Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/df2d75a2-dda8-3a04-a80b-ba65314b41d5.roa
File: df2d75a2-dda8-3a04-a80b-ba65314b41d5.roa (raw, json)
Hash identifier: ifKn7xMKH/jlNDdVDC6skbasQTWBZBikTYpT9hr4/vQ=
Subject key identifier: DB:D8:8B:D3:66:EE:35:13:94:73:31:3D:CA:0B:37:08:07:6B:A7:8B
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285845809AEC4BDB0A7A3D9D3EE080
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/df2d75a2-dda8-3a04-a80b-ba65314b41d5.roa
Signing time: Wed 10 Apr 2024 19:21:42 +0000
ROA not before: Wed 10 Apr 2024 19:21:42 +0000
ROA not after: Tue 09 Jul 2024 19:21:42 +0000
asID: 399439
IP address blocks: 208.53.244.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:80:9a:ec:4b:db:0a:7a:3d:9d:3e:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 10 19:21:42 2024 GMT
Not After : Jul 9 19:21:42 2024 GMT
Subject: CN=68121df9-3e40-4341-9a7c-19b936210760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:dc:df:aa:c4:7b:e5:c3:50:96:c0:35:b9:
05:0c:3e:0d:c2:80:66:3d:c3:3a:48:4e:74:44:d0:
ae:66:ea:5e:b6:be:71:08:bb:9a:cb:ff:42:e6:26:
25:b9:5e:23:8c:64:50:12:90:94:b3:40:2d:99:f8:
18:5b:57:04:01:1e:cd:f5:44:78:97:c5:66:a9:98:
8c:ab:6c:d6:95:44:b7:cb:cd:f0:4e:d9:42:1d:f0:
6b:5c:33:03:e1:f2:64:20:b2:ca:53:f6:ac:24:b5:
5e:b9:61:75:d9:c1:c6:c4:6a:f5:cd:92:9b:1b:4b:
b0:30:9e:f5:e0:62:53:49:a1:28:c5:2a:0d:33:dd:
e8:2e:d0:b7:03:05:50:c0:8f:bb:f3:c2:2a:72:b3:
a0:8b:c8:c5:62:6e:ce:78:b3:c5:98:4f:bf:86:4b:
c9:b7:14:31:3a:70:4f:d5:02:a6:8c:3c:cf:de:67:
ab:51:03:fc:9d:6f:d9:08:68:2a:c9:9f:83:8c:26:
cd:c2:f3:71:45:6e:5a:14:d6:5a:a5:a0:52:63:d8:
4f:f7:0c:7c:40:d2:8f:94:d4:8f:ac:e1:92:db:d6:
f2:88:8b:4a:e5:c9:f6:4a:99:d1:7a:31:44:14:af:
8e:99:cc:92:35:3f:bf:6a:88:2c:8e:23:20:6e:93:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:8B:D3:66:EE:35:13:94:73:31:3D:CA:0B:37:08:07:6B:A7:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/df2d75a2-dda8-3a04-a80b-ba65314b41d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:79:29:44:b5:c9:af:78:53:b0:ac:c5:06:d1:d0:a5:52:41:
dd:5a:7d:2c:e4:09:d1:ec:c6:81:6d:3f:cf:f6:8f:75:53:64:
8a:56:9a:5e:26:6d:49:53:2f:23:d8:a1:38:48:25:ba:1e:58:
ce:8e:11:2a:59:e3:7b:87:52:cf:a2:79:13:5e:d7:92:55:3c:
f3:18:07:5a:7f:fc:15:6d:fc:09:ff:c6:0e:89:88:a2:68:09:
7e:10:be:df:ab:c7:f2:e2:48:7c:46:b3:04:cb:52:09:cd:6a:
9e:ed:6c:ac:16:65:0d:dd:0e:58:97:53:1e:20:31:8f:13:9e:
9c:d9:d0:c0:e4:53:8a:07:91:ee:5f:2d:ce:5e:3d:93:a7:34:
8b:e0:53:06:75:03:8f:fa:f6:a0:df:eb:17:d4:1b:61:92:cf:
59:c2:5e:89:dd:b4:43:e4:01:a6:b4:4d:93:19:16:f0:5d:9a:
a5:57:20:38:ae:da:2a:aa:f8:59:f3:10:97:57:b2:8c:60:99:
ec:80:18:82:0b:b9:89:ba:00:35:e9:c9:b0:94:59:ec:4c:8f:
7d:40:10:fb:b9:ed:67:15:1f:8a:3c:86:5f:87:7f:b7:55:25:
6e:c2:c8:bb:f2:ee:e7:01:ff:cb:c0:f3:4c:a1:3f:2e:9c:6b:
6d:34:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:20 2025 by rpki-client