Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b43f426-54c3-370a-8a61-c72b10243986.roa
File: 2b43f426-54c3-370a-8a61-c72b10243986.roa (raw, json)
Hash identifier: 0CoyHuHY8uQNc27oab5N9e5IOqu+olsIahQxvZRxE2A=
Subject key identifier: A0:9E:52:69:8D:F6:AD:A5:E8:69:B1:16:89:09:63:7A:D3:40:4B:FE
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584567AD73BA7D40CC3C286BA7C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b43f426-54c3-370a-8a61-c72b10243986.roa
Signing time: Mon 01 Apr 2024 21:03:49 +0000
ROA not before: Mon 01 Apr 2024 21:03:49 +0000
ROA not after: Sun 30 Jun 2024 21:03:49 +0000
asID: 19344
IP address blocks: 216.10.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:67:ad:73:ba:7d:40:cc:3c:28:6b:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Apr 1 21:03:49 2024 GMT
Not After : Jun 30 21:03:49 2024 GMT
Subject: CN=bca730e2-0ea6-4722-b1b1-afcf371f9231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:f8:30:16:14:45:61:ee:ac:39:e6:6f:44:
9e:72:de:55:aa:3a:3e:88:98:50:2f:56:c2:e9:2a:
b7:de:a7:37:d4:e3:7c:8c:bc:87:d5:5d:ae:c9:fe:
f8:a7:49:5b:03:00:51:ea:e2:99:8d:98:5f:b0:0d:
f9:a2:68:64:e2:38:a0:ef:34:95:9d:1f:12:9d:9f:
07:32:13:18:45:7e:0e:3f:5e:89:c1:1e:ec:12:41:
cb:9e:76:2d:be:80:8b:2c:28:2b:40:6a:76:54:9b:
8b:bb:93:7c:67:ec:0d:45:6a:c1:38:e0:4a:8f:7c:
2b:b7:cd:ac:0d:a3:e3:32:48:f9:a7:72:f9:8c:f7:
1d:e8:5b:90:98:3e:bd:79:ab:fd:41:c8:ff:0a:30:
fb:18:d2:80:a6:df:a8:1e:f1:74:3b:89:8a:93:e6:
f2:86:5d:82:ae:17:a9:66:41:49:22:28:89:ab:79:
5d:b3:e4:3a:0b:dc:db:b9:c7:cf:1c:bd:1d:ad:50:
43:6b:85:14:84:6f:32:13:5c:23:64:6f:01:00:51:
31:ca:31:87:fa:8e:5a:0d:73:f2:65:02:61:1c:a2:
f8:3d:60:36:5e:8a:b3:04:8c:13:1a:75:a0:33:26:
b1:62:e5:6c:04:f6:9c:13:71:ab:58:49:61:b2:4a:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9E:52:69:8D:F6:AD:A5:E8:69:B1:16:89:09:63:7A:D3:40:4B:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b43f426-54c3-370a-8a61-c72b10243986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.10.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
de:48:f1:28:59:6d:23:77:0f:ef:e2:4f:45:1c:33:34:a6:ca:
36:66:6d:66:0e:df:e7:63:d3:bf:20:4a:df:c1:42:60:8b:63:
68:6b:7f:2c:d7:d5:cd:74:37:ed:7f:ac:41:1a:e6:a4:0e:7a:
3f:4e:45:b9:ef:55:03:4f:5b:e5:b1:e7:a4:c5:b8:68:e9:30:
e6:6a:0e:5d:7e:bb:a2:68:4e:af:19:ac:f4:82:71:08:7f:d5:
74:2c:9e:d8:14:a9:7a:92:9c:51:a4:60:c1:cb:07:13:42:2d:
7c:37:90:fc:e9:6c:8c:19:50:56:d0:f3:f0:94:d0:6b:63:50:
54:d5:a7:5a:f8:c5:6d:cd:e2:03:90:d6:a4:15:cc:a9:2e:80:
3f:6a:2c:1d:ab:eb:0c:6c:37:f1:f5:ba:79:d0:eb:be:70:ef:
31:eb:2f:54:c9:17:b5:60:c4:8f:f9:14:f5:19:e0:2d:cd:bc:
24:31:1c:99:22:76:b5:25:6f:f8:2c:5b:05:9b:2f:75:c7:39:
7c:2a:4d:1a:ba:5e:f2:7d:a2:68:bf:cc:79:79:65:02:49:ea:
80:f7:75:44:c0:d1:44:70:8c:10:02:a4:7c:92:27:2f:3d:a8:
b1:3a:27:01:16:0b:89:af:5e:45:0f:b2:a3:5b:c5:3f:60:95:
bd:b0:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:38 2025 by rpki-client