Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/61668900-194a-33c0-9973-0a919bad799a.roa
File: 61668900-194a-33c0-9973-0a919bad799a.roa (raw, json)
Hash identifier: Ms2yOxJqufSDXSAXK/yJBLOw8ak4MTK99l+poJ72hy0=
Subject key identifier: 92:96:11:D9:14:5D:86:FA:62:AA:0F:62:36:5B:94:F6:9D:08:B5:90
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858458376A3AD0B3565DD95A3D100
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/61668900-194a-33c0-9973-0a919bad799a.roa
Signing time: Thu 11 Apr 2024 19:56:01 +0000
ROA not before: Thu 11 Apr 2024 19:56:01 +0000
ROA not after: Wed 10 Jul 2024 19:56:01 +0000
asID: 393417
IP address blocks: 66.128.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:83:76:a3:ad:0b:35:65:dd:95:a3:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 11 19:56:01 2024 GMT
Not After : Jul 10 19:56:01 2024 GMT
Subject: CN=da750505-393a-4635-ad39-d3525aa0a4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:4d:09:8e:b4:96:c2:99:4b:40:ba:39:ce:
80:d4:38:15:de:52:9d:5d:d0:76:8b:b6:28:27:60:
c9:bf:47:36:90:51:23:d3:25:49:9f:1c:33:3c:77:
74:59:eb:00:5b:ae:8e:ea:47:5a:ce:f5:82:a3:b1:
3f:ff:5a:28:a7:83:8f:a9:55:a8:7c:3e:69:a1:44:
07:84:b1:44:2c:e5:9d:6a:75:c2:5a:92:9a:64:db:
aa:84:cf:b5:fa:50:12:21:17:41:3b:a0:99:86:e6:
04:e6:3e:7a:be:70:6b:c5:eb:d1:ee:b0:5e:e4:71:
6b:da:0b:db:c2:39:d4:d2:50:20:20:d6:e2:33:3a:
35:8c:5c:c8:8c:89:1e:c5:07:1f:0c:8a:0a:21:e8:
ba:a1:91:db:45:be:26:63:34:6f:82:c8:3a:29:8e:
84:1f:2c:32:c8:bd:ee:e6:e6:0e:9b:ff:4a:76:e4:
5c:8c:1f:03:52:0c:12:02:15:cf:1a:13:87:ed:55:
34:dd:0d:d9:53:a7:6f:88:8a:d2:72:88:fe:09:60:
73:f2:53:3c:ff:de:af:6f:07:67:d0:58:f0:23:6a:
7a:53:d6:28:73:ca:ba:a9:39:0c:9f:e4:4d:95:80:
c0:41:6c:07:31:68:a7:2e:4c:6f:d6:a2:08:a2:6c:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:96:11:D9:14:5D:86:FA:62:AA:0F:62:36:5B:94:F6:9D:08:B5:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/61668900-194a-33c0-9973-0a919bad799a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:4c:45:7f:8c:24:ef:47:18:72:bc:7a:1f:bf:3b:23:d9:6e:
bb:5b:f8:8c:cb:65:b1:bc:8a:f1:59:fc:76:8e:c3:83:b6:68:
14:32:b7:31:07:1e:c6:d8:c7:f6:39:4b:18:b4:0c:5c:e8:32:
ce:5b:92:bb:d1:d8:67:a8:45:f7:09:ff:02:5c:59:32:8e:9e:
79:b8:20:01:25:54:03:8c:a8:1d:5a:84:76:5a:2d:ff:b5:0d:
a9:fd:05:6a:db:92:41:03:60:87:e8:ae:68:80:95:07:97:81:
37:b2:cd:f5:98:ca:e1:54:91:93:e2:4a:53:b1:b7:58:56:6f:
94:13:27:6d:b9:5e:85:4f:f5:10:8f:c2:65:80:0c:f8:9d:1f:
87:4f:71:80:a1:0b:f9:2d:ac:99:3c:3a:e3:62:a1:05:e3:16:
d0:38:34:d4:bd:b5:ab:7b:10:bf:85:52:63:5f:5b:93:79:c1:
a4:4c:c3:76:c3:ba:92:9d:86:8e:d7:51:53:6f:9e:1a:65:4e:
01:18:46:22:c4:32:c0:c4:c4:89:81:2e:05:f5:7b:22:20:26:
6c:ff:82:ea:d0:b2:61:a5:93:53:94:9e:cd:3b:1b:5f:5a:85:
d4:e4:f7:4f:fd:18:9e:24:bd:c9:97:79:9b:4b:75:a7:54:a9:
79:00:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:51 2025 by rpki-client