Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7c39774c-025f-3779-8e75-e7a887687551.roa
File: 7c39774c-025f-3779-8e75-e7a887687551.roa (raw, json)
Hash identifier: mDx6FOKH6KpPPRtdFre0tSddpAKqRChO+bFNIHoplFg=
Subject key identifier: D0:16:C9:81:A6:DC:DE:6E:D5:B5:C7:A4:A8:87:7F:F2:3B:A0:58:8F
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858457D8CE98D5177DBBC6D35BE00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7c39774c-025f-3779-8e75-e7a887687551.roa
Signing time: Tue 09 Apr 2024 17:06:02 +0000
ROA not before: Tue 09 Apr 2024 17:06:02 +0000
ROA not after: Mon 08 Jul 2024 17:06:02 +0000
asID: 399439
IP address blocks: 64.33.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:7d:8c:e9:8d:51:77:db:bc:6d:35:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 9 17:06:02 2024 GMT
Not After : Jul 8 17:06:02 2024 GMT
Subject: CN=5ea06087-900e-408e-abb6-20de85e8561b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:10:03:47:c5:89:43:2e:82:c9:dd:a5:0a:
8f:e7:f5:6c:e1:2b:91:7b:60:fc:6a:47:ef:b9:5a:
15:16:1d:19:78:bc:0f:df:db:a2:ad:3f:67:45:c3:
4f:16:96:f5:3b:ff:2d:7b:62:7d:52:31:11:9f:8c:
24:cb:5d:09:23:c7:86:ae:7a:ba:3d:f6:2c:65:64:
a8:b8:d7:5e:1a:cf:16:93:65:b3:8a:ea:3d:19:25:
6c:7f:fe:27:10:84:a8:cb:c3:4d:1e:be:dc:60:47:
8e:91:fd:fd:9f:ff:be:c8:b3:c8:03:53:cd:72:5e:
79:c4:bb:0e:51:76:8e:1f:fd:83:3a:1b:db:6c:dc:
9a:16:d9:87:ea:c6:44:22:bd:24:71:52:e8:bf:38:
90:ba:bd:09:62:ca:62:e7:28:fa:07:ba:3a:cd:f2:
ac:14:72:d2:c1:d8:ba:b5:97:26:a3:09:c3:ef:1c:
aa:25:0a:71:5a:8d:89:57:78:2b:d2:51:73:b2:ad:
66:b2:37:63:08:21:ba:50:88:b5:c7:18:ed:2e:7e:
11:51:30:df:66:f6:1e:4f:a0:90:d1:2d:59:39:b4:
59:df:19:5d:91:3a:09:12:6d:82:d8:38:30:03:a5:
0d:64:be:c9:99:57:81:fe:34:7f:4d:c9:f7:6f:42:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:16:C9:81:A6:DC:DE:6E:D5:B5:C7:A4:A8:87:7F:F2:3B:A0:58:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7c39774c-025f-3779-8e75-e7a887687551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
64.33.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:22:91:f1:2b:bf:f0:05:df:b8:bb:b6:c2:4f:57:09:9f:96:
de:7c:53:dd:ab:d8:dd:be:e2:49:8d:fd:ba:dc:03:34:13:0e:
4b:06:c1:f8:47:79:d2:f5:20:15:33:55:d2:df:0a:c9:c2:f6:
e0:69:9d:43:56:10:94:72:18:96:00:11:3b:7e:52:2b:c1:77:
d7:c4:a8:f4:86:f7:99:4d:1e:d9:cf:6f:a3:f1:01:4e:97:63:
8b:30:c7:e0:ab:b7:1e:ed:28:5c:36:b0:82:2f:1d:b6:35:0b:
af:1e:d5:e5:41:6f:f7:97:40:b6:81:d0:6a:58:2e:a7:cd:4a:
29:7e:57:f3:19:4c:a0:72:ca:48:8c:18:4c:65:4f:64:dc:aa:
6f:cb:9d:c0:60:a8:64:80:83:fd:6a:28:cd:70:7c:36:9d:13:
32:b2:e8:78:9e:74:76:92:5a:a3:2f:ff:b4:ba:d5:fb:70:00:
18:e9:cc:f1:e4:53:5b:c4:55:7d:40:fb:07:57:fd:42:f2:8d:
21:21:f6:a2:b8:d7:5a:4c:13:4f:12:ba:7e:65:26:ce:99:d2:
c3:68:01:ae:8c:57:17:79:a0:5c:dc:61:05:00:32:b4:e5:f0:
ca:78:30:79:3a:9e:1d:fd:34:db:34:b3:fc:fc:40:44:e2:48:
fd:c6:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:45 2025 by rpki-client