Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/a68654ca-c2f9-3ac9-bf97-6e508a4ca838.roa
File: a68654ca-c2f9-3ac9-bf97-6e508a4ca838.roa (raw, json)
Hash identifier: sfhRlXD4gaqSD/qVwnjg8x3T7bEfZMQVjhBC5rjp6Wk=
Subject key identifier: B7:26:A1:68:58:A2:24:8D:60:49:A0:AE:6B:D5:F9:78:8F:A8:78:58
Certificate issuer: /CN=aa90ea59-501e-46c9-884b-8efb5caec147
Certificate serial: 010D0C9F4328584879CBAF89E4E36E440AB34FA8
Authority key identifier: 81:85:0D:C3:8E:84:DB:B5:B0:53:76:F1:B8:63:32:DD:1E:34:7B:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/a68654ca-c2f9-3ac9-bf97-6e508a4ca838.roa
Signing time: Wed 08 Jan 2025 11:10:06 +0000
ROA not before: Wed 08 Jan 2025 11:10:06 +0000
ROA not after: Tue 08 Apr 2025 10:10:06 +0000
asID: 132721
IP address blocks: 185.224.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:79:cb:af:89:e4:e3:6e:44:0a:b3:4f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa90ea59-501e-46c9-884b-8efb5caec147
Validity
Not Before: Jan 8 11:10:06 2025 GMT
Not After : Apr 8 10:10:06 2025 GMT
Subject: CN=3adc4f1a-8e5d-446b-ba2e-9abd09dc397b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:33:38:38:a7:5a:b2:05:0b:37:5f:c4:5b:cf:
a6:53:5e:75:92:6c:9f:96:ba:2e:a7:b6:73:6a:1e:
f6:cc:92:ed:aa:72:a7:23:d7:c4:1f:a4:81:ff:35:
1c:e5:1f:39:0e:49:96:76:5e:34:5b:b7:2f:8c:b1:
e0:84:95:93:3e:7b:60:5d:7e:1d:28:73:2f:05:23:
fe:c6:bf:1d:eb:29:ce:71:b4:95:d4:f4:4b:39:fe:
2f:c2:9c:50:7f:9c:94:80:a6:e1:b7:19:2e:7b:0a:
21:03:89:57:fe:b7:63:bc:ae:a5:fe:10:ec:16:23:
eb:42:c5:20:a1:82:86:9a:8a:ed:41:2b:70:e5:29:
f3:3a:00:fa:24:ac:4f:23:dc:2c:41:a2:36:01:4b:
d1:ea:6e:d0:98:5d:b8:0e:19:95:08:af:2c:aa:a7:
8f:87:ba:43:13:ab:f6:cf:86:1f:32:8e:96:c0:a1:
93:14:71:7b:e0:32:c1:28:ff:8a:7d:b9:0a:b8:6e:
40:33:ec:e2:63:92:16:fe:18:d2:97:fb:98:6a:fe:
b9:51:5b:c1:67:fd:6e:1e:30:19:93:db:22:f6:eb:
6b:96:95:d1:72:da:df:47:ba:71:42:34:11:c5:20:
17:e5:f2:85:ab:ae:44:e8:c4:79:2a:07:e3:06:3c:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:A1:68:58:A2:24:8D:60:49:A0:AE:6B:D5:F9:78:8F:A8:78:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/a68654ca-c2f9-3ac9-bf97-6e508a4ca838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.crl
X509v3 Authority Key Identifier:
keyid:81:85:0D:C3:8E:84:DB:B5:B0:53:76:F1:B8:63:32:DD:1E:34:7B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer
sbgp-ipAddrBlock: critical
IPv4:
185.224.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:d8:5d:0e:fc:e3:50:67:15:15:e6:ba:98:83:d9:d4:f9:ec:
bc:ee:e2:cc:66:f8:1e:3e:c7:19:05:1f:5c:f7:9b:0f:03:a7:
a8:ef:53:ba:0e:57:42:57:e7:14:ae:d5:90:3c:d2:e3:01:18:
44:29:08:fa:a3:49:35:c4:e7:85:2a:0d:98:ae:e5:a5:0b:5e:
c3:6c:7b:66:5c:50:cc:8c:cb:fa:fc:1a:ff:60:1a:5a:7c:22:
1d:33:7a:36:00:2d:91:7f:b0:52:e7:85:96:b2:32:16:d3:9e:
c9:b9:8c:19:cf:a6:40:1b:df:81:fe:1f:4c:31:b7:04:4b:26:
1c:01:23:3f:4e:ed:e2:d0:56:58:c5:4e:94:00:22:7f:69:2d:
0a:b7:0f:34:d7:9f:98:ae:e4:d0:a9:b6:4b:28:d9:62:54:24:
fe:20:5d:fd:0c:63:60:d4:82:a1:1e:22:b1:33:1d:dc:2f:83:
22:4c:3b:d6:39:cb:71:35:82:19:46:98:23:78:fd:98:8c:9f:
d0:18:9f:67:cc:bc:77:1d:ea:d2:40:8d:76:b1:fd:9a:0b:d6:
a6:f7:7e:74:08:28:3a:0f:7a:34:82:d7:c8:7a:40:33:d0:fd:
6c:27:30:bd:81:86:2b:39:10:80:3c:88:58:6d:fb:a8:34:15:
c0:7a:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:25 2025 by rpki-client