Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/cc451789-ab4e-39f8-b3d3-643322b04b48.roa
File: cc451789-ab4e-39f8-b3d3-643322b04b48.roa (raw, json)
Hash identifier: 7fEunWSI09DddKYJ3mVm9hsY5vr5cSMcrztQpboEt1M=
Subject key identifier: 99:85:8E:B7:E0:3D:A9:B3:A4:5E:D2:F4:BE:28:8C:86:DF:2B:47:BE
Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial: 010D0C9F43285841F1788D6B41C84BDB2098DFE0
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/cc451789-ab4e-39f8-b3d3-643322b04b48.roa
Signing time: Sat 20 May 2023 10:31:02 +0000
ROA not before: Sat 20 May 2023 10:31:02 +0000
ROA not after: Fri 18 Aug 2023 10:31:02 +0000
asID: 3674
IP address blocks: 168.91.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:f1:78:8d:6b:41:c8:4b:db:20:98:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Validity
Not Before: May 20 10:31:02 2023 GMT
Not After : Aug 18 10:31:02 2023 GMT
Subject: CN=e10406e2-66e2-40d2-a373-3992db315c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:48:dd:74:d6:bb:a0:2a:6c:2f:b1:a5:01:
35:8b:a8:2a:21:9a:9f:99:b8:11:97:b7:a3:74:e0:
bf:74:0a:0c:63:02:0d:3a:fc:16:ba:cd:aa:53:dd:
08:34:e7:33:14:b4:12:44:21:fc:21:46:20:78:a6:
ce:2e:5d:5a:27:cf:36:62:19:48:fb:b0:db:3c:e8:
47:47:bd:87:b6:72:f0:47:35:fa:34:bc:3a:f4:b8:
d8:34:a2:43:26:e9:e9:2f:00:cf:fc:b3:3e:6f:0e:
25:42:2a:b3:1a:50:c4:82:4d:dc:25:10:a9:11:ad:
ac:8d:44:ae:9a:ba:ae:6d:29:51:fd:64:bf:ed:7d:
6a:dc:39:23:5e:57:0f:83:bb:5a:ae:07:34:d5:78:
b3:c2:b1:b8:d5:e7:86:56:df:94:eb:eb:ab:1a:81:
9b:83:39:c2:f4:36:28:ce:01:5b:71:16:1d:a6:e8:
0c:15:90:8d:9c:2b:85:5b:35:b9:b0:7d:c6:08:96:
e4:d7:de:9d:0f:f3:af:ed:b4:0f:14:aa:51:e7:2e:
73:c4:96:f9:6a:4b:e9:a9:34:c9:0e:3e:ef:e0:01:
9a:64:2b:c5:29:a3:93:03:d3:28:68:7e:b5:9b:41:
61:1b:75:12:b4:0b:09:f9:ed:f9:86:a6:10:5d:31:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:8E:B7:E0:3D:A9:B3:A4:5E:D2:F4:BE:28:8C:86:DF:2B:47:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/cc451789-ab4e-39f8-b3d3-643322b04b48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
X509v3 Authority Key Identifier:
keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:95:f5:1c:86:5c:b4:31:ea:16:89:78:7c:67:8c:dd:67:02:
ff:fc:7d:ca:fb:62:5d:c7:99:6a:5e:c3:2b:8f:12:7f:f5:0e:
7b:4c:0e:e4:df:c8:4b:a0:42:ab:f4:26:bb:f7:70:0d:08:ed:
47:fa:fd:30:0e:1f:de:29:64:98:89:f1:b2:df:9b:56:4a:82:
ae:9c:58:e5:83:fa:b5:b6:0d:9c:24:90:1f:28:df:7e:89:5a:
65:0d:66:43:c3:cb:9b:80:46:63:3e:8c:31:63:ce:3a:d0:80:
d0:a9:81:02:a0:fe:ee:d3:73:99:04:cb:a3:ad:5f:48:41:97:
bf:32:4d:05:92:b4:9d:95:41:ee:14:bd:76:92:87:28:5e:c1:
bb:bf:2f:ed:1b:2e:ed:a5:9d:09:21:11:c1:ad:c6:d7:e7:47:
00:be:19:8c:5d:15:57:0b:f3:0e:4c:5e:f1:04:2b:fb:40:53:
83:6e:17:7a:3a:79:49:da:8b:72:77:29:cb:0d:1e:38:eb:6a:
b1:8f:b4:cd:4a:63:51:c2:48:a0:fd:e8:8c:fd:96:dd:4c:d2:
60:47:bf:4c:f8:00:1b:15:b2:76:37:d4:2d:f8:7b:01:98:f6:
68:fa:7c:7d:c7:12:35:27:c0:cb:75:42:b6:d9:f6:33:b9:21:
62:7b:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:14 2025 by rpki-client