Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f13f934-ad9d-361c-a1bf-22b955d22325.roa
File: 2f13f934-ad9d-361c-a1bf-22b955d22325.roa (raw, json)
Hash identifier: huN0yJzWKtcYKH6rOdCFo0FSjeaP+HCGFF7E+DVbmVg=
Subject key identifier: 2C:A5:CA:90:26:DC:8C:9E:64:1F:72:43:7E:96:C3:84:CD:5A:F8:0B
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285846A51E9F9BE3B9E35767D07B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f13f934-ad9d-361c-a1bf-22b955d22325.roa
Signing time: Wed 24 Jul 2024 14:03:06 +0000
ROA not before: Wed 24 Jul 2024 14:03:06 +0000
ROA not after: Tue 22 Oct 2024 14:03:06 +0000
asID: 25886
IP address blocks: 168.87.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a5:1e:9f:9b:e3:b9:e3:57:67:d0:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jul 24 14:03:06 2024 GMT
Not After : Oct 22 14:03:06 2024 GMT
Subject: CN=4e4ef7d8-a913-4af0-8d07-4d5d85e1875e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:e8:37:c2:f3:7d:10:a0:d8:1c:0d:34:91:
0f:e5:b1:8f:05:b3:98:b2:64:8c:48:36:a6:3a:26:
85:fd:02:bb:ea:8a:37:b6:cd:58:c3:15:1f:14:b3:
ec:74:23:7e:56:8b:5a:70:13:ba:d0:c9:1e:e3:1e:
18:ec:e4:5c:74:67:9f:d3:69:e5:da:14:30:de:ac:
66:fb:82:f3:17:6f:f1:ca:0e:af:77:d9:e7:f5:5e:
f8:0d:89:b7:91:03:5e:e2:94:ba:39:32:e1:61:c2:
05:d5:d8:6e:f2:19:fe:79:9a:47:0b:fc:2f:36:88:
76:70:a4:77:83:75:22:5c:b8:19:ba:90:db:50:ae:
b7:0e:ad:89:63:67:b1:51:e3:e5:0f:b1:45:b7:d6:
32:32:60:2e:9a:2d:7b:56:af:d4:66:e8:40:4b:87:
5c:fe:55:6f:79:55:f2:eb:d9:94:9b:da:c9:4c:7a:
71:54:b8:23:e7:03:2d:15:d4:ab:ae:60:e3:f3:1f:
83:31:f7:f4:90:e1:8e:5a:d1:2a:81:3e:a9:18:04:
8e:a1:4c:6b:4a:e3:f5:4e:71:76:30:fa:91:dd:ce:
87:39:39:2d:64:c8:14:99:81:02:6a:d9:04:69:51:
b4:2c:4c:18:c1:9f:1c:cf:bc:59:ea:d5:8c:44:bb:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A5:CA:90:26:DC:8C:9E:64:1F:72:43:7E:96:C3:84:CD:5A:F8:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f13f934-ad9d-361c-a1bf-22b955d22325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:fb:6d:6c:2c:c5:1a:07:7c:13:da:63:a4:44:9c:0a:ea:d2:
97:f6:91:8f:49:9c:a3:40:51:02:99:1a:26:c2:70:b6:c4:cb:
60:cd:bd:78:10:df:ac:2d:5c:6a:36:ea:fa:e4:3d:29:73:ce:
ab:9d:5e:a9:f0:77:6b:75:b5:b6:21:1c:0a:39:01:e0:26:39:
f9:60:6e:57:bc:49:8c:30:23:e9:bf:1c:cd:d0:c3:f3:4a:94:
c3:98:84:01:db:90:af:2b:bc:c7:f0:af:90:80:a2:8a:7c:2a:
c4:01:1a:6b:e1:f1:b2:80:a2:96:35:1d:86:b6:d6:ba:49:50:
65:e4:50:db:09:cf:34:c8:d1:e5:f9:0a:00:dc:79:15:22:22:
56:55:ab:6c:44:32:7d:3d:ce:2d:16:e2:01:51:4c:e6:df:5d:
2d:f2:0d:a6:be:7e:a5:b9:e1:90:1d:22:79:de:da:04:4f:bb:
89:e0:72:f8:af:64:b0:21:b5:4f:9b:e1:03:13:d6:e0:9b:53:
9b:22:21:16:f8:43:d0:86:31:c5:ab:97:ee:80:14:f7:1c:2f:
77:7a:92:0b:90:23:78:b2:3d:3f:a5:c5:82:79:8e:89:82:47:
66:03:19:42:20:69:4e:d4:b8:72:e8:22:93:0d:df:97:03:2f:
d7:d6:c3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:05 2025 by rpki-client