Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/06802bb5-8733-32d5-8e18-5ac80dcdc5ec.roa
File: 06802bb5-8733-32d5-8e18-5ac80dcdc5ec.roa (raw, json)
Hash identifier: fJt87rT3n7GtuuWzw2EqeUjQlfB0wAWHxuAlJtzcIIg=
Subject key identifier: AD:DF:55:95:59:45:30:76:2B:DE:EE:47:99:80:82:9B:B0:58:6D:46
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285845B54B03022364DD10D1B48540
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/06802bb5-8733-32d5-8e18-5ac80dcdc5ec.roa
Signing time: Mon 29 Apr 2024 16:18:32 +0000
ROA not before: Mon 29 Apr 2024 16:18:32 +0000
ROA not after: Sun 28 Jul 2024 16:18:32 +0000
asID: 13576
IP address blocks: 216.106.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b5:4b:03:02:23:64:dd:10:d1:b4:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 29 16:18:32 2024 GMT
Not After : Jul 28 16:18:32 2024 GMT
Subject: CN=601c2a72-2f3b-48b6-9992-75919be8fcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:07:0e:22:d3:f7:17:46:2a:2d:fe:cf:31:
ce:76:22:e3:e1:cf:40:bf:d8:f1:d8:2e:b2:11:0f:
dd:fb:ff:68:18:6e:d8:b7:29:74:5d:50:2c:d4:cc:
c2:29:62:b0:29:ae:e7:83:cb:81:44:72:92:17:17:
22:86:c0:b4:f2:a1:4f:3b:39:0b:b1:c4:fe:79:69:
3a:11:8b:f8:c9:ec:0a:80:20:d6:2c:4f:d1:21:a8:
5b:c2:bc:f6:71:9c:38:40:29:52:98:de:65:8c:82:
67:4c:c8:b0:2d:96:d5:e2:74:45:1c:7f:70:7d:bc:
2f:36:52:df:ab:a8:6f:53:7a:0e:69:70:f1:5d:77:
be:b9:bf:9d:9b:5a:d8:82:22:14:3e:f1:65:99:10:
09:88:c7:15:22:01:fd:bb:00:e1:32:e8:46:eb:3d:
8e:ec:85:80:29:9e:5b:dc:f9:a1:9a:86:27:e5:75:
d5:7a:45:bb:65:53:a2:70:a1:a7:9c:3f:f6:4d:0d:
9b:21:ec:53:f2:39:9d:a5:20:b2:23:96:1c:d8:e2:
77:95:91:d2:55:90:d0:f5:9f:74:f4:b4:ed:27:77:
c2:c3:82:c7:64:15:f1:d1:5c:6f:ef:71:d5:19:59:
43:d8:b9:e2:dc:52:64:a3:71:35:ec:68:68:c6:67:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:55:95:59:45:30:76:2B:DE:EE:47:99:80:82:9B:B0:58:6D:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/06802bb5-8733-32d5-8e18-5ac80dcdc5ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:4e:c8:c8:f7:1a:ee:32:b9:a7:7e:7c:cd:84:20:e8:be:8c:
62:a1:01:ba:6f:cf:2e:12:bc:ac:ed:f7:04:ae:2e:3e:e6:a5:
29:09:90:51:e6:08:d2:dc:e2:7c:46:36:17:35:39:da:fa:60:
ea:72:21:01:e8:c8:8f:ba:93:de:17:21:63:d8:14:6b:6c:b7:
bc:25:25:e0:d3:f6:e6:93:27:ea:71:bc:a7:f3:c4:70:bb:4f:
e4:af:0e:28:1b:42:d7:7f:8f:dc:2c:d5:83:17:66:ad:de:fd:
bd:4a:95:99:9e:bb:15:7b:43:bb:fb:3a:7a:c0:4a:c5:28:a0:
0b:79:fb:88:6b:ef:ad:68:12:e7:74:fe:a7:7c:43:d8:e9:a2:
e6:8a:b2:91:53:a3:7d:3b:2f:24:e4:86:b2:a5:15:e8:92:20:
f8:e3:a4:ca:34:4e:c0:d9:f0:aa:6a:4a:5e:1c:98:31:04:4c:
bf:7a:1c:6c:4d:be:e8:2f:ec:21:dd:fd:b2:e4:2c:53:09:7b:
6d:a5:23:90:7b:ae:e9:54:98:88:c5:8c:92:20:49:e3:7a:fb:
3b:64:d2:27:61:82:90:f0:8d:8e:99:b6:11:74:1b:52:69:3e:
47:dc:af:a7:05:18:20:ad:42:af:53:50:fe:01:d9:1a:00:5b:
e7:c5:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:46 2025 by rpki-client