Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/9a4273f9-0a73-30aa-9df4-fc2d6db172e2.roa
File: 9a4273f9-0a73-30aa-9df4-fc2d6db172e2.roa (raw, json)
Hash identifier: MC8usZ6BDW8dzABIqdXpG8OYn5WmP1sp9RMIdTu5TL0=
Subject key identifier: D1:A2:DD:25:C9:3C:C8:9F:D7:D2:22:CC:FB:F8:59:9B:79:57:94:66
Certificate issuer: /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial: 010D0C9F43285846D4754F0768DAC10F89A8D780
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/9a4273f9-0a73-30aa-9df4-fc2d6db172e2.roa
Signing time: Sat 10 Aug 2024 13:00:39 +0000
ROA not before: Sat 10 Aug 2024 13:00:39 +0000
ROA not after: Fri 08 Nov 2024 14:00:39 +0000
asID: 6206
IP address blocks: 45.88.216.0/24 maxlen: 24
45.88.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d4:75:4f:07:68:da:c1:0f:89:a8:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Validity
Not Before: Aug 10 13:00:39 2024 GMT
Not After : Nov 8 14:00:39 2024 GMT
Subject: CN=54041a62-ea75-4d94-a8d4-7f074c40bb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:69:8c:15:9f:15:89:c0:5d:8a:f8:89:ed:b6:
22:16:3e:cc:a1:58:9e:01:04:05:52:8c:f6:a5:40:
9f:7e:60:40:80:df:2b:f8:40:47:c4:92:d8:be:bf:
37:d9:2d:a4:97:f5:e0:1b:83:8a:7d:2b:35:e5:bb:
c0:d2:50:7a:e6:0e:f1:7e:c5:e0:1f:16:b5:44:49:
b0:ce:81:48:af:55:1d:0a:1c:c0:25:df:cb:ae:8e:
c7:d0:24:97:ec:be:85:b8:c7:ea:8c:85:4d:84:65:
09:a8:ea:28:0e:f1:08:fa:f8:01:9b:d3:b1:43:db:
9b:e3:59:96:c8:59:eb:29:2f:42:14:50:1f:17:0f:
ac:1c:e2:da:f0:a7:8c:2c:2b:94:7c:bb:88:b4:79:
16:56:02:01:6f:9a:af:39:2e:f5:0e:dd:e9:4d:3f:
f2:f5:7c:bf:5a:7b:1b:ee:47:3a:26:ec:72:04:b6:
79:41:4e:a4:a9:fa:1e:e5:c6:3a:af:06:64:2a:5a:
34:42:b3:12:17:30:b9:4a:e4:fe:e9:77:ba:d2:c0:
59:e5:80:4f:bb:6a:c4:f6:b3:da:8c:85:5f:3c:b7:
a5:48:a9:10:0b:53:f0:65:4c:18:e7:16:b5:19:b7:
fb:0f:3d:45:e2:26:f2:81:95:35:70:6e:3d:9f:51:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:DD:25:C9:3C:C8:9F:D7:D2:22:CC:FB:F8:59:9B:79:57:94:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/9a4273f9-0a73-30aa-9df4-fc2d6db172e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
X509v3 Authority Key Identifier:
keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
sbgp-ipAddrBlock: critical
IPv4:
45.88.216.0/24
45.88.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:60:1f:be:1b:8a:cd:93:24:89:93:fd:f4:46:b2:71:90:70:
40:04:d8:42:aa:50:c1:94:da:bd:22:b9:6e:60:f1:01:f1:b7:
9c:0f:39:eb:83:25:dd:5e:b5:68:42:6e:6b:ce:8c:fa:e2:3c:
b2:15:5d:eb:5f:a6:99:c6:26:45:d3:87:79:96:47:b2:54:0c:
e1:a2:3c:98:d1:2e:11:df:87:72:c5:24:79:ab:26:fc:58:a6:
e0:61:09:08:ce:4c:2f:fc:41:71:87:e3:bb:ae:e3:39:1c:ab:
52:51:5f:a1:e4:e7:5d:91:db:aa:82:f1:68:b5:b1:48:ca:0f:
2f:ed:89:76:df:4b:5f:ff:cf:42:73:c4:6b:df:ab:76:37:5a:
e4:73:67:d8:3f:50:5a:fd:02:dc:43:c1:1e:5b:5a:5c:ed:5e:
64:94:65:a1:6f:c3:04:db:db:54:5a:b3:aa:fa:6b:11:3f:30:
c7:1a:a7:92:33:83:17:d3:c0:02:b5:78:83:52:ea:ef:d6:c3:
0f:ed:36:f9:52:a6:50:bc:5d:bb:44:fc:57:c1:87:4b:0f:d6:
60:19:60:e3:99:0b:df:83:61:2b:8c:4e:83:58:65:9d:ea:41:
c0:f3:d3:69:f1:8c:f4:29:74:d0:c2:42:ae:fc:a7:76:58:7e:
01:88:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:52:02 2025 by rpki-client