Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/0169b9ab-aae9-358f-a34f-b409da14a76c.roa
File: 0169b9ab-aae9-358f-a34f-b409da14a76c.roa (raw, json)
Hash identifier: 2areQLFdUWUeTd92okHmfwaBTO65bsIxfnlqNpHVpY4=
Subject key identifier: D1:34:47:BC:79:6D:49:E1:EA:C0:01:40:38:1B:9E:58:6C:8D:7F:94
Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial: 010D0C9F4328584871C0681FB597F59AB0983880
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/0169b9ab-aae9-358f-a34f-b409da14a76c.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 207388
IP address blocks: 192.101.66.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:68:1f:b5:97:f5:9a:b0:98:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=03e0f578-ba6d-4bd4-9e7f-bc7fc88ee9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:65:5b:47:af:a9:1b:4a:7d:14:ba:ba:3c:
c9:6a:b0:a7:4c:63:98:69:8f:cb:80:a8:9a:4e:6d:
1e:2a:d5:f3:0b:18:3b:64:7e:1c:25:8a:f0:ac:e3:
1a:47:d3:62:8d:83:38:20:6b:be:7b:27:f8:68:64:
c8:5d:5c:13:ec:34:07:2c:46:bb:74:c5:a1:13:2a:
17:6c:a6:ed:7d:c1:7b:e7:05:34:d9:c4:b6:60:8e:
79:94:11:e5:c8:a9:34:fc:90:6d:fd:33:2b:df:76:
3e:00:98:75:b4:06:25:89:59:b0:75:3c:cd:7a:ea:
2f:09:2d:b2:01:42:77:4b:2d:7c:61:1d:48:98:73:
f1:2b:39:79:28:d8:b8:7e:64:cd:3b:f6:8b:3d:93:
5c:27:af:8c:12:ba:36:b9:24:56:f5:b3:74:4e:ae:
05:f9:be:88:12:fe:a4:89:5f:82:9e:25:b6:68:dd:
c2:f6:53:da:b0:eb:5e:2a:14:92:ce:cb:a3:72:dc:
2b:27:46:b5:b3:8e:aa:bc:c4:f9:5e:af:e6:ef:3c:
dd:ff:15:7b:d8:15:55:74:e8:b6:34:65:fe:76:b8:
14:40:ce:11:48:22:04:d6:3f:81:55:a1:df:6f:de:
22:07:b8:b2:8c:78:53:6d:9c:b8:60:d6:a4:2d:0d:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:34:47:BC:79:6D:49:E1:EA:C0:01:40:38:1B:9E:58:6C:8D:7F:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/0169b9ab-aae9-358f-a34f-b409da14a76c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
X509v3 Authority Key Identifier:
keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:a3:ca:a1:95:28:19:ab:85:84:6b:8f:1a:da:b9:2b:32:05:
09:05:1f:d7:1c:08:38:09:fe:5d:bd:a9:e4:dc:3e:00:04:41:
84:41:6a:52:6b:46:01:7e:f9:9a:d1:c0:07:92:c9:50:84:59:
b9:47:bf:83:9f:3c:54:07:a7:f3:10:6b:f7:39:b2:18:21:9c:
c2:82:54:cd:b9:ea:db:f1:ee:be:7f:32:68:aa:29:77:63:dc:
c1:c4:40:6b:4d:10:f4:23:f0:11:81:ec:07:ec:58:73:f9:d3:
d6:e0:12:4a:8e:1e:f9:37:09:8b:0e:f7:78:a6:84:66:8b:40:
9f:d9:25:d0:23:f0:0b:47:cd:ed:94:14:11:26:85:21:b9:fd:
ee:ef:22:30:fc:09:cb:87:aa:c7:4f:c1:a7:70:83:ba:eb:1e:
cb:ed:85:4f:c9:4c:63:24:0f:1e:27:d4:1c:82:26:f7:1b:b7:
b9:5c:9e:a0:4c:f4:7a:20:e9:fa:c0:4e:7a:68:29:f7:54:60:
45:7e:6a:77:04:2c:9c:70:4a:e8:cc:1a:82:80:b9:63:96:31:
12:53:be:9d:29:c7:c4:34:c7:7a:dc:a3:c9:f8:f0:28:28:52:
2f:5e:84:5d:c4:2c:03:b5:98:ec:de:8e:37:5f:5f:85:e0:25:
0f:65:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:40:59 2025 by rpki-client