Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/374f01fe-3c92-3782-a2e8-45bde7e7e7dc.roa
File: 374f01fe-3c92-3782-a2e8-45bde7e7e7dc.roa (raw, json)
Hash identifier: MMXPWRRn50FJvsXR3gkZs7rOK9+CpMtRt2DnQybieMg=
Subject key identifier: 54:D0:0B:D1:8C:1C:63:BA:53:18:CB:E0:95:EA:94:D7:3B:DE:EF:1C
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285843849EEC836F9B4824166D30E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/374f01fe-3c92-3782-a2e8-45bde7e7e7dc.roa
Signing time: Wed 11 Oct 2023 20:19:07 +0000
ROA not before: Wed 11 Oct 2023 20:19:07 +0000
ROA not after: Tue 09 Jan 2024 21:19:07 +0000
asID: 852
IP address blocks: 216.74.82.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:84:9e:ec:83:6f:9b:48:24:16:6d:30:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Oct 11 20:19:07 2023 GMT
Not After : Jan 9 21:19:07 2024 GMT
Subject: CN=5d274daa-6da2-41a9-8fa9-322d41065d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:70:b4:d8:b8:ea:cc:ae:a0:03:b8:8a:7a:dc:
a4:2c:52:8a:8a:22:56:41:ee:6b:b8:8a:41:79:5c:
c5:29:50:73:c6:1b:b3:51:33:e0:5a:3b:ae:6e:5c:
74:b0:78:1f:20:f5:18:00:6b:c6:0c:b3:1a:e0:9c:
b2:70:bb:9a:1b:d1:f0:2f:6c:c6:f0:d2:55:49:74:
b1:8b:a2:d2:44:16:85:1e:ed:f6:f1:3a:2e:b0:f1:
f0:38:b1:64:3e:2c:96:2b:d0:c6:b2:6a:d1:cb:b7:
31:fd:78:46:8e:10:68:5b:b6:d1:be:dc:ed:0a:a0:
69:99:ea:a4:13:83:1a:f6:c7:29:32:b7:14:7e:c1:
71:33:b7:80:ba:40:40:23:0e:52:7c:9b:a1:57:04:
e3:61:ca:cf:f0:c8:e8:d8:e8:17:94:22:a7:6b:3c:
5e:b5:ed:2c:18:2d:2e:6d:ab:11:c1:82:45:1a:54:
f5:72:19:e0:b6:3f:22:07:8a:d1:11:1d:33:33:2a:
50:77:cc:4c:fc:01:63:96:b5:8e:44:7c:15:f6:38:
88:c5:1e:de:60:22:b8:27:70:71:62:7a:24:3a:a6:
03:9c:5c:0c:a1:ba:de:4e:94:b1:38:5e:86:2d:50:
18:89:b7:19:36:48:d5:c6:90:be:46:2a:48:bc:20:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D0:0B:D1:8C:1C:63:BA:53:18:CB:E0:95:EA:94:D7:3B:DE:EF:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/374f01fe-3c92-3782-a2e8-45bde7e7e7dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.74.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:bc:f7:cf:6a:9e:90:e8:33:db:09:f8:29:b8:ca:e4:89:09:
8c:90:ab:98:d3:62:02:84:dc:d9:f4:a9:30:2e:46:65:b5:5c:
27:32:92:03:50:ce:e6:96:27:b6:9a:31:73:c0:26:6e:fa:e2:
84:58:b0:d6:43:94:d3:d6:6b:bc:a7:25:12:84:b9:d2:b4:e6:
5a:da:6e:7f:fa:1a:c6:6f:46:46:82:0b:a2:16:cb:39:97:65:
84:a1:02:66:09:79:ca:32:2a:34:a0:22:55:ed:d8:ff:f4:99:
33:35:99:50:c7:8c:a7:3b:0e:70:de:df:22:3c:1d:fc:7f:b8:
b9:01:0c:77:d1:ad:ac:3b:9d:5f:89:b2:89:87:a9:e4:cf:88:
42:65:38:e6:ef:03:62:21:bc:2b:ea:7a:d4:03:06:0b:ae:0f:
83:3f:0a:02:7f:a7:bb:d3:67:79:1a:10:94:11:12:be:33:b3:
d2:ad:83:ef:6d:03:8d:10:12:a2:9a:42:a9:77:41:cd:8a:cc:
1b:2d:59:c8:f6:24:8c:ba:d5:75:8a:cf:51:45:5a:13:11:f7:
bf:ac:69:e0:b4:c4:ab:20:33:f3:24:9f:d7:37:b2:da:71:24:
fb:6d:66:24:03:c0:07:f1:81:9c:e4:a6:dd:b3:3f:45:81:b1:
80:b9:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:10 2025 by rpki-client