Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/daf58039-e623-3edf-aace-c77d8ce0ed5b.roa
File: daf58039-e623-3edf-aace-c77d8ce0ed5b.roa (raw, json)
Hash identifier: d0j8VRkxJ5byFFhFdoD0X2iTNoNCZJ4im1WAwh7/mxU=
Subject key identifier: 39:58:7B:9A:E8:A8:D0:23:5C:25:B6:ED:BF:CD:62:77:B5:9B:2E:F7
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285846C51A708379FB26323B416C00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/daf58039-e623-3edf-aace-c77d8ce0ed5b.roa
Signing time: Mon 05 Aug 2024 01:00:29 +0000
ROA not before: Mon 05 Aug 2024 01:00:29 +0000
ROA not after: Sun 03 Nov 2024 01:00:29 +0000
asID: 20060
IP address blocks: 170.30.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c5:1a:70:83:79:fb:26:32:3b:41:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Aug 5 01:00:29 2024 GMT
Not After : Nov 3 01:00:29 2024 GMT
Subject: CN=5a43fe4b-3fd2-4ad5-b5d6-524d6722939c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:77:e4:9e:8e:fe:2d:75:e0:b4:05:71:05:
82:8d:24:da:ee:ac:92:a7:42:7b:7b:6e:b7:69:93:
75:11:36:d1:ec:7f:0f:60:79:b0:f1:68:5e:d5:fc:
45:5b:67:34:40:ca:39:10:26:06:c3:00:75:6b:16:
da:57:9c:1d:37:f3:d1:49:74:c5:94:59:1d:ea:7c:
d3:fe:5b:54:8f:fa:12:46:fd:83:64:b9:87:ca:b3:
46:59:b8:be:f7:ca:78:cf:12:52:d1:0e:d5:7e:56:
31:fe:79:96:1d:4b:d9:5e:68:77:42:6b:27:f2:ed:
29:62:e6:13:f3:32:d5:60:32:4d:1a:b8:a6:aa:dd:
82:a2:8a:83:af:a2:fb:47:13:45:86:4f:dc:df:ea:
68:d9:de:ee:9e:33:83:7d:77:c7:e3:33:c1:81:ed:
5b:15:8e:44:b5:b6:ec:c1:f1:fc:6a:90:32:bb:48:
58:d1:7b:e9:bb:23:3f:a3:6a:80:f3:68:f7:2e:9b:
5a:d9:cf:5c:5b:a8:37:13:e2:85:48:08:7a:5b:f8:
20:ea:70:73:fb:71:a4:ca:3e:53:45:16:46:d2:2c:
51:ce:f7:b1:03:24:1c:0f:14:98:21:cc:ed:1b:30:
82:a7:d5:35:1c:3e:32:9d:39:56:7b:8c:2d:c9:b1:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:58:7B:9A:E8:A8:D0:23:5C:25:B6:ED:BF:CD:62:77:B5:9B:2E:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/daf58039-e623-3edf-aace-c77d8ce0ed5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
170.30.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:49:bc:f3:11:20:6c:6e:e6:3e:67:e2:9e:58:44:24:b1:62:
4d:53:7f:45:aa:41:01:e8:34:4f:84:38:b5:a9:3f:1d:85:f8:
db:b2:91:2d:8b:52:38:d0:1a:75:ed:44:9e:eb:0b:8a:12:79:
44:a7:d8:06:73:2a:4e:92:78:4a:94:c3:51:7f:59:a2:11:4a:
b9:fa:10:de:67:18:6a:bf:9a:1f:9b:8a:61:50:2a:d8:46:a3:
f7:5d:c1:f9:d3:e0:2e:26:e3:be:74:58:86:69:66:7d:e4:08:
66:11:c8:eb:0a:e0:ef:27:a2:6f:56:92:88:d5:83:99:7b:b3:
a9:c9:39:38:cd:a0:60:3a:f6:39:40:e3:b3:5d:b7:9c:ae:82:
67:75:9c:30:5a:56:c2:0b:fd:f0:04:e1:76:6b:30:c8:28:d7:
df:5a:61:df:ce:6c:0f:83:83:ce:37:74:7d:8b:10:cd:03:d6:
26:d3:78:47:c1:81:4c:36:93:bf:cd:3b:da:a2:04:b7:f8:da:
e9:ab:4d:d9:a2:60:11:2c:3e:16:3e:45:2d:c2:f5:9d:47:23:
14:e0:45:23:6d:c7:bc:d8:cc:7e:d9:d1:7e:ce:e8:02:cc:f2:
91:0d:02:a5:bd:cc:d2:e0:3b:f7:27:15:52:da:ea:61:f3:90:
f4:10:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:45 2025 by rpki-client