Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/6ca1d13e-99ba-32ad-be62-3d125af0a301.roa
File: 6ca1d13e-99ba-32ad-be62-3d125af0a301.roa (raw, json)
Hash identifier: iExgMbHVQEmfEMvSz9uT9wC1Xf2PBUFDQre8MwGvTLY=
Subject key identifier: CC:C3:6A:6B:D1:AA:5B:2A:55:BB:93:EB:40:48:47:DE:7B:28:56:68
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F432858484016AE85E2768827D8439AC0
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/6ca1d13e-99ba-32ad-be62-3d125af0a301.roa
Signing time: Wed 18 Dec 2024 19:04:19 +0000
ROA not before: Wed 18 Dec 2024 19:04:19 +0000
ROA not after: Tue 18 Mar 2025 18:04:19 +0000
asID: 63018
IP address blocks: 199.119.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:16:ae:85:e2:76:88:27:d8:43:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Dec 18 19:04:19 2024 GMT
Not After : Mar 18 18:04:19 2025 GMT
Subject: CN=1777402a-cc35-4353-be9c-8d69ef83009d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:2b:b3:9e:d6:b0:f7:9a:97:9a:7b:45:d8:
15:af:c3:1a:10:38:1b:a1:2f:28:5a:eb:59:25:a4:
42:e8:35:31:d0:7c:4b:77:10:bc:4a:84:6b:cb:de:
c0:11:98:c1:f5:0a:41:b4:f3:d3:05:8d:6f:ff:aa:
b5:df:75:36:14:12:86:51:a1:30:6b:e3:77:97:83:
14:95:44:65:42:c2:db:0a:ef:52:c9:65:c5:fd:99:
41:20:8d:8b:31:4d:55:41:6f:4c:9a:72:cf:c0:1e:
cb:31:dc:a9:71:dd:59:3d:f4:9c:15:fb:9d:be:53:
a7:4e:1f:ab:95:73:b8:bc:3b:2d:97:ee:77:00:86:
94:b7:02:ee:d5:12:f0:6a:a4:dd:cb:12:8c:1e:d1:
69:b6:e2:35:5b:0a:47:05:16:18:26:9d:81:86:60:
92:a0:ba:41:d8:34:48:e8:9b:40:b7:61:34:d9:49:
d0:36:aa:23:41:97:d2:cd:9b:5b:e7:90:9d:57:b4:
bc:2d:f2:e4:45:cb:af:0d:75:d6:63:75:a1:aa:33:
54:f2:78:be:95:95:4e:ea:32:1a:21:84:63:14:6f:
c9:c4:13:e1:3a:a9:4b:36:aa:f8:52:f1:94:d5:55:
ec:ba:54:25:48:40:af:67:d7:a5:b4:7d:0a:88:36:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C3:6A:6B:D1:AA:5B:2A:55:BB:93:EB:40:48:47:DE:7B:28:56:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/6ca1d13e-99ba-32ad-be62-3d125af0a301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:64:2f:c4:26:b0:95:ba:b9:67:9f:81:22:c9:ea:d4:7d:05:
af:36:a7:81:4e:fd:de:79:45:4f:25:54:36:7d:78:16:d0:58:
c1:8e:e9:ce:d7:ce:96:82:59:01:a7:a3:af:73:60:09:5f:ae:
59:82:ef:64:5c:b8:f0:23:4b:ca:23:5a:f7:06:e9:5d:a3:58:
c1:a2:b7:47:83:b1:e2:01:00:40:30:bc:ea:7b:f1:ab:90:6b:
ff:97:23:8c:dc:62:ba:92:fb:da:04:7c:aa:69:6b:cf:85:09:
5c:74:07:69:01:65:a3:61:9d:03:09:41:5c:84:b4:0f:88:8c:
3a:21:c7:32:88:3c:16:f2:3f:1b:fe:1f:f6:21:3b:78:44:11:
03:33:26:83:76:7e:0b:13:26:2c:10:7d:8f:95:95:1d:44:84:
a7:fc:ee:5d:7b:a4:91:13:2b:75:4f:45:21:77:a6:a0:3b:a0:
e9:c8:d5:e0:3c:15:a7:4b:4e:5c:73:dd:eb:6b:7e:bd:f3:e2:
03:f0:61:b5:d2:c6:6e:20:ca:f8:d8:82:85:27:53:36:86:ff:
84:24:ea:e5:85:f7:7b:15:de:ff:5f:83:ad:f1:26:c8:08:87:
9b:1d:7b:3c:51:54:8c:da:12:cb:0e:6f:b3:ba:28:73:2e:56:
63:de:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:54 2025 by rpki-client