Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/caa730f0-47ab-305d-bb9f-e92713a91986.roa
File: caa730f0-47ab-305d-bb9f-e92713a91986.roa (raw, json)
Hash identifier: htIWDRJJ8X+jHz7V8LZQXWTS45KE8tZh7ck2Yeh8GRo=
Subject key identifier: 0C:A8:36:BA:D3:72:0F:3B:ED:2C:9D:EC:D3:22:EE:8F:5A:43:73:61
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285847E62A2413B280D3E8EA72EEE0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/caa730f0-47ab-305d-bb9f-e92713a91986.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 834
IP address blocks: 216.122.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:24:13:b2:80:d3:e8:ea:72:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=48f58973-83a7-4683-a4fa-569373be908d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:78:cc:a5:12:43:55:c6:f9:2e:a8:f5:34:4d:
0c:c1:12:2b:18:47:26:e0:f5:1c:a8:9f:9d:ff:ac:
7c:03:09:5a:b1:df:9c:74:00:d6:1f:4c:ee:55:fb:
3b:ff:bd:41:b9:0d:29:76:f6:7b:1c:12:33:93:00:
f9:39:69:8f:79:11:c5:8e:94:5e:b6:5d:5d:58:f8:
36:18:4f:7e:b3:78:61:19:5c:61:30:67:51:93:51:
b4:7d:c7:5f:4d:15:9e:71:01:5f:9e:22:c0:e4:4e:
47:b4:23:e2:24:46:86:44:67:e4:5f:7e:87:94:6d:
2b:1f:92:ba:5e:97:ae:0e:65:15:69:84:5d:f6:97:
48:f7:bf:c9:a2:33:77:6c:06:43:62:a0:78:87:e0:
2c:81:5e:83:71:9b:9a:3c:3c:b4:50:fe:66:ec:21:
f7:3f:50:cc:13:6f:b1:0d:84:c0:4a:78:6d:f7:22:
0e:33:9d:84:8d:b3:23:a6:7f:f0:75:f1:a1:37:f0:
89:c2:f6:c3:96:a1:93:5f:b9:25:2e:85:b0:8e:78:
d5:49:2f:2c:d2:ad:3e:cf:ac:9d:b2:69:06:8f:64:
d4:b0:16:df:3a:ce:c2:30:ad:8e:9f:9e:71:a6:90:
fa:53:3d:6d:fd:fb:16:e0:0f:33:e1:59:61:cf:24:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:36:BA:D3:72:0F:3B:ED:2C:9D:EC:D3:22:EE:8F:5A:43:73:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/caa730f0-47ab-305d-bb9f-e92713a91986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.122.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:fb:cc:cf:ec:f1:7f:ee:6f:e8:09:2b:47:bf:24:1c:e6:24:
71:cb:45:82:ca:28:f4:d4:bc:16:ba:06:af:96:b7:de:f2:cc:
33:17:b5:69:ed:e1:fb:15:9c:14:99:ad:55:28:64:02:9e:04:
1e:a3:60:87:cc:57:ba:31:f4:9e:63:89:b0:cd:f0:df:f8:c2:
61:be:e8:b0:a9:80:12:5e:ec:de:91:1c:1c:bf:67:d2:37:7f:
df:1c:85:eb:79:0c:87:9a:96:22:1e:94:11:71:42:3a:12:37:
d0:ac:dd:39:08:02:16:88:1e:3f:f1:96:74:71:82:e9:3a:7e:
11:c0:23:ab:ca:b7:d5:76:e9:84:52:7b:84:da:22:a9:e0:5b:
fa:45:f3:9d:13:23:15:d5:3d:4f:6c:72:ef:5d:ab:8e:8e:6f:
99:b7:6a:6e:e6:a1:f7:ff:8b:3c:e2:c3:42:29:b5:39:6a:b3:
1f:a5:9b:62:ce:56:03:c5:fa:40:51:e9:59:c3:92:ba:a1:1d:
b6:c7:4f:21:51:d7:b4:76:da:5d:c3:1d:a6:4a:0d:1e:3f:96:
f2:78:22:17:90:0a:ad:fb:76:d9:96:57:55:85:80:ad:97:01:
4e:a2:41:1d:2d:5f:7b:8b:52:33:c3:da:4f:cc:20:5c:c7:e9:
aa:d5:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:15 2025 by rpki-client