Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b8d6925-5618-3c24-9798-59c50ca8a66d.roa
File: 2b8d6925-5618-3c24-9798-59c50ca8a66d.roa (raw, json)
Hash identifier: RKray1lsP2b9R/t5LM45RAMcGULiIc3pjdgnZX8tGmk=
Subject key identifier: 22:0A:7E:EE:FC:C8:AB:56:F5:F3:4E:ED:FD:D5:64:5E:F4:C8:3A:3A
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858460486081623810F5443674A00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b8d6925-5618-3c24-9798-59c50ca8a66d.roa
Signing time: Tue 28 May 2024 01:26:18 +0000
ROA not before: Tue 28 May 2024 01:26:18 +0000
ROA not after: Mon 26 Aug 2024 01:26:18 +0000
asID: 30633
IP address blocks: 173.211.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:04:86:08:16:23:81:0f:54:43:67:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: May 28 01:26:18 2024 GMT
Not After : Aug 26 01:26:18 2024 GMT
Subject: CN=466c94c8-0d7c-4b46-a05f-dc6ff28eebf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:89:e7:42:05:43:b1:86:f2:38:78:17:71:
b6:ad:18:e5:c6:45:74:62:0e:e6:f5:f5:57:38:46:
12:05:b9:4e:9d:ab:24:f1:f5:af:ce:59:49:5d:29:
bc:1c:cb:61:9e:d0:29:2a:2b:19:98:ba:36:9c:e9:
4e:e5:e2:24:7f:2f:6f:37:be:89:9d:93:be:bf:29:
6c:a5:32:ff:6a:9b:00:1e:bf:cb:99:1b:ce:fb:bb:
52:5f:41:6b:7a:df:a9:e4:12:be:db:6d:93:f8:b3:
1e:80:2c:d5:92:2f:d9:48:7a:38:ec:08:0c:5f:5e:
09:72:74:ca:04:6c:0b:e1:35:1e:b8:e2:5c:4a:61:
72:6b:66:da:27:22:38:64:67:05:6c:c0:2b:47:4a:
8a:c5:a5:e7:30:78:4c:fa:8d:cb:0b:47:2a:d9:cf:
c4:20:ea:1a:19:4c:c5:b6:d8:96:d0:c2:18:32:d4:
82:86:a1:7c:ce:79:cf:35:0e:ba:73:67:ae:5c:bd:
c9:b2:ba:a3:09:b1:2d:7f:4e:1a:71:b4:8b:50:97:
ec:18:0a:80:43:fb:d9:84:60:66:e1:b7:dd:08:e0:
df:cc:98:27:1c:f4:b8:32:ad:b7:48:9d:2a:2c:7b:
dc:a9:25:8c:a4:f7:d2:a4:e5:c7:54:ec:6e:77:aa:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:7E:EE:FC:C8:AB:56:F5:F3:4E:ED:FD:D5:64:5E:F4:C8:3A:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b8d6925-5618-3c24-9798-59c50ca8a66d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:3e:fd:c0:2a:20:72:b4:9f:9f:3f:1a:cb:aa:20:50:12:ac:
50:e0:96:29:04:55:d0:b8:68:f7:0a:29:d7:29:cf:84:4e:2b:
e9:df:14:34:e8:89:3c:a0:aa:23:23:06:06:2a:49:94:72:87:
4d:c4:2d:fb:22:b6:3e:52:40:95:4b:40:6a:3b:09:7f:d5:71:
9b:cc:68:d7:a8:d6:6f:14:dd:13:3d:d2:db:0f:67:70:3e:67:
3f:8f:0f:64:0d:75:e0:70:93:b9:3d:b4:6e:bc:82:24:84:cb:
59:7a:18:ad:7c:c9:01:ea:40:81:b9:21:79:47:03:de:76:45:
3f:d2:2c:89:6e:c2:2e:dc:bb:02:88:3b:39:fc:7a:73:10:b9:
54:6e:d5:58:e4:43:01:16:9a:b7:75:f2:8d:92:3b:d5:d1:96:
9b:6b:21:ea:bd:6c:db:10:a0:ef:ef:22:11:0b:22:aa:f3:57:
1c:39:28:e6:56:0e:aa:a4:39:46:cf:df:65:7e:7b:ed:d5:71:
58:75:af:c5:33:1d:8f:6c:42:eb:f5:b8:8e:aa:ed:05:cc:80:
22:9b:b9:12:85:9d:c7:93:6a:a8:4b:62:a7:e8:54:ec:3c:a2:
c7:bc:7a:9e:d1:d9:11:3a:b1:34:9b:5f:a5:24:73:f9:96:89:
1b:01:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:22 2025 by rpki-client