Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa
File: 3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa (raw, json)
Hash identifier: uPLd0teq0S8Sj1nWxVfPe+VyQ2ElZ6jmnC8O2MiA2Hg=
Subject key identifier: DD:94:F6:07:0A:29:18:C5:BF:08:86:58:CF:E0:DF:9E:DE:13:C1:5E
Certificate issuer: /CN=45b0b374-863f-468e-a08d-342445e7a940
Certificate serial: 010D0C9F432858487FB5E23910B2F7DE6A6DCA80
Authority key identifier: 59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 63270
IP address blocks: 209.212.48.0/20 maxlen: 24
2604:9fc0::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e2:39:10:b2:f7:de:6a:6d:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b0b374-863f-468e-a08d-342445e7a940
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=2e3cb89f-f50f-47a4-af2c-1eab44ed8f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:7f:f9:63:63:7e:cc:7f:f3:3d:44:62:93:
bc:90:85:02:ae:1e:8a:43:ab:a7:c2:8c:1c:d7:8f:
37:06:4a:1d:d7:88:90:60:5e:d8:04:20:f5:10:31:
93:10:08:7c:46:f3:82:f9:c6:67:fe:f0:64:44:4d:
50:fa:d1:a1:6b:1b:f5:25:d0:12:06:5c:85:c0:8f:
67:42:4d:65:02:58:dc:02:b5:8f:7d:a5:3f:3b:ef:
be:2c:89:d5:a3:09:17:f7:22:1f:80:37:22:82:1a:
12:1d:9c:25:6d:06:ee:e0:ec:15:d3:08:e9:45:52:
a9:2d:3c:35:c1:a0:50:51:0d:9e:f6:e0:f8:7c:fb:
11:fd:89:85:d4:f1:f9:0e:dc:d5:cf:b1:7b:1d:8e:
cd:e6:43:19:7a:5a:64:b9:9b:33:93:34:26:ab:e4:
b5:68:28:f7:05:eb:07:0d:bc:d7:f2:5c:5f:3d:4f:
54:0d:23:d7:d9:ac:74:fd:57:95:0c:0a:cf:79:db:
79:17:09:fd:cc:67:e6:a4:fb:2d:a0:cc:dc:76:17:
f8:f8:53:7d:08:86:af:94:fa:77:ae:c4:cd:e0:56:
44:e8:23:25:a6:a8:f1:50:8c:b2:d9:06:17:e9:b0:
a9:cf:2b:3c:da:a4:25:8b:73:73:be:1d:dc:15:06:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:94:F6:07:0A:29:18:C5:BF:08:86:58:CF:E0:DF:9E:DE:13:C1:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl
X509v3 Authority Key Identifier:
keyid:59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
sbgp-ipAddrBlock: critical
IPv4:
209.212.48.0/20
IPv6:
2604:9fc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:27:2a:41:5a:8a:4e:02:8d:02:e8:e1:46:10:64:98:c7:bc:
b4:b9:4c:78:ce:c1:58:7d:15:a1:37:9c:68:c9:c5:89:2a:83:
76:a0:e6:fd:84:3e:90:14:ba:2f:dd:d1:58:55:06:0a:0e:e5:
96:83:d8:54:82:ba:1b:9f:a2:45:2e:b6:44:38:37:ad:b2:5e:
5b:0d:55:15:79:fc:a4:f8:9f:5c:b4:41:dc:8c:a6:ae:1b:bd:
ed:0c:e4:68:b3:dd:99:34:6c:11:cc:49:e3:7a:b5:2f:aa:ff:
93:1f:f1:b7:aa:f5:42:bf:09:04:2a:80:76:e9:df:03:eb:b0:
2f:1a:04:90:7b:e6:d1:c0:24:b7:a8:17:dd:f7:42:6e:6a:ef:
65:4b:f7:ca:d4:3e:68:98:aa:68:19:05:51:7c:c8:c8:bd:c8:
d3:b6:74:04:3a:04:d0:15:0c:c9:99:b4:f6:2f:cb:ba:fc:dc:
b5:05:6d:28:f7:83:1c:c3:98:e3:0c:84:29:d9:9d:05:43:d1:
67:f6:63:3b:15:ef:35:d0:2d:d6:d4:be:6f:0b:cf:d7:12:30:
34:44:fe:40:46:14:6a:32:75:aa:80:9e:66:6f:27:c4:e2:cf:
54:4f:90:fc:cf:73:6b:4c:0c:d5:9a:68:d9:cc:94:b3:d9:e1:
e3:99:19:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:16 2025 by rpki-client