Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/991be721-3b7d-3171-b977-4ed5999882be.roa
File: 991be721-3b7d-3171-b977-4ed5999882be.roa (raw, json)
Hash identifier: d0ql2iB5Auik9EggsCsJKdEERmMQp65eMkGbuRCGX8I=
Subject key identifier: 8B:1C:B2:26:44:11:FA:2F:16:6B:D3:A0:7D:53:49:DF:99:A1:98:17
Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f
Certificate serial: 010D0C9F4328584755522005A49E10D13D1799FC
Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/991be721-3b7d-3171-b977-4ed5999882be.roa
Signing time: Wed 25 Sep 2024 16:49:08 +0000
ROA not before: Wed 25 Sep 2024 16:49:08 +0000
ROA not after: Tue 24 Dec 2024 17:49:08 +0000
asID: 4393
IP address blocks: 204.52.234.0/23 maxlen: 24
209.251.198.0/23 maxlen: 24
209.251.200.0/21 maxlen: 24
209.251.208.0/20 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:55:52:20:05:a4:9e:10:d1:3d:17:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f
Validity
Not Before: Sep 25 16:49:08 2024 GMT
Not After : Dec 24 17:49:08 2024 GMT
Subject: CN=882011f3-29e1-4882-ad68-8bd6919c4800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:06:bf:1c:5f:57:77:50:33:7f:01:92:13:
19:d3:e0:d4:4d:6d:7d:51:dd:1c:4a:a0:0d:8b:3d:
69:1b:6d:c8:38:6a:02:97:fd:24:f2:15:0e:46:d4:
eb:3c:b9:3b:6c:ef:1a:cd:e3:95:29:9c:d0:7e:c0:
5c:ef:56:78:12:79:e4:03:05:dd:a7:6d:21:66:ac:
10:03:51:c8:08:63:32:41:1f:17:c1:72:91:55:e3:
b7:1b:17:c0:2a:dd:d4:07:6c:62:f2:8a:79:62:6d:
4f:c1:56:d1:47:39:95:38:1a:e5:e4:25:fd:a1:c5:
45:1e:3b:2a:85:a9:51:fb:21:a8:0e:a4:a5:44:95:
82:94:70:3a:ea:27:f8:58:a7:b5:09:e9:44:6a:b4:
1b:6f:52:e4:b1:4b:35:90:5a:6a:e3:c1:24:e8:77:
06:f7:5d:13:ca:25:67:b8:43:13:f2:40:c7:e9:ab:
38:70:4b:2d:2a:e2:53:bd:d8:1d:ac:86:00:4b:a2:
f9:84:08:c5:5e:d6:6b:ad:e5:80:d0:86:29:31:18:
8c:ba:82:8b:50:30:ea:1d:67:10:2a:75:28:ba:de:
42:5d:59:08:45:8b:a1:16:7f:c6:c8:f9:80:7d:4c:
f4:75:8f:23:e8:08:d1:b2:8e:2b:c8:04:7a:2e:86:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1C:B2:26:44:11:FA:2F:16:6B:D3:A0:7D:53:49:DF:99:A1:98:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/991be721-3b7d-3171-b977-4ed5999882be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl
X509v3 Authority Key Identifier:
keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.52.234.0/23
209.251.198.0-209.251.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:f1:e1:8a:e4:3c:f7:85:79:a7:1a:b9:28:f9:a0:8f:5a:04:
9a:68:7e:f5:98:f6:d5:c5:5f:c6:69:57:57:c0:8f:d1:90:52:
eb:1a:3e:63:a0:55:21:e9:9e:93:47:d8:6c:14:51:5f:4b:a0:
c6:bc:e8:77:55:81:f8:7b:4a:df:67:cd:1d:ff:06:d9:23:09:
b5:04:e4:db:88:ee:7b:5d:62:9f:81:f5:62:c2:24:7d:06:7c:
4a:93:19:ef:45:f1:ed:e1:bb:09:35:54:55:6d:d2:2e:02:2d:
ed:6c:5e:fc:ae:e9:55:80:56:c0:6d:9c:58:9c:b0:15:17:14:
3c:50:d0:95:a0:a9:54:12:3e:0a:73:ae:a0:e1:70:62:34:46:
f3:d7:d6:ba:29:29:8a:30:be:83:a8:19:70:3d:a0:a0:17:a5:
d0:99:a7:95:aa:ef:2c:69:36:c9:1d:b8:f3:5c:b5:fc:f3:dc:
d9:82:c8:e9:ca:ff:03:6d:25:f6:a8:98:1b:dc:f2:75:e5:c4:
20:20:f5:a3:5e:30:b9:a2:bb:e5:fd:22:c8:71:df:6b:ee:a2:
41:09:63:30:b5:89:27:8f:98:87:eb:c8:79:9a:b8:43:15:27:
b4:48:42:08:7b:6a:68:ab:64:40:ee:ae:79:43:d7:0a:86:15:
4c:ba:d1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:07 2025 by rpki-client