Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2875c73-da63-3bd5-a725-d935cf1b627f.roa
File: f2875c73-da63-3bd5-a725-d935cf1b627f.roa (raw, json)
Hash identifier: aPJL2RmXAT84LkRVMS06PP7t1PEuW3cqpl1TF3tzf7o=
Subject key identifier: AE:FB:52:82:E8:12:E2:0D:E7:68:B2:99:EC:74:23:EC:8E:E9:8A:C4
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584776C5EFE81258364D4E16F940
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2875c73-da63-3bd5-a725-d935cf1b627f.roa
Signing time: Mon 07 Oct 2024 16:24:09 +0000
ROA not before: Mon 07 Oct 2024 16:24:09 +0000
ROA not after: Sun 05 Jan 2025 17:24:09 +0000
asID: 3360
IP address blocks: 168.87.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:76:c5:ef:e8:12:58:36:4d:4e:16:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Oct 7 16:24:09 2024 GMT
Not After : Jan 5 17:24:09 2025 GMT
Subject: CN=c2c6e76a-cc30-49ec-90d3-de57f031f768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:e6:54:1b:83:e4:5b:11:8e:99:83:29:09:
12:16:50:4f:ab:6e:db:91:b3:bc:12:07:1d:2f:1a:
30:2d:ee:87:ed:df:b8:ae:67:d4:59:a6:87:75:76:
12:a9:29:33:bd:21:e5:b8:0c:af:0b:74:3b:28:69:
b3:a7:1a:a0:62:31:03:ed:bd:88:ff:a8:5b:16:44:
6f:cd:fe:e7:24:87:e7:95:8e:a8:26:c8:84:f4:23:
4f:60:2d:6b:0c:eb:e2:60:a8:a7:1c:7d:49:66:a2:
4e:25:ae:81:ac:d9:c0:2c:78:9d:12:aa:4b:f5:ce:
bc:66:e3:06:b3:1c:bb:6f:12:a0:bd:3e:f3:60:46:
59:b2:81:6b:ac:a3:12:84:f8:66:4b:09:b8:2b:20:
aa:c4:87:c2:1e:ad:3b:50:5e:2e:a0:c6:48:7c:79:
c2:aa:42:4f:c3:33:b8:af:62:4c:57:a6:67:91:1b:
5d:82:24:8f:e4:47:93:cc:6d:e9:29:6a:ca:74:2c:
28:8f:a3:20:a0:18:ca:d9:2d:c6:5a:b2:c6:e7:4f:
cb:73:58:35:c6:f1:89:87:40:aa:6c:5b:d4:34:09:
7a:52:ff:81:0f:9d:57:bb:7e:c9:17:91:8b:1a:76:
35:ae:b9:51:56:5a:10:8c:8a:49:18:5b:94:cc:f6:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FB:52:82:E8:12:E2:0D:E7:68:B2:99:EC:74:23:EC:8E:E9:8A:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2875c73-da63-3bd5-a725-d935cf1b627f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ec:df:a4:96:1a:57:93:af:4f:b1:8b:6f:46:80:3e:dc:6b:
36:d8:04:43:7b:23:65:62:4c:e1:0b:35:f0:e2:22:bb:c2:1d:
1f:ca:37:f7:da:cc:8a:ec:82:7e:15:4c:22:81:42:0c:ac:d6:
9c:46:5a:98:97:d8:f4:db:db:0e:78:9d:bd:a2:51:57:5d:0b:
6e:e5:89:37:40:f1:ff:c4:db:83:7e:cd:da:f7:bd:6a:8c:33:
01:6a:bf:02:a0:f2:18:67:69:03:6b:e7:9a:92:7b:a6:25:48:
03:51:c3:00:28:71:9e:4d:4f:5b:de:6a:8a:cf:f7:b0:11:e8:
3e:89:c8:1a:62:9c:92:11:c5:4b:b8:27:e0:b3:70:83:4d:c1:
23:7e:30:f5:91:78:4b:50:16:35:1e:90:a8:f6:96:29:ec:97:
7d:2e:41:04:0d:69:81:54:30:e4:eb:3b:dd:99:fb:d6:d7:8b:
c1:de:43:68:c0:fc:12:16:05:f4:bc:27:68:2f:00:25:ff:32:
19:ca:6d:75:fd:e3:6c:0c:b5:4c:61:47:8f:63:17:1b:5f:81:
61:f6:31:a7:88:a1:82:f7:ff:5b:54:4b:dd:7a:b3:e3:d0:e1:
b4:ef:cf:11:28:4c:49:58:fd:8a:14:a8:22:9b:31:a0:50:8f:
41:48:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:36:20 2025 by rpki-client