Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/f6a53f74-246d-3188-8212-b5396d7f2a79.roa
File: f6a53f74-246d-3188-8212-b5396d7f2a79.roa (raw, json)
Hash identifier: E0riT45q2GsvRK2tICKwRwAVinBFU7dRkY+YGQXfLiY=
Subject key identifier: 3A:87:CD:22:5F:86:5D:D6:00:5D:35:60:E1:E2:D7:4E:4C:0C:26:DC
Certificate issuer: /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial: 010D0C9F4328584663648A4BAD22B47A89C39580
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/f6a53f74-246d-3188-8212-b5396d7f2a79.roa
Signing time: Mon 01 Jul 2024 01:00:25 +0000
ROA not before: Mon 01 Jul 2024 01:00:25 +0000
ROA not after: Sun 29 Sep 2024 01:00:25 +0000
asID: 16509
IP address blocks: 66.129.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:63:64:8a:4b:ad:22:b4:7a:89:c3:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Validity
Not Before: Jul 1 01:00:25 2024 GMT
Not After : Sep 29 01:00:25 2024 GMT
Subject: CN=8d6e88d2-c1db-4a74-a33e-8b94a6c85a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:0d:71:92:b0:ae:6a:59:89:d9:c9:56:44:
24:56:11:6b:6d:07:24:8a:49:37:7a:fe:55:73:80:
61:87:c9:1d:9e:94:07:93:ee:c8:2a:cc:1a:e9:2b:
94:0f:9f:89:0b:ef:c1:48:b6:f8:62:03:8c:8c:68:
23:d2:8f:1b:f5:6c:3f:f9:7d:ee:2e:d7:d5:b8:87:
9a:7d:69:eb:9e:02:e4:01:27:3a:b5:4f:04:2e:cc:
8c:e9:3a:3c:70:ba:b0:1a:08:e2:0c:84:0c:6c:11:
eb:7a:5b:c9:92:76:00:6a:29:51:20:8c:ac:5f:1f:
32:c5:d4:02:8e:87:d1:78:bb:4d:c2:4a:40:07:cb:
b2:0c:2a:36:4e:97:58:3d:28:94:77:40:6a:63:4c:
4a:0c:2f:52:a9:db:68:20:dc:1f:4e:e8:b2:4b:23:
dd:65:45:31:9e:cf:47:7d:9f:7b:4d:02:4a:d6:4a:
79:ea:03:30:01:9a:bc:31:58:40:bf:e3:4c:ae:40:
02:0d:2b:8e:f6:92:ab:ad:eb:e8:ea:5a:6b:38:f6:
d3:06:c3:32:f8:b0:bf:94:fb:6a:a8:e0:6b:fd:29:
a7:a0:03:2b:a6:8a:74:dc:9e:00:86:2f:bf:0c:bf:
70:46:55:42:91:f6:f0:58:6c:74:f8:06:f5:2c:83:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:CD:22:5F:86:5D:D6:00:5D:35:60:E1:E2:D7:4E:4C:0C:26:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/f6a53f74-246d-3188-8212-b5396d7f2a79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
X509v3 Authority Key Identifier:
keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
sbgp-ipAddrBlock: critical
IPv4:
66.129.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:e9:25:94:25:a9:20:8a:a3:ce:8a:51:53:71:56:4a:ac:4f:
b4:99:78:5c:89:72:93:8a:7d:2e:4a:c7:f2:45:09:5e:a2:45:
b3:5e:53:b7:1f:af:29:32:46:52:88:c4:8a:3c:32:79:80:08:
5e:5d:44:9c:c9:12:19:75:7e:a3:a6:30:cf:0b:89:cd:d0:4a:
00:1c:db:80:24:f9:4c:08:00:d9:39:07:41:e4:f9:d9:cb:1e:
67:0a:da:8f:cc:6f:f0:9e:55:3b:62:f0:a1:64:c3:96:29:29:
a7:7e:f8:89:00:f5:53:06:dc:26:55:94:f2:96:f2:7a:34:58:
21:73:c5:5a:9c:75:d6:76:e1:a7:7e:d9:dd:3f:6d:5e:52:77:
a8:1c:88:c6:c3:cb:75:1f:0b:64:f6:2e:62:fa:34:88:8d:7c:
66:8c:77:ef:6f:0f:c2:f8:52:36:30:22:f2:02:0b:4c:de:e5:
95:a1:7f:22:35:b4:de:8b:d6:3c:89:57:64:24:80:88:f0:9f:
0f:17:88:2f:7a:6d:de:fb:8b:0f:e0:f5:e2:7e:4e:0d:be:e6:
63:ce:78:a5:8e:6d:c3:0f:5d:d6:9d:6c:46:3c:23:99:40:7a:
5d:7e:2b:ac:c3:2a:31:90:a3:66:f2:74:fa:6d:b6:b8:0a:04:
73:f8:f0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:18 2025 by rpki-client