Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/636b5ec4-3aca-3cea-b369-07a2ddc900e2.roa
File: 636b5ec4-3aca-3cea-b369-07a2ddc900e2.roa (raw, json)
Hash identifier: FZyBg6bmTGOTYJ6Vdy+pLV4q1WdmgCh/VV2ziOvpuCQ=
Subject key identifier: 96:C3:23:25:3C:BF:26:3B:86:BB:3E:8B:AC:39:4D:98:71:8E:9D:DB
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584752DB2B21153F121115FFFBF0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/636b5ec4-3aca-3cea-b369-07a2ddc900e2.roa
Signing time: Tue 24 Sep 2024 19:37:50 +0000
ROA not before: Tue 24 Sep 2024 19:37:50 +0000
ROA not after: Mon 23 Dec 2024 20:37:50 +0000
asID: 19647
IP address blocks: 168.87.140.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:52:db:2b:21:15:3f:12:11:15:ff:fb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Sep 24 19:37:50 2024 GMT
Not After : Dec 23 20:37:50 2024 GMT
Subject: CN=81a34671-b397-4447-b576-0882d5783400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:24:ba:a5:69:c8:db:fd:84:4d:6b:5a:e3:
84:7f:fb:d0:ac:fe:52:f3:6f:36:14:c8:a9:d5:a4:
b5:1f:69:aa:b4:3c:14:d3:4c:e1:74:39:9f:0e:0d:
92:f2:ef:15:f9:f9:30:36:71:c8:f6:74:a2:bf:f5:
9d:d9:1e:47:f8:a6:dd:af:1f:b1:d6:4d:9a:ee:1a:
fa:1c:97:0f:a6:1b:7b:39:fe:c5:9b:e8:e7:17:21:
97:ba:ed:bc:9c:88:be:f3:88:2f:ca:15:d1:bb:39:
9e:15:1c:39:12:8a:c5:0e:3f:8c:21:fe:c2:53:50:
c3:ee:3a:4f:de:40:d8:ad:07:07:cd:1c:a2:22:27:
d8:76:d2:e2:b2:d5:6e:72:24:e0:55:ff:52:5a:05:
0d:63:5e:18:d2:e0:b1:b3:df:0a:25:ef:35:5c:e9:
fc:49:34:a7:2f:e7:dc:db:d8:d3:88:5b:ff:63:52:
c6:be:0e:e2:48:ed:eb:0e:67:f1:a9:7c:63:af:bd:
11:10:03:ac:01:a3:20:2d:6e:6e:dc:43:6d:27:2b:
94:cb:71:2d:f3:33:b0:21:e8:aa:28:c0:95:65:8f:
e9:12:c1:57:a4:4d:a8:16:9d:9c:7c:10:83:7b:d3:
09:ba:35:94:3d:3b:cf:a9:e4:a3:06:28:9b:be:66:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C3:23:25:3C:BF:26:3B:86:BB:3E:8B:AC:39:4D:98:71:8E:9D:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/636b5ec4-3aca-3cea-b369-07a2ddc900e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:a1:57:3b:dc:92:8b:ec:de:2c:f3:53:3c:2d:68:7e:b8:e6:
3c:e2:2d:18:e3:ba:5b:8b:05:24:aa:75:68:d5:21:f2:52:93:
61:f5:b9:3f:04:7e:e9:0a:a2:82:03:d6:9a:3a:0c:23:36:fd:
28:88:2e:55:5e:10:5c:c0:06:a6:52:43:ae:14:65:2d:ff:d5:
e7:b3:ca:e2:e0:14:15:93:cd:8d:6b:5e:76:d9:d5:54:71:2a:
24:19:a1:bd:78:55:29:3c:03:74:e8:c1:11:17:c4:e3:01:81:
7b:df:f5:12:66:d7:c8:6b:89:02:25:e1:84:7d:7e:13:83:41:
bf:dd:96:c9:9d:4b:12:a5:b8:64:6b:9e:03:48:a3:77:08:10:
95:06:b0:77:6b:87:c1:f0:93:35:c1:af:b6:6e:3d:3a:41:05:
fb:ea:21:bf:9e:cb:ab:3f:41:58:8b:14:b1:5d:59:c7:7b:3e:
72:60:36:01:f8:f6:44:b9:ae:94:4b:a6:0a:f1:9d:04:68:30:
83:72:27:2b:00:bc:b0:b4:ae:97:0f:62:51:70:6d:6f:5b:27:
a2:49:17:1c:9b:89:b5:3a:94:63:ef:45:60:d9:7b:f1:27:8c:
f6:78:0d:f4:e6:af:1e:c2:2d:e8:3a:1d:49:16:36:cc:8e:fa:
00:43:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:24 2025 by rpki-client