Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b8599b1d-53bd-33cc-875f-cb00ef78e661.roa
File: b8599b1d-53bd-33cc-875f-cb00ef78e661.roa (raw, json)
Hash identifier: k+I5UQJsBI2cQcfStppaB58fhAJrHvyW5v9l6rRyKjs=
Subject key identifier: 9B:C8:68:58:2F:48:47:A9:61:CF:D2:0B:E7:25:9D:18:5C:0D:E8:05
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285845B54AD31919DD05B3622EDE80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b8599b1d-53bd-33cc-875f-cb00ef78e661.roa
Signing time: Mon 29 Apr 2024 16:18:09 +0000
ROA not before: Mon 29 Apr 2024 16:18:09 +0000
ROA not after: Sun 28 Jul 2024 16:18:09 +0000
asID: 13576
IP address blocks: 216.106.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b5:4a:d3:19:19:dd:05:b3:62:2e:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 29 16:18:09 2024 GMT
Not After : Jul 28 16:18:09 2024 GMT
Subject: CN=014c655a-6f4c-4abc-840a-ee04ea1999f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:c3:41:02:fd:af:e3:38:33:22:db:8e:cc:
b7:96:4d:9c:3c:0f:63:0a:3e:b4:5f:af:b5:02:52:
32:e7:7c:9a:1c:79:43:68:8d:30:8b:9e:b5:c4:64:
2b:74:29:03:a2:60:bd:9a:54:5b:18:93:66:35:6e:
75:b2:0c:c1:62:cd:c7:08:bf:14:a2:c5:18:04:2c:
8d:ce:8f:83:21:c0:50:f6:48:86:b9:e9:b9:d0:c3:
75:90:06:02:9d:52:38:b6:27:05:cc:c9:ef:81:9f:
a4:58:91:5d:e9:42:34:6a:56:2b:e8:26:58:2c:4c:
b1:b7:5a:f9:76:ee:1a:0c:40:b1:22:c0:f2:b2:ca:
6d:24:aa:8d:84:76:83:c8:87:b7:74:58:21:b1:42:
59:fe:10:dc:1c:4c:2e:a3:ca:60:2e:49:fd:6e:7e:
27:6a:c9:01:38:9c:06:b8:19:1c:01:cc:d0:bd:30:
07:22:aa:b6:3d:44:b5:17:60:f1:92:04:10:46:6e:
e6:98:94:cf:24:2e:58:74:3d:8d:62:4f:d1:54:31:
a8:ef:30:bf:1f:4e:00:a9:cd:66:5a:a4:3d:e8:cf:
75:bf:c4:ab:39:38:3a:c3:df:cd:90:ca:46:6c:75:
a8:86:90:37:ab:55:3b:97:7a:ef:45:9c:36:b2:a4:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:68:58:2F:48:47:A9:61:CF:D2:0B:E7:25:9D:18:5C:0D:E8:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b8599b1d-53bd-33cc-875f-cb00ef78e661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:71:c7:fc:6c:41:98:23:41:7f:1c:2e:04:ae:4e:8f:12:9a:
ae:f9:ac:38:eb:84:86:4c:1b:6a:b1:c2:d3:47:0c:e4:76:01:
93:30:9e:1a:4d:31:37:79:2c:4f:01:65:17:45:7e:2c:b2:4a:
63:84:db:e9:30:8c:2c:f5:59:40:4d:42:19:36:e4:9a:d7:58:
d3:eb:40:2f:7f:8e:86:26:12:e9:54:63:aa:80:da:94:78:e0:
bb:c4:1c:02:60:58:01:82:cd:75:1a:02:bf:c4:ec:cc:65:dd:
58:fa:a5:5c:48:b9:c2:0e:86:ca:42:56:e1:11:2c:86:7f:dd:
3a:c6:9c:ee:d4:b7:57:12:34:c4:42:a0:0b:71:11:96:67:60:
c0:78:69:24:f1:24:43:bc:3c:77:58:80:1c:7b:b3:a8:99:86:
32:85:4e:d4:73:a0:75:f6:7a:4f:a1:79:bd:fb:b4:85:19:34:
7e:1a:67:a9:16:5b:73:17:3f:b9:ce:01:7a:90:e4:18:83:77:
d7:6b:75:1f:f0:c6:12:67:90:48:12:c4:bd:5f:83:04:99:3b:
dd:38:fb:b8:24:08:09:eb:93:5d:ad:bb:3d:fb:72:f2:cb:6b:
69:f5:a5:c1:50:f6:e9:d5:0a:ad:ba:ab:fd:f6:26:02:dc:2a:
4d:82:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:01 2025 by rpki-client