Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d66a28f2-8f6c-38e5-a73b-3ff16199e51a.roa
File: d66a28f2-8f6c-38e5-a73b-3ff16199e51a.roa (raw, json)
Hash identifier: yK/J4iLFI+leG50/uvxAEOWwCE9i/nsGy6T0WKKxPyw=
Subject key identifier: EF:41:0E:E2:64:AB:6B:7F:8E:41:34:C3:F7:4D:F9:46:1A:E7:79:8C
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858475268FA1D4A23914EE9066F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d66a28f2-8f6c-38e5-a73b-3ff16199e51a.roa
Signing time: Tue 24 Sep 2024 15:47:45 +0000
ROA not before: Tue 24 Sep 2024 15:47:45 +0000
ROA not after: Mon 23 Dec 2024 16:47:45 +0000
asID: 2164
IP address blocks: 168.87.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:52:68:fa:1d:4a:23:91:4e:e9:06:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Sep 24 15:47:45 2024 GMT
Not After : Dec 23 16:47:45 2024 GMT
Subject: CN=6da058c8-e4a2-48b0-a206-151813eb4080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:a6:bf:e9:f8:cc:78:a3:04:54:35:87:b7:
0c:7f:ee:76:b7:bf:3f:2b:ad:ef:dc:53:7d:66:b2:
b3:19:77:2c:b2:ae:c9:ee:ee:c0:18:20:8c:77:7b:
08:d5:11:19:9c:f6:cd:a2:21:54:a6:ce:72:8e:a3:
62:ed:c2:58:7b:07:9b:a6:85:03:36:88:db:b1:47:
e7:27:6c:d9:f3:1b:1b:e6:ef:ac:56:36:bd:33:ca:
f8:53:35:86:c2:99:b8:83:47:61:ed:74:da:bc:3f:
78:5a:e0:93:10:70:d9:8e:56:86:56:a6:58:42:3c:
6f:fd:d3:88:18:30:2f:f4:8d:70:64:60:35:4f:f7:
6a:f4:7e:6c:99:4c:1f:35:2c:46:f0:04:06:31:b1:
69:fe:32:a9:04:5d:a0:82:f0:b4:40:75:b1:f8:1f:
22:64:76:31:1d:e6:f8:e4:73:3b:74:1b:76:1b:6f:
a0:c4:4a:c9:ed:a1:33:f0:76:37:b7:92:c0:5e:d1:
13:78:1d:f4:5a:ff:e4:ce:e4:e8:51:c4:f1:2e:3d:
0a:89:cc:75:1f:e0:1a:ca:9c:92:9e:37:3b:1c:85:
40:73:9d:dd:89:8b:c5:a6:6a:07:89:23:ab:a9:47:
13:d0:c2:f5:f4:84:ca:ad:ba:36:e6:d5:a2:59:a4:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:41:0E:E2:64:AB:6B:7F:8E:41:34:C3:F7:4D:F9:46:1A:E7:79:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d66a28f2-8f6c-38e5-a73b-3ff16199e51a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:60:d9:e0:ac:b0:a2:b7:5b:4f:13:9c:b9:3d:39:f0:c7:c8:
d7:41:55:d5:31:83:17:1e:5e:6d:1b:1f:7e:76:f9:fd:e5:dd:
6f:96:e9:0c:20:57:07:3b:e6:ee:2f:04:9a:05:23:29:e2:ce:
a6:f5:4d:e6:7d:2a:a9:33:78:dd:5c:20:38:20:fc:c9:ff:c1:
17:34:a4:95:74:95:12:1a:ae:62:b0:10:de:6c:75:a4:67:60:
d3:fb:d1:40:90:88:1b:a0:ce:b9:80:a1:eb:fa:ba:c2:a1:87:
ba:1c:66:12:71:61:7a:ec:7b:e2:aa:f4:ec:31:3a:cd:46:be:
c7:8a:08:67:93:e5:d6:4f:09:22:bd:3a:d5:19:09:0e:e3:44:
d4:ff:1c:b5:63:57:d4:b0:27:bb:9c:4f:2a:b3:04:63:c3:25:
d7:3c:d3:67:0f:a2:be:3a:8f:c5:ff:7d:01:e7:01:71:ff:1c:
27:e0:93:ae:cf:07:cf:84:6a:0c:4b:63:ca:4a:01:03:f1:fb:
36:95:7d:2a:69:f8:0d:5b:20:ff:3e:d0:de:bb:cd:da:99:7b:
99:98:ef:ab:83:93:92:ea:10:51:5b:60:ab:30:05:42:c7:65:
72:b9:a3:e2:37:a4:ca:e3:1e:7a:37:7f:89:54:86:06:40:ff:
70:40:3f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:32 2025 by rpki-client