Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8a0d15b9-83a4-3965-bafa-8fb6ad999955.roa
File: 8a0d15b9-83a4-3965-bafa-8fb6ad999955.roa (raw, json)
Hash identifier: uO/kews8l34CLlgGX4x7jW523zQeMvzTFxtPSLPGLJs=
Subject key identifier: 4C:B2:7D:AA:69:40:01:77:00:F7:EB:61:F2:16:8C:12:A0:C4:1B:85
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858459486280ECCD12ACDCE26E180
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8a0d15b9-83a4-3965-bafa-8fb6ad999955.roa
Signing time: Wed 17 Apr 2024 22:36:01 +0000
ROA not before: Wed 17 Apr 2024 22:36:01 +0000
ROA not after: Tue 16 Jul 2024 22:36:01 +0000
asID: 13576
IP address blocks: 66.128.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:94:86:28:0e:cc:d1:2a:cd:ce:26:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 17 22:36:01 2024 GMT
Not After : Jul 16 22:36:01 2024 GMT
Subject: CN=8a991e8b-ac81-4da8-9e5b-3cb255af1086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:2d:0d:c9:7b:06:c2:b3:86:2a:8a:d9:ac:
e4:67:8c:b2:20:6e:ea:0c:f2:00:9e:9d:cc:39:fa:
70:a8:12:78:f3:c6:98:90:cc:d5:4b:b0:97:4f:85:
96:0a:39:7b:cc:3b:af:00:ee:20:4f:e3:a3:af:f7:
dd:6e:85:95:51:b0:9d:a2:3d:d2:5f:ef:82:59:69:
ad:29:b9:ac:4f:04:cf:fb:c3:b7:12:95:81:0b:15:
f3:9b:bc:05:e1:7b:1f:4a:e9:63:0f:92:b5:d2:2f:
0a:e4:c0:d7:91:7d:c9:20:62:86:08:8f:2d:52:a6:
07:7f:60:2d:80:94:9e:9b:ec:03:b4:7d:13:ce:8f:
07:fc:e5:e8:18:f2:61:33:fa:2f:7d:dd:fb:fa:a2:
4f:48:60:1f:a8:73:08:b3:97:da:6a:16:d0:72:cb:
de:d5:0a:17:73:ff:fd:2f:f3:03:23:96:ce:ba:5e:
c4:74:54:0b:8f:eb:1f:65:ae:3e:c1:90:34:c2:67:
57:d4:35:24:0c:05:b2:84:01:0d:f7:db:c8:e8:fb:
52:0c:49:dd:1c:b9:8c:f2:cc:dc:12:4b:b3:51:1a:
29:4b:20:e8:12:63:44:ea:24:37:99:5a:68:1b:9f:
fb:2c:ac:05:95:cf:0d:c1:70:44:87:2e:2a:c5:13:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B2:7D:AA:69:40:01:77:00:F7:EB:61:F2:16:8C:12:A0:C4:1B:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8a0d15b9-83a4-3965-bafa-8fb6ad999955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:3e:8e:76:0e:da:08:93:db:cc:bb:61:4e:57:c7:a7:32:4f:
29:16:f4:20:bf:78:89:e8:34:50:03:f0:70:e9:30:9b:8c:87:
b9:05:97:c6:52:77:7c:91:0a:1d:ee:ec:99:ca:bc:f5:f2:7c:
7e:dc:2c:e1:1d:32:c0:bc:5c:4f:43:15:a6:a8:0a:d1:71:f2:
07:0a:56:46:f8:86:e0:fe:32:83:a7:74:6a:7f:ab:d9:fa:e3:
43:b8:a9:cd:de:66:47:6d:b4:64:18:a1:a9:31:d0:fe:68:6a:
78:1e:9b:09:9d:e9:46:56:e1:5d:cb:62:b9:f3:81:44:bf:d6:
92:43:8b:c7:80:e7:27:0a:2b:2c:40:f8:29:a8:cd:13:15:ed:
4b:56:55:e8:ba:8e:27:97:70:34:b7:a8:97:3e:68:92:77:0b:
0e:75:53:7e:e7:79:48:48:23:3f:38:28:a3:8e:9c:04:54:28:
a1:02:60:65:cb:a7:2c:49:d7:5c:88:35:13:4e:89:2e:dc:a7:
22:48:49:c6:8e:de:30:fb:d6:8d:9f:0a:da:c6:04:e7:74:42:
f2:8b:b8:8e:f6:a5:58:c0:6e:a8:c0:4e:6d:49:24:b3:f4:2f:
97:b9:fa:01:4c:fb:d7:33:fc:1a:4c:5d:96:00:64:dd:8e:6d:
57:ae:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:57 2025 by rpki-client