Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ee9c2297-8c73-310f-a4a9-c3fc1c9b3acc.roa
File: ee9c2297-8c73-310f-a4a9-c3fc1c9b3acc.roa (raw, json)
Hash identifier: NyMimJUsUu8DTkJ0FVS+EENE16rXvRbMT5mhm7DGWyY=
Subject key identifier: 32:15:0F:02:13:B0:27:4B:52:C2:2F:76:2C:F7:47:E7:2A:B8:A3:C5
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285846C51A701A4A171C333C02A340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ee9c2297-8c73-310f-a4a9-c3fc1c9b3acc.roa
Signing time: Mon 05 Aug 2024 01:00:29 +0000
ROA not before: Mon 05 Aug 2024 01:00:29 +0000
ROA not after: Sun 03 Nov 2024 01:00:29 +0000
asID: 20060
IP address blocks: 170.30.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c5:1a:70:1a:4a:17:1c:33:3c:02:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Aug 5 01:00:29 2024 GMT
Not After : Nov 3 01:00:29 2024 GMT
Subject: CN=6327fe55-a2d7-41c6-affd-0d9e7f1de958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6d:5f:58:48:05:47:e4:1b:07:28:6d:5b:9f:
4a:93:c6:b9:15:66:83:97:d7:83:22:4b:a1:08:e1:
44:15:78:5e:b9:2b:4f:d0:54:7a:87:f3:30:06:73:
56:f3:9e:d7:18:5b:60:77:69:fc:9b:5f:bf:73:f3:
ea:96:96:c1:15:7b:93:24:4e:5e:27:c5:3b:df:2d:
43:9b:0f:a3:ae:98:dc:93:bc:27:5e:a8:02:1c:d5:
df:ef:0d:2c:1f:3b:54:8d:47:38:4a:30:f3:f0:b9:
88:55:61:fb:b7:40:ce:01:bc:8a:30:b9:1f:88:00:
8b:2d:81:40:90:af:14:41:bc:3a:cb:6e:8c:87:ad:
9d:af:08:0c:c1:85:65:f9:96:4b:e3:9b:67:14:26:
c5:83:dc:56:49:5b:d7:7a:be:91:9f:a2:5a:e8:13:
f5:73:0c:7e:2f:24:04:37:26:02:9b:9c:66:b8:48:
5b:cc:70:86:9d:1d:d7:f0:a8:73:e8:75:33:30:b0:
00:75:ef:be:18:07:1a:58:88:67:ba:72:e3:90:06:
bc:8b:95:52:6f:03:73:4a:d4:eb:31:1b:29:b9:46:
a7:3b:d1:77:d7:b4:ec:42:2f:df:58:f8:de:56:3b:
d7:9d:04:51:da:d1:da:fb:58:70:5d:11:03:f8:7c:
ae:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:0F:02:13:B0:27:4B:52:C2:2F:76:2C:F7:47:E7:2A:B8:A3:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ee9c2297-8c73-310f-a4a9-c3fc1c9b3acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
170.30.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:e9:d0:73:75:31:b3:14:5c:24:c4:ce:18:10:f3:3b:ba:93:
9f:b3:6d:36:73:6c:24:19:4a:ea:83:9c:53:6a:c5:53:ad:f2:
e3:58:84:71:e2:2b:11:9d:cf:a6:48:b6:c5:66:8f:b8:4e:0a:
7a:ff:5e:fa:0c:95:eb:b6:9d:57:b9:1f:e8:84:4b:70:54:dc:
9c:08:93:8c:55:54:74:38:2a:38:c9:15:62:2f:90:a0:df:64:
15:e3:cc:e3:4d:b5:80:a6:8a:a9:f3:0a:99:15:21:bd:ca:0b:
c4:fa:43:33:31:c3:94:89:b4:cf:90:2c:d2:03:db:2d:23:5e:
35:a6:a2:12:85:d5:4a:70:49:01:7f:e5:75:ed:b5:0c:35:26:
8a:9b:f2:fc:12:e2:1b:c9:e9:95:5b:5c:b6:f8:bd:39:e6:9d:
5c:4f:32:e0:08:f7:d7:c7:bc:15:a4:2b:b0:03:53:59:9d:f7:
08:95:26:18:e0:c1:64:09:8e:6d:4d:74:28:1b:57:28:60:a6:
82:b0:be:67:99:71:2f:f5:b7:f0:fe:75:df:62:24:af:5c:c1:
99:ae:54:1d:24:69:6a:71:3d:ac:e2:ca:d3:c6:d7:df:c3:e3:
eb:30:d2:68:cb:2c:4b:0c:11:37:24:16:e7:93:bc:4f:f5:90:
f6:7f:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:48 2025 by rpki-client