Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/e4e2ce15-03fa-3ae1-8748-9b36e9a251c6.roa
File: e4e2ce15-03fa-3ae1-8748-9b36e9a251c6.roa (raw, json)
Hash identifier: C+Im9W15nNBf9v9yIxvaoDY4JuxDxWntaPZ/+crcy98=
Subject key identifier: AC:BC:95:F7:1F:2E:00:C3:B1:63:C6:FC:AF:5B:C5:3F:30:4C:93:38
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328583AA7A01FA3E0BDEBFBD9E54640
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/e4e2ce15-03fa-3ae1-8748-9b36e9a251c6.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 172.102.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a0:1f:a3:e0:bd:eb:fb:d9:e5:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7fd8a261-06ae-4ad4-ab28-f5882072bd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:9a:4d:79:ae:55:3c:c2:1f:7f:18:e7:02:
91:b2:45:22:71:75:e4:c9:b5:6b:91:0a:0e:6f:53:
19:bf:e7:eb:13:ed:33:5e:d4:5a:2e:97:1e:95:8c:
60:f3:45:19:98:2a:30:e8:35:4b:ef:7e:05:95:9e:
3c:85:06:05:69:c8:2c:ba:07:99:40:f3:1b:80:1a:
e3:95:10:9e:ed:9e:d7:2d:10:eb:3d:54:eb:13:0c:
64:41:41:38:fa:d2:54:fd:f6:75:43:25:6a:ef:08:
4b:26:17:74:fa:c9:54:95:15:87:c1:4b:4a:27:3a:
c6:bf:6d:07:58:c3:1e:5a:11:3d:fc:d3:c1:cc:d7:
59:a8:32:ec:cb:39:b8:ce:87:3e:37:89:b7:99:16:
95:a3:b2:59:42:97:97:06:c3:6f:61:ff:c6:a0:43:
7b:5f:01:43:ee:2b:2b:bb:6b:1a:04:a1:0a:e9:04:
45:79:de:50:a4:b3:71:1a:9b:c4:06:d1:98:fc:11:
af:37:56:21:52:20:a6:ec:ef:87:8b:84:e7:bf:7d:
17:50:85:f9:cb:2e:9d:db:94:57:7d:76:bb:3e:1e:
ae:5f:11:10:b6:54:02:72:ae:99:aa:87:ed:b7:3d:
6b:e6:42:d3:2e:d2:01:d9:16:de:18:51:f5:18:dd:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BC:95:F7:1F:2E:00:C3:B1:63:C6:FC:AF:5B:C5:3F:30:4C:93:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/e4e2ce15-03fa-3ae1-8748-9b36e9a251c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:78:30:78:a9:bc:ad:ac:49:f8:8e:54:27:b1:dd:28:a6:ba:
8b:bf:93:fb:12:d1:7a:dd:2a:3d:9d:1f:2a:27:18:c0:0f:73:
b2:ad:61:b2:13:09:fa:db:b0:c9:74:55:a1:24:b2:47:43:9a:
0a:4e:d6:f9:e9:c4:f0:c0:92:53:c1:9f:be:97:8f:66:b2:55:
d9:96:aa:77:10:e3:ca:51:cd:55:6d:17:ae:21:5b:d4:8c:d8:
f8:5d:21:20:ba:42:88:5e:98:ee:ed:a7:e6:8f:13:a5:69:db:
7b:bd:47:81:5f:8a:30:60:24:73:36:44:b8:ba:be:ff:14:14:
e1:e2:03:88:40:f9:97:e0:dd:ce:87:d1:bf:e4:5b:ca:49:93:
a8:92:f7:f7:cb:3b:2a:3e:48:d2:d3:89:e6:22:3e:e8:d0:75:
57:60:e4:a4:ba:08:69:ba:f6:bd:26:03:bd:9e:c1:b6:94:b4:
11:47:4f:0c:a7:ad:96:c0:05:13:b3:f8:0e:75:50:30:da:9d:
e3:a9:5f:c1:3a:d8:f5:4e:a2:c4:8c:c2:1d:22:bb:46:ef:25:
c2:54:d4:6a:06:22:b4:a0:0d:c8:3a:9c:f2:1d:04:81:d6:d7:
f8:17:13:b0:be:41:73:fb:04:45:7c:59:33:56:c9:43:ad:04:
4c:f6:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:44:49 2025 by rpki-client