Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/fa2d8f92-a6af-32bb-b4e4-94d808a4a035.roa
File: fa2d8f92-a6af-32bb-b4e4-94d808a4a035.roa (raw, json)
Hash identifier: 7L4yzsqEm0AkLXt+Z3xn5Cf2USruQXHgLDe/rVFJSHE=
Subject key identifier: 29:D8:7F:4C:15:59:51:1E:DB:5C:6D:B7:7E:E8:9E:44:DD:16:44:ED
Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651
Certificate serial: 010D0C9F43285846837F877A0E7B2F20975A7700
Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/fa2d8f92-a6af-32bb-b4e4-94d808a4a035.roa
Signing time: Fri 12 Jul 2024 13:00:34 +0000
ROA not before: Fri 12 Jul 2024 13:00:34 +0000
ROA not after: Thu 10 Oct 2024 13:00:34 +0000
asID: 135542
IP address blocks: 209.209.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:83:7f:87:7a:0e:7b:2f:20:97:5a:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651
Validity
Not Before: Jul 12 13:00:34 2024 GMT
Not After : Oct 10 13:00:34 2024 GMT
Subject: CN=de5c57f5-5b35-4893-860d-1a43fd25c7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:8a:85:ec:b4:ab:6b:23:cf:70:87:f3:d2:
14:94:ca:1a:e1:a0:f7:eb:3c:14:a8:36:86:9d:cc:
99:aa:0d:46:0f:4b:de:d3:89:23:f5:87:3e:2b:4b:
30:1b:c7:ea:3d:d2:fe:0c:d9:73:a9:1c:6b:1c:71:
d7:d3:97:76:d5:d5:59:8d:5e:6a:d2:15:d5:90:c4:
6e:5a:e3:65:18:56:c2:5c:ad:7c:24:cd:d6:d2:8a:
77:ad:03:c8:70:48:28:53:8d:3b:85:c2:d9:5c:c4:
a2:fd:da:48:2f:85:a5:54:69:20:69:0d:cf:e3:3b:
69:6a:7a:0a:36:03:df:db:83:1d:25:8d:eb:9c:b1:
ed:7f:62:bc:02:4e:2c:5a:5a:2c:e4:e5:90:da:82:
ff:b7:9a:e6:01:cf:a0:0e:d3:97:af:0d:2f:d8:8b:
99:2d:8a:07:11:b8:b8:1a:66:90:e6:40:91:5e:88:
be:50:cc:00:29:fc:04:cd:53:ca:7d:2c:18:97:cd:
f6:1e:ac:50:e0:43:57:f8:44:f1:b5:7b:58:6a:ab:
eb:c3:0b:ea:b7:92:25:72:ec:5b:7a:aa:e3:9e:7d:
1e:26:77:e2:d7:c2:82:93:de:93:c5:92:23:20:85:
81:10:25:86:02:cf:66:7c:2e:38:ce:1b:bf:db:85:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D8:7F:4C:15:59:51:1E:DB:5C:6D:B7:7E:E8:9E:44:DD:16:44:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/fa2d8f92-a6af-32bb-b4e4-94d808a4a035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl
X509v3 Authority Key Identifier:
keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e7:c7:e8:97:08:96:9d:f1:44:59:97:98:a3:e0:d0:32:b3:
71:66:c9:b7:37:00:36:f4:e8:1a:0a:ab:19:8f:12:04:5f:d1:
12:df:07:f6:d1:38:a3:89:c3:76:84:d0:6d:c8:a6:4f:55:ba:
a7:82:2d:0f:dc:54:20:cb:17:d3:3e:23:dd:d3:30:b2:11:25:
fe:82:59:df:ad:71:2d:02:e5:a9:f2:3a:e8:83:76:7d:e5:63:
04:a2:77:2a:6b:f2:57:3c:09:a6:b7:95:32:ce:b1:23:51:af:
ad:56:82:b9:5b:d2:74:b3:e1:53:e3:c3:0d:b0:78:f8:84:47:
a6:05:b3:91:0c:cf:28:32:60:f0:a7:6e:69:90:f5:6c:77:9c:
8e:66:f2:aa:59:9f:1d:1a:a8:33:9c:f0:4b:05:da:62:9d:af:
1b:4e:00:b6:03:5d:3f:a9:51:5f:38:d4:9d:a8:89:4c:25:19:
90:ad:9c:20:55:01:ae:50:69:60:ee:e3:64:ee:f2:fd:5b:eb:
61:49:4a:8a:31:4d:62:e3:be:6d:cb:0b:4f:d9:10:81:ad:56:
8b:01:93:24:ea:f4:6f:7e:76:a0:82:d6:e5:94:42:7c:58:35:
85:1d:2f:02:86:dd:fb:9d:79:38:d6:29:a9:54:1f:ae:21:bc:
6c:cd:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:55:02 2025 by rpki-client