Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/065ade74-4270-3930-8897-7e70588636d5.roa
File: 065ade74-4270-3930-8897-7e70588636d5.roa (raw, json)
Hash identifier: qHdBp5NxZenoOUN+OBKXBsG6yxaJLVna4PREQbLUxHY=
Subject key identifier: BF:B5:41:A7:0E:84:4D:4F:BD:B7:CE:78:66:75:90:7E:00:94:B6:AF
Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651
Certificate serial: 010D0C9F432858462CC3633E1BBC9105C2E60700
Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/065ade74-4270-3930-8897-7e70588636d5.roa
Signing time: Tue 11 Jun 2024 11:22:16 +0000
ROA not before: Tue 11 Jun 2024 11:22:16 +0000
ROA not after: Mon 09 Sep 2024 11:22:16 +0000
asID: 135542
IP address blocks: 209.209.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2c:c3:63:3e:1b:bc:91:05:c2:e6:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651
Validity
Not Before: Jun 11 11:22:16 2024 GMT
Not After : Sep 9 11:22:16 2024 GMT
Subject: CN=3f057b24-4723-4370-b937-9662811560ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:b8:c3:6d:cc:e8:f0:89:43:f0:ff:48:58:
54:5f:af:be:c2:8a:07:73:2b:db:4e:e0:3c:9f:81:
ac:70:88:49:f8:36:81:1b:59:8c:9f:1f:67:a0:68:
46:4a:a9:df:20:bd:0b:0b:76:2a:f7:8e:bf:92:72:
41:6d:70:1c:82:75:2f:a7:53:e2:37:39:84:70:16:
ad:6f:85:e3:1f:b0:32:70:8d:5a:12:04:ac:aa:8a:
ea:61:f6:6a:45:03:3c:fd:fc:01:d4:8d:94:22:bc:
d1:80:40:7b:6a:43:4e:c6:fe:ab:be:43:db:99:4a:
5a:50:6d:2a:6b:80:21:47:4a:34:cb:c9:06:35:47:
32:fd:4c:02:45:50:5b:69:01:a3:e3:43:bf:85:a7:
00:f3:58:63:72:40:1b:71:d7:09:87:7f:7e:f9:2f:
79:30:bb:06:09:d1:cd:c9:f0:f1:5d:78:ee:a9:0b:
b5:8a:1a:20:13:d5:8c:a1:e0:e4:f6:7b:5d:6e:35:
e6:5d:5c:d5:b7:97:20:24:d0:75:d5:a5:7d:40:74:
22:b4:1d:69:5d:b8:6a:50:8d:e7:04:78:f8:3e:d2:
73:f4:79:ea:d1:74:29:bf:43:83:63:fd:a7:17:e1:
64:a7:31:3a:e0:af:f1:ce:a1:ad:6a:1f:c7:4f:9d:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B5:41:A7:0E:84:4D:4F:BD:B7:CE:78:66:75:90:7E:00:94:B6:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/065ade74-4270-3930-8897-7e70588636d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl
X509v3 Authority Key Identifier:
keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:ee:19:90:a5:5e:db:2a:0b:47:7c:12:74:ff:12:aa:8f:fb:
a6:ab:40:a3:6d:e4:bc:d0:23:7d:9a:e9:fd:45:23:4a:97:8e:
3d:06:0c:8a:8c:00:3b:5b:81:e9:bc:7c:98:2c:c7:84:88:54:
e9:f7:46:f2:e8:96:18:ad:69:dd:03:ac:96:37:01:75:89:b7:
a3:fc:5d:ec:b9:74:81:d7:43:ed:e6:d8:d1:d8:34:fd:a0:23:
96:a6:b6:b4:61:10:ea:e8:05:c6:cb:3b:2a:35:3d:e5:f8:fa:
fb:1c:fa:25:be:cf:ff:8c:8b:da:29:a6:99:aa:fe:94:1c:bc:
16:22:b5:43:97:a0:39:2d:db:71:7c:ca:f3:4d:13:4d:2f:03:
9e:19:e1:8b:ec:d1:6a:92:7b:96:6b:c4:a3:31:6d:57:f8:86:
48:57:76:80:3f:d4:cd:a8:15:d6:cf:b6:b9:b5:8d:5a:16:3a:
2b:5f:9b:c2:54:fa:61:15:09:2d:d5:0b:87:ce:1c:87:7b:a3:
bf:fa:2b:86:8b:23:d3:93:c9:d6:69:87:fc:b7:f7:0f:1e:26:
87:d5:d4:a2:16:c9:ae:b1:93:90:f1:3c:6a:10:3c:2b:9a:df:
96:15:dd:f9:7e:d6:98:f7:c1:41:ec:44:83:c1:01:fa:6e:81:
d2:2d:ee:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:11:00 2025 by rpki-client