Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/2de02a7f-99ae-3b83-8426-ffd3aacd9728.roa
File: 2de02a7f-99ae-3b83-8426-ffd3aacd9728.roa (raw, json)
Hash identifier: oih5Ya/SGbw1yU8c12PsgGL49dlXLuLq7Z9tB8RLyRg=
Subject key identifier: 77:C7:C3:B8:33:93:3B:F7:D0:C7:82:88:BF:CF:25:53:64:01:44:CC
Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial: 010D0C9F432858451101CB73E3946E0058502780
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/2de02a7f-99ae-3b83-8426-ffd3aacd9728.roa
Signing time: Fri 01 Mar 2024 19:58:26 +0000
ROA not before: Fri 01 Mar 2024 19:58:26 +0000
ROA not after: Thu 30 May 2024 18:58:26 +0000
asID: 40545
IP address blocks: 72.18.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:11:01:cb:73:e3:94:6e:00:58:50:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Validity
Not Before: Mar 1 19:58:26 2024 GMT
Not After : May 30 18:58:26 2024 GMT
Subject: CN=0f224301-8f12-42f2-9e35-141808958175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:f9:07:c9:2f:b0:91:90:cf:19:a0:2a:a3:
27:37:3d:73:ff:bb:06:15:33:11:f7:37:72:a2:bd:
49:73:cd:f7:12:df:bd:b8:c7:a4:6b:43:b0:24:c5:
80:80:c2:32:d9:04:b9:89:a8:b2:f5:8e:9b:13:08:
53:d2:73:b3:79:dc:10:b5:0a:f5:a6:88:8e:ef:5e:
d8:2d:30:90:9e:02:85:98:32:6d:d8:e7:92:20:33:
33:0c:80:1f:14:48:af:68:a8:5b:a3:c6:9a:70:bb:
e1:09:6b:f0:a0:ee:b7:43:84:ea:17:78:dc:d3:45:
34:06:a8:ab:c1:c9:c2:cd:ae:64:bb:fc:5b:ad:de:
24:03:36:56:aa:57:0d:ea:40:0d:8e:30:48:b0:9b:
d9:fd:ca:b7:c5:23:cf:f5:47:c5:5d:f4:78:2f:3d:
86:1c:23:d8:3a:bf:f2:b6:63:5a:34:89:0f:43:2b:
8f:1f:c4:2b:93:3c:8c:5d:60:d5:b3:16:1a:0f:c5:
73:58:24:86:9c:67:2f:88:ac:d9:83:9b:b5:d0:eb:
ba:ae:db:8d:27:49:45:d7:5a:93:02:25:2d:10:f5:
63:19:6e:ec:a2:92:2c:e1:42:39:4c:72:c3:d0:02:
5c:67:2a:98:2b:4b:6f:78:52:5d:a1:b1:88:71:ca:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:C3:B8:33:93:3B:F7:D0:C7:82:88:BF:CF:25:53:64:01:44:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/2de02a7f-99ae-3b83-8426-ffd3aacd9728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
X509v3 Authority Key Identifier:
keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:b0:bb:27:a0:c7:3f:db:2f:cc:49:b6:2b:72:7b:9e:37:b4:
29:1a:55:b9:f0:64:34:62:c9:c6:12:52:29:bc:5a:41:80:56:
60:a4:0e:a8:1d:4f:f7:c5:08:ac:68:3c:30:e8:6e:0f:b1:b4:
0a:09:22:e8:81:b2:e5:b1:42:0f:4c:13:9a:4f:02:0d:dd:62:
73:a4:85:9d:67:08:2d:56:4a:50:59:e5:b6:3b:bd:56:65:6d:
49:27:91:87:b4:42:08:89:7a:f3:ff:04:77:80:66:0e:ca:81:
84:8b:81:ed:a6:5e:c3:ca:44:43:54:48:a8:44:54:c4:69:f3:
e4:bb:93:23:9d:45:06:58:45:99:61:84:ad:fa:02:02:64:34:
53:02:96:55:b1:29:d2:74:92:c6:63:fd:31:f3:b9:12:66:e1:
9c:02:62:65:0a:4d:23:70:43:8a:1b:af:ff:27:ed:7c:64:23:
4d:bf:3a:f9:95:07:a4:e6:39:a2:c5:12:55:8d:91:b9:ae:99:
dd:3a:86:62:41:4a:db:63:52:ed:1e:5e:56:d3:8f:58:b3:92:
70:7e:ed:82:96:9a:ab:35:45:27:0b:4d:64:53:09:e5:85:01:
39:6b:22:66:44:56:11:d9:dd:74:93:14:6b:93:0e:1b:28:8c:
6d:5d:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:10 2025 by rpki-client