Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/8a159fd9-7f5c-3e82-8082-a6c1edf20961.roa
File: 8a159fd9-7f5c-3e82-8082-a6c1edf20961.roa (raw, json)
Hash identifier: vi5DfR48VpkLOj+RtlRUIPGMIxlwHZQpgZwNsE+ArdA=
Subject key identifier: C3:56:B9:C2:67:B1:6D:6A:24:4E:95:9C:B9:9E:13:4A:C0:8D:F2:C3
Certificate issuer: /CN=9378d90b-f478-4096-895a-85c3852d542f
Certificate serial: 010D0C9F4328584608A959A0AF738B167CCE3400
Authority key identifier: B3:0F:19:68:E0:98:95:34:09:70:51:9D:2F:04:CC:87:A6:1F:05:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/8a159fd9-7f5c-3e82-8082-a6c1edf20961.roa
Signing time: Wed 29 May 2024 13:00:34 +0000
ROA not before: Wed 29 May 2024 13:00:34 +0000
ROA not after: Tue 27 Aug 2024 13:00:34 +0000
asID: 62512
IP address blocks: 162.252.204.0/22 maxlen: 22
162.252.204.0/23 maxlen: 23
162.252.206.0/23 maxlen: 23
162.252.204.0/24 maxlen: 24
162.252.206.0/24 maxlen: 24
162.252.207.0/24 maxlen: 24
162.252.205.0/24 maxlen: 24
2602:ff3a:2::/48 maxlen: 48
2602:ff3a::/36 maxlen: 36
2602:ff3a:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:08:a9:59:a0:af:73:8b:16:7c:ce:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9378d90b-f478-4096-895a-85c3852d542f
Validity
Not Before: May 29 13:00:34 2024 GMT
Not After : Aug 27 13:00:34 2024 GMT
Subject: CN=5d51fbd3-0df6-4199-81a3-67ebc0c2f412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:aa:54:01:1c:91:69:90:28:10:58:a6:28:78:
3d:3d:b6:0f:fb:f9:d3:3f:32:21:17:75:4f:98:5e:
d6:b6:0a:ba:63:9e:3a:02:ca:fd:11:f0:d5:65:d6:
27:e7:cd:39:a2:03:cc:40:01:55:88:4e:dd:de:a2:
11:94:87:e8:e3:5c:c7:32:85:59:25:53:a2:d6:53:
60:31:bf:95:38:39:b1:52:38:7d:b0:a6:4a:80:fa:
22:2a:02:5b:55:d8:52:5f:8b:24:50:40:be:17:81:
0a:7a:b5:b2:81:ce:1d:96:fa:5d:5c:94:5f:9c:22:
36:16:70:ce:75:6b:e4:f0:7c:61:21:50:ec:ab:fe:
ec:56:28:45:94:4e:ef:b2:16:19:ba:1f:53:13:f6:
47:41:85:3d:1f:8c:61:93:a8:4f:d0:7f:1e:f9:05:
4f:3b:97:5b:29:bf:0d:13:a9:6a:6b:b9:48:88:51:
d9:30:fc:56:20:bd:11:49:93:bb:bb:a5:85:db:8b:
a7:96:85:ea:78:44:9b:de:8c:e7:b9:f9:c2:5e:e0:
e3:7c:1e:fd:a0:ec:cb:b3:25:c5:e2:64:00:ab:a0:
0c:57:84:08:26:89:45:93:79:0e:92:a6:62:a9:c2:
7a:84:71:ad:db:f7:95:29:73:19:42:b9:cb:9c:0d:
a2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:B9:C2:67:B1:6D:6A:24:4E:95:9C:B9:9E:13:4A:C0:8D:F2:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/8a159fd9-7f5c-3e82-8082-a6c1edf20961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f/9378d90b-f478-4096-895a-85c3852d542f.crl
X509v3 Authority Key Identifier:
keyid:B3:0F:19:68:E0:98:95:34:09:70:51:9D:2F:04:CC:87:A6:1F:05:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9378d90b-f478-4096-895a-85c3852d542f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.204.0/22
IPv6:
2602:ff3a::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:24:25:45:f2:2c:ff:50:5e:77:d4:81:46:65:22:1b:47:f0:
6a:12:d3:6f:4a:42:1f:61:f1:4e:f0:bd:fc:f8:de:82:1c:75:
80:c5:c1:0b:80:31:02:12:08:35:4b:9e:48:9d:70:f3:44:c7:
71:4a:0c:2e:8c:48:b3:76:c0:96:57:59:91:fb:cc:90:17:c6:
dd:b3:02:fb:b7:4e:e1:1d:93:3e:0e:75:8e:2a:23:78:44:94:
c7:ec:e2:c1:a9:31:b0:93:a3:93:9a:df:e6:9d:c7:c4:a9:ae:
56:18:ce:29:ee:08:d6:39:5d:6a:f4:56:b1:fc:d0:1d:30:7c:
7b:e3:2e:85:64:c5:a3:39:e2:77:8d:38:d1:88:22:cb:aa:6a:
65:67:73:f0:86:ef:c0:63:2f:a4:9d:61:e2:5a:42:50:38:14:
d0:fe:26:fc:1f:3b:e8:15:8d:8b:2b:f3:c8:b3:09:47:1a:a4:
55:53:3e:4a:b8:11:51:fa:1c:97:91:28:50:07:3f:07:43:65:
27:e4:78:93:9f:89:2e:8b:f6:fa:17:58:e8:ee:b6:07:bf:eb:
29:d1:b4:7a:6f:91:b7:0c:24:8e:1a:e6:28:ac:39:96:fd:cb:
90:1e:e8:6a:2c:87:3d:76:8c:6f:16:bf:31:ec:3c:8e:49:a7:
0b:3e:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:41 2025 by rpki-client