Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a59d3118-5180-3d2d-ac96-4b9f4e25a572.roa
File: a59d3118-5180-3d2d-ac96-4b9f4e25a572.roa (raw, json)
Hash identifier: czeX6c2uMM6/6KndjDE4KfvXIQSJKhHk9VpxTqa1mwc=
Subject key identifier: B4:FA:D1:52:D1:14:30:1E:CF:BB:B7:F7:94:7A:0F:D9:05:21:70:E4
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858483FFAA7725BA837F5F6222480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a59d3118-5180-3d2d-ac96-4b9f4e25a572.roa
Signing time: Wed 18 Dec 2024 18:07:51 +0000
ROA not before: Wed 18 Dec 2024 18:07:51 +0000
ROA not after: Tue 18 Mar 2025 17:07:51 +0000
asID: 215287
IP address blocks: 67.207.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:fa:a7:72:5b:a8:37:f5:f6:22:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 18 18:07:51 2024 GMT
Not After : Mar 18 17:07:51 2025 GMT
Subject: CN=941f21d9-2cd3-4eb1-965a-214be4a937f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:b1:a6:09:05:9d:85:49:e0:69:fa:fd:ec:
4f:88:25:fe:70:a1:6d:36:e1:81:1f:b6:56:f8:a9:
70:f6:d0:da:a4:36:2c:cb:1f:e6:f0:83:99:a6:cf:
c9:b6:f4:d8:8e:73:07:d3:ec:81:19:d5:a4:de:83:
ec:b6:21:c9:a1:6e:79:00:9f:b8:b1:07:47:33:77:
78:01:32:d1:cb:c6:81:b1:65:c5:34:52:2e:cd:eb:
54:1d:0a:b9:25:e2:e2:fa:66:bd:25:b2:bb:f6:ef:
b7:9c:bb:22:a0:d4:b9:8e:ba:8b:8d:60:38:b1:2c:
b0:b3:fa:1d:a3:83:4c:69:8b:aa:95:4f:2f:f6:cf:
31:d6:74:2f:ce:56:09:5c:68:35:9f:41:35:7e:ed:
23:62:e5:91:9d:29:10:a1:64:04:56:77:57:58:aa:
e0:bf:33:7c:8f:ad:cc:bb:ab:c6:c2:af:13:87:af:
41:6f:66:18:41:2f:87:41:08:75:b6:60:e5:e9:c9:
a3:fb:d5:46:f0:aa:60:1b:e5:88:3e:42:a9:0c:18:
fd:99:a2:03:a5:ab:42:9c:a3:c4:61:ff:b7:0b:23:
73:bf:8c:5b:e4:61:8c:11:0d:83:b7:2a:45:d3:71:
0f:46:9f:b3:9f:5b:5e:84:96:bf:68:00:86:c2:cf:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:D1:52:D1:14:30:1E:CF:BB:B7:F7:94:7A:0F:D9:05:21:70:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a59d3118-5180-3d2d-ac96-4b9f4e25a572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
67.207.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:eb:33:fe:86:81:2f:62:f8:82:10:13:f3:39:2c:f5:f0:e7:
2a:a5:07:5b:7e:fa:8c:72:04:03:b8:03:36:a4:b1:2f:1c:a0:
87:8c:d4:6b:03:7e:f4:77:68:0e:95:cf:a4:fc:b6:53:32:b4:
4b:bd:ad:85:6a:f9:6f:63:b1:ca:fd:dc:e9:57:ac:40:7b:8c:
ae:95:16:48:a3:de:ce:13:47:43:8b:3f:6a:dc:e0:58:06:03:
b8:65:1f:b4:5f:36:a1:a4:a1:f9:ff:7c:64:1f:a9:77:3a:9f:
57:80:3e:a2:3b:83:61:f5:47:d8:7c:5c:1b:1d:51:a0:81:5e:
26:cd:03:04:df:fc:27:de:cd:94:dc:f1:79:7f:f3:97:31:14:
0b:0b:b5:10:8b:a3:11:77:a9:26:98:dc:71:10:b4:d3:d3:ed:
df:bd:d4:3c:e1:38:d9:d9:17:5f:d1:c5:ed:22:79:32:01:3f:
c5:42:68:81:3d:29:ee:c1:01:87:98:f7:f5:2b:f3:f3:65:19:
d4:18:e5:98:23:a0:b4:80:a8:59:a2:77:bc:1c:d6:b0:10:c2:
4d:88:a1:ed:3c:bc:a1:2d:0f:fb:53:a4:f9:9f:c5:c9:62:c4:
9f:fe:73:8e:59:d8:24:c0:f9:87:a8:c9:de:11:3d:8c:21:0e:
d2:3f:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:07 2025 by rpki-client