Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/1bebdab6-b819-38bc-be99-094b6095a7b4.roa
File: 1bebdab6-b819-38bc-be99-094b6095a7b4.roa (raw, json)
Hash identifier: qee6qLpiTDOe7HD2Q2WyNwCSfG2HNPnX9ILCkrXfptc=
Subject key identifier: 52:8F:20:42:EE:9F:14:3E:08:51:49:13:56:FC:5C:38:ED:6C:FC:DD
Certificate issuer: /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial: 010D0C9F43285847818BC2EBA526D559029F8D4C
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/1bebdab6-b819-38bc-be99-094b6095a7b4.roa
Signing time: Fri 11 Oct 2024 13:00:41 +0000
ROA not before: Fri 11 Oct 2024 13:00:41 +0000
ROA not after: Thu 09 Jan 2025 14:00:41 +0000
asID: 12956
IP address blocks: 66.119.64.0/19 maxlen: 24
66.201.160.0/19 maxlen: 24
66.249.192.0/19 maxlen: 24
198.52.248.0/21 maxlen: 24
216.184.96.0/19 maxlen: 24
2001:1820::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:81:8b:c2:eb:a5:26:d5:59:02:9f:8d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
Validity
Not Before: Oct 11 13:00:41 2024 GMT
Not After : Jan 9 14:00:41 2025 GMT
Subject: CN=79ebaa37-30b9-41a3-8c44-37538d14053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:b1:7b:ea:ec:33:e7:d6:67:f8:fe:1e:b4:
b8:e7:c8:71:1d:1b:58:12:9a:79:82:b9:56:cc:77:
2d:31:d4:04:ea:d9:cc:c2:b6:c6:04:c1:fb:06:1c:
45:09:69:51:e3:00:db:ff:7d:94:95:5e:d3:cd:e8:
89:0d:46:4c:12:e6:eb:1d:17:0c:90:57:c9:e3:d6:
5c:88:80:91:5d:98:ed:d9:7c:b7:48:c3:b7:56:2c:
36:92:ac:e1:51:e1:b9:0d:0d:72:d6:48:10:cb:9e:
7e:8b:99:32:c1:0a:bb:bd:44:36:d4:86:a8:50:ea:
9b:da:4c:57:41:4b:d4:33:9e:d9:34:dc:52:c9:c9:
fd:95:03:a2:80:c2:f2:24:40:e9:41:d8:89:51:79:
2b:88:bb:3f:76:28:b7:bd:43:97:d2:fd:25:c2:7c:
81:1c:7a:9b:cf:4a:2e:2c:df:bf:4c:1a:6f:fc:b8:
51:1f:92:ae:77:58:63:79:93:18:d9:4b:29:d5:fb:
dc:2d:7d:48:6c:ce:1e:1e:2d:91:98:5e:df:d4:5c:
a9:78:3c:0b:0c:a3:c0:ac:6f:cd:3f:13:97:d8:9f:
94:ec:1e:4c:bb:39:8e:ec:f0:29:a0:9e:9d:8d:02:
a6:43:2e:cf:fb:d7:4d:b9:7a:4f:50:c7:1f:15:82:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8F:20:42:EE:9F:14:3E:08:51:49:13:56:FC:5C:38:ED:6C:FC:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/1bebdab6-b819-38bc-be99-094b6095a7b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
X509v3 Authority Key Identifier:
keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.119.64.0/19
66.201.160.0/19
66.249.192.0/19
198.52.248.0/21
216.184.96.0/19
IPv6:
2001:1820::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:0a:6f:eb:b9:d0:dc:f2:04:c9:b8:05:15:46:f1:ad:47:c7:
b2:3f:33:b6:9e:7b:15:99:14:f4:ec:fb:a4:90:0b:c8:b3:13:
54:49:c0:85:2c:9d:9e:77:c5:d8:61:b0:7b:a6:0d:00:cb:0e:
d3:e5:bc:7f:2c:b5:37:3d:f5:7e:ff:51:ef:b7:de:72:53:4c:
0f:20:56:cd:5e:02:03:7c:27:aa:e8:9c:df:28:26:65:45:ec:
ba:af:d3:aa:58:3e:8a:fe:91:ee:ba:fa:67:6b:8f:72:ce:4e:
3d:58:a4:aa:d7:16:c1:4b:a0:76:ad:47:b7:aa:fb:47:8e:ad:
f8:16:b5:67:c2:f8:ea:58:e5:02:6f:03:c0:42:99:7a:8f:3a:
87:45:ae:60:d3:e9:8d:b3:58:57:9f:c1:c9:03:43:c8:0c:cc:
47:a9:f9:44:06:aa:3d:16:a1:96:b0:45:60:3b:c1:82:78:c7:
cd:a0:03:f9:15:6a:72:f2:d5:61:20:f7:bf:10:bb:99:08:e7:
24:bb:fd:c3:84:4e:5d:2b:d5:00:f8:eb:c8:41:4c:ff:a3:7a:
21:98:09:0b:16:11:de:08:71:5d:6e:db:3d:43:8f:c0:ee:57:
c0:d4:f3:90:c5:90:68:24:57:ba:1d:86:e7:cd:8c:36:e9:b6:
1c:41:d9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:53 2025 by rpki-client