Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/07d2177c-630f-300f-8e45-ee464c1699c9.roa
File: 07d2177c-630f-300f-8e45-ee464c1699c9.roa (raw, json)
Hash identifier: 2g/aX8Lnq3Op3RsXHY16ZaRhlX0Jaf0owR4a6v/QKec=
Subject key identifier: 6B:FF:60:91:8C:7D:C8:44:0B:E0:1E:74:52:0A:BE:08:0E:8A:D5:DF
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848467ABF5C9A351C11AEEEA720
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/07d2177c-630f-300f-8e45-ee464c1699c9.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 66.231.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bf:5c:9a:35:1c:11:ae:ee:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=39e6ff03-069d-4729-85b1-8e9accfb3f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:7f:f4:1c:52:e7:5d:83:e7:52:40:e4:81:
38:31:66:fa:d8:87:b3:bd:6d:95:98:00:8a:13:00:
52:fc:92:da:25:db:63:0f:59:b1:fe:b5:26:22:33:
e3:5f:bb:8e:a3:25:c8:f8:12:c3:28:8c:35:f8:94:
69:ce:ad:02:28:73:a1:91:db:06:74:bb:f6:f8:c3:
4c:79:ac:b5:8c:7b:39:a0:99:6f:61:5c:d8:55:0c:
63:e4:f7:6d:fa:53:47:54:c2:a5:02:2c:cf:a8:34:
37:06:ae:44:a5:69:27:c0:3a:90:31:da:b7:2b:9f:
bb:dc:23:f9:cf:69:c0:19:aa:e5:bc:bd:1f:65:cf:
e7:31:f7:27:c7:f4:9e:05:48:a5:6f:60:f3:90:43:
e3:c4:7f:db:dc:d8:b5:77:61:71:c7:33:a2:36:10:
0d:3e:b7:e4:a9:5f:77:b0:68:02:94:05:3a:3d:b3:
4f:28:08:8c:91:d8:e8:95:33:e7:4c:84:f6:fa:7e:
22:9f:a2:5c:15:15:f0:48:bf:26:73:4b:69:36:4b:
ea:39:cb:70:ef:10:e1:fc:97:f4:33:4e:a3:c5:05:
09:79:16:62:52:c2:f9:98:0d:7f:13:93:8f:87:3c:
9a:cb:a5:f0:2b:18:34:fa:84:13:2a:8e:3d:6a:02:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FF:60:91:8C:7D:C8:44:0B:E0:1E:74:52:0A:BE:08:0E:8A:D5:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/07d2177c-630f-300f-8e45-ee464c1699c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:24:b3:d0:9d:3a:2e:63:b1:77:2a:40:fd:a7:37:b1:1f:ae:
f5:bd:e2:4a:fc:d9:bf:3a:a7:e6:07:b2:ed:e6:be:3e:81:3d:
eb:20:37:c0:d3:ad:49:e7:a1:65:16:3f:6a:b4:1e:4a:38:9c:
04:28:8b:e3:be:ad:17:a5:6e:e3:45:f9:5d:0a:66:5b:0b:ed:
23:9f:c6:ed:77:15:be:7b:c3:b7:27:b4:54:56:53:ff:0f:1b:
d3:c0:e8:8b:93:71:55:a9:f0:36:5b:78:43:37:7d:ca:72:19:
8e:ae:40:1c:37:ff:68:2e:5e:7b:8c:54:6d:a0:ae:0e:95:cd:
fd:b1:0f:6f:eb:86:b8:4a:71:7e:75:5d:95:9f:81:89:7c:37:
ed:d7:61:1e:cc:9f:0b:ca:0a:d0:66:8e:13:b8:ee:47:aa:7f:
4a:77:62:8f:d1:58:ab:9b:26:24:a5:29:ad:8c:43:8d:65:a3:
7b:fd:45:71:64:1e:76:0a:51:88:ca:ba:a9:86:3f:ff:3b:f9:
6d:ee:45:67:4f:99:d0:82:ea:fb:9b:aa:58:e9:89:27:eb:b2:
41:b9:48:90:e5:00:f4:60:24:01:2c:1a:04:44:5b:c8:c3:73:
60:d2:dd:62:65:ad:37:36:d1:fb:db:e2:c0:d1:ea:6a:bf:7e:
55:77:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:56 2025 by rpki-client