Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c907ef94-a2e0-30ea-9fa1-e616e731b591.roa
File: c907ef94-a2e0-30ea-9fa1-e616e731b591.roa (raw, json)
Hash identifier: G26aCZQ4RbM8ZATJpY7oC7W/Q1Ai/UWMtWMyhVqAFVU=
Subject key identifier: 67:67:B3:1D:F5:EC:F8:59:04:88:6D:80:11:C4:7A:E2:1C:F1:9C:DE
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285847CD09F177937BDE572A8C2694
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c907ef94-a2e0-30ea-9fa1-e616e731b591.roa
Signing time: Thu 07 Nov 2024 14:00:39 +0000
ROA not before: Thu 07 Nov 2024 14:00:39 +0000
ROA not after: Wed 05 Feb 2025 14:00:39 +0000
asID: 14618
IP address blocks: 216.74.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cd:09:f1:77:93:7b:de:57:2a:8c:26:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Nov 7 14:00:39 2024 GMT
Not After : Feb 5 14:00:39 2025 GMT
Subject: CN=578c5a43-1a74-4b88-a739-90d5e19a91f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:96:58:03:32:95:00:99:e4:d5:10:8c:a2:
f4:ff:a8:38:f1:46:00:5b:11:09:20:8f:f0:fd:16:
cb:da:eb:18:57:67:7e:88:ff:de:05:85:9b:9d:ad:
1d:4c:d6:60:f5:a8:e5:dd:81:ad:ad:d5:a3:19:6e:
84:b7:00:e5:4c:3e:32:e7:c3:1a:04:42:cc:38:cb:
54:04:9b:43:57:11:bf:70:72:f8:d4:48:98:fe:96:
4d:3a:9d:93:38:d5:44:6e:09:71:1d:4c:b5:3f:bc:
c0:d9:2d:05:23:26:42:59:a8:c4:51:ff:21:6e:d4:
d3:47:9c:72:25:b7:4b:fe:38:34:33:bb:a3:02:bb:
b4:70:3f:88:fc:f3:e4:8a:6c:05:c5:77:56:c4:b6:
d4:8e:26:b4:75:91:d4:fa:40:59:32:24:02:79:c9:
b9:cb:89:c5:ab:8c:b4:70:86:ea:94:1f:39:00:dc:
2e:a1:c7:aa:5b:bb:0d:26:f9:52:19:11:b0:c6:03:
dd:68:8a:34:3c:00:f4:b9:c6:63:77:e0:4e:ce:5b:
78:60:39:89:f3:85:75:c2:d3:3f:72:b8:bc:f9:a2:
20:06:b9:be:1a:39:a5:13:1d:22:fc:ab:7c:0d:06:
75:b4:e8:b1:97:3f:ab:be:f4:9d:23:68:04:09:2a:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:B3:1D:F5:EC:F8:59:04:88:6D:80:11:C4:7A:E2:1C:F1:9C:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c907ef94-a2e0-30ea-9fa1-e616e731b591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.74.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:79:f1:35:93:97:41:c4:81:1e:af:ab:b8:62:ff:74:48:11:
73:19:a5:6f:6b:b2:2a:3a:3a:87:21:c0:54:7b:cb:68:13:8a:
86:0e:7a:d0:51:55:fc:b0:bf:e4:83:1f:eb:35:31:17:6a:32:
95:6c:97:b3:c3:80:43:10:6a:89:7c:c3:d2:c2:32:04:51:7a:
14:a7:d3:1f:be:c6:1c:43:41:35:e7:da:c7:ed:6e:d5:26:7c:
fb:21:0e:66:16:96:12:26:fb:7f:36:68:c6:da:b9:40:df:ed:
f2:df:4d:97:99:08:a9:08:90:fd:bd:ea:6a:a8:bf:2b:82:04:
d3:ac:25:c6:f0:f7:92:43:2a:f4:0d:91:06:f9:88:93:f1:c3:
ef:2e:3f:64:d5:02:fb:b4:ce:fc:0a:18:98:a3:07:d3:b1:3c:
7f:95:51:20:22:2c:b7:2b:b6:6f:11:5a:ab:f0:ce:dd:c5:fe:
53:2d:56:ed:02:82:55:58:8f:44:1c:b9:e4:a9:4e:a8:f0:ce:
c5:0e:73:c6:c8:12:0b:1b:98:28:31:31:11:09:4a:96:35:01:
af:c0:63:b8:57:54:aa:2b:ef:c2:de:61:d3:8f:20:5b:57:0f:
58:1a:57:d6:aa:0c:c5:0c:23:a6:8b:fb:bd:d9:87:f6:30:ea:
5b:ed:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:48 2025 by rpki-client