:FD:4E:EA:92:87:D3:4F:DE
Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial: 010D0C9F4328584692DA152FED21E403A1B0FEA0
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/da7f9201-c72b-3a64-b358-1f8014effa9f.roa
Signing time: Thu 18 Jul 2024 01:00:24 +0000
ROA not before: Thu 18 Jul 2024 01:00:24 +0000
ROA not after: Wed 16 Oct 2024 01:00:24 +0000
asID: 13213
IP address blocks: 206.130.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:92:da:15:2f:ed:21:e4:03:a1:b0:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Validity
Not Before: Jul 18 01:00:24 2024 GMT
Not After : Oct 16 01:00:24 2024 GMT
Subject: CN=87f826b8-1d6c-40ba-994b-2d10971e663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:e0:b6:4d:ed:66:f7:58:95:1d:0f:b4:cd:
dc:a9:9f:71:0f:09:37:40:63:c0:49:5b:a7:ce:6c:
93:3f:42:74:6c:d6:aa:e7:b8:79:d6:13:81:54:9d:
b9:b3:d3:86:b5:76:51:4b:17:be:5b:38:30:8f:30:
80:7e:ce:ab:07:97:de:98:d7:a8:b4:d1:85:ba:62:
08:56:38:fb:ec:84:54:33:33:91:82:b9:78:b0:1b:
c7:bd:0c:f3:5c:7b:f8:66:f5:8b:ba:f5:a6:d1:8d:
88:1e:8e:6d:0a:04:3c:10:1b:85:5e:06:99:7a:b6:
a6:f1:20:e1:71:fb:b7:f7:b6:9f:fc:27:fd:28:d2:
1d:d6:d1:2d:1c:f8:8d:0d:19:3c:8f:e5:d4:a0:c2:
27:40:e0:52:02:04:90:9d:bf:da:4a:2e:2f:c7:fb:
24:2f:2b:72:1c:8b:53:5d:af:92:33:a5:c3:9b:b1:
85:b7:5a:35:b1:b7:f4:26:c5:fe:38:b0:a9:ec:fa:
75:68:32:d1:46:2a:5a:af:0c:2b:7f:a6:f1:88:79:
b2:27:ed:fe:c4:0c:6c:92:7d:d3:62:2c:6f:60:36:
6d:95:bc:22:3e:b6:4a:37:b0:e8:a8:ec:cd:16:83:
98:cd:2e:d3:a4:01:0d:9c:bd:4b:8a:ab:86:5d:c4:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C7:2A:0F:1B:D8:A5:90:83:B3:D0:12:FD:4E:EA:92:87:D3:4F:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/da7f9201-c72b-3a64-b358-1f8014effa9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
X509v3 Authority Key Identifier:
keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
sbgp-ipAddrBlock: critical
IPv4:
206.130.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:97:24:73:4c:27:92:2d:10:a1:01:bf:b0:ac:b5:43:c8:57:
65:49:c4:56:66:fb:60:9a:3b:de:cd:ec:e2:5c:a9:41:9d:9e:
d4:93:df:84:1c:ac:df:77:9d:72:2f:fd:87:42:28:8f:1d:a8:
35:49:90:d1:e9:d8:50:a6:11:c4:15:3d:21:73:c1:58:85:83:
bd:cf:8a:5a:dd:09:de:1f:c6:d0:da:0d:03:7a:45:10:5d:b0:
61:dc:16:89:0e:ee:c1:54:e7:b1:ad:3a:a1:01:ed:f5:28:35:
61:ce:ec:2c:28:29:f0:b0:a3:a0:27:c3:ab:31:e5:66:b0:f9:
f7:9b:30:00:48:bf:00:13:b4:6f:19:4c:0e:77:52:6a:75:77:
b3:d7:7f:14:e9:76:f0:03:ff:e9:90:b6:3e:ba:79:db:80:61:
37:2c:ca:85:8a:8e:b9:56:4c:41:0f:b2:a9:b4:7a:c9:e5:81:
58:37:3f:96:3e:27:70:45:8a:65:14:08:50:be:50:47:34:11:
fd:ff:18:6b:11:96:c1:d1:85:c0:89:6e:ed:02:e3:3a:d0:52:
fa:f0:eb:31:ea:18:89:99:4b:9b:c6:e8:d6:4a:70:e6:bc:d7:
f4:70:8d:ba:eb:e2:98:60:21:fd:aa:ed:d1:62:12:81:6b:47:
02:13:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:43:01 2025 by rpki-client