Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/64c13746-53a4-3264-bca0-1645b4f2547f.roa
File: 64c13746-53a4-3264-bca0-1645b4f2547f.roa (raw, json)
Hash identifier: m21WA+wNd7Y+9fbLGnCL1xGp+K93kVYEaf6WyZAxxt4=
Subject key identifier: 32:2A:7E:C0:F5:A4:9C:ED:54:E4:95:C9:1C:F2:AB:50:98:D9:BF:E4
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F4328576D51CC73C042CFC17056609902
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/64c13746-53a4-3264-bca0-1645b4f2547f.roa
Signing time: Tue 18 Feb 2020 03:38:56 +0000
ROA not before: Tue 11 Feb 2020 05:00:00 +0000
ROA not after: Sun 22 May 2022 04:00:00 +0000
asID: 40568
IP address blocks: 149.112.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:56:60:99:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Feb 11 05:00:00 2020 GMT
Not After : May 22 04:00:00 2022 GMT
Subject: CN=968b4721-a1c7-4526-bed3-4b50e9d7cd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:0c:87:c3:4b:20:e7:e5:20:79:e8:27:76:
19:07:b6:41:bb:e6:f7:87:dc:41:6e:2b:6b:94:0a:
d2:d6:29:38:66:68:51:ef:93:aa:83:d1:b9:b2:47:
00:fc:5a:ae:1d:d8:70:e8:fd:1a:8e:1d:97:8c:50:
bb:6f:be:ad:69:31:93:e3:3c:a9:e8:e9:f0:a5:c6:
f6:92:50:02:77:e0:3c:5d:48:4a:d7:77:96:60:89:
52:e0:32:9f:b0:9b:93:33:b7:e1:3f:17:95:56:fd:
6b:a1:13:e0:75:99:59:4a:97:e9:81:a4:7d:04:a8:
17:3e:a3:0d:b5:7a:aa:23:28:21:fd:47:6e:69:2a:
0f:0d:e7:67:1f:88:cd:c8:50:35:e9:74:e1:4f:1d:
b3:ea:2c:70:ec:48:b7:11:84:5d:7e:83:46:ca:b4:
db:06:0d:39:38:5b:2e:56:7e:00:d6:a7:6d:be:a8:
be:7f:f8:6f:43:6c:f9:44:67:92:91:5b:70:f5:b0:
76:88:e9:97:fe:19:dd:60:06:3e:0a:07:6b:e3:a7:
77:c3:04:69:fa:ad:2c:90:46:c0:cc:60:a9:78:6e:
49:80:78:08:45:bb:da:dd:49:0e:30:e2:9b:8e:d9:
2a:04:57:6d:29:11:d3:24:b2:68:95:f7:0f:1c:52:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:7E:C0:F5:A4:9C:ED:54:E4:95:C9:1C:F2:AB:50:98:D9:BF:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/64c13746-53a4-3264-bca0-1645b4f2547f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e6:99:01:e5:8d:91:bd:75:8f:9e:71:b9:7e:70:15:3c:85:
39:77:46:d3:5f:0f:28:a5:a4:19:96:8a:4d:28:e0:68:37:1d:
de:da:61:c6:20:f4:19:4d:7e:40:ec:2b:42:79:e0:1f:88:06:
d9:f7:d4:2c:7a:17:bf:61:3f:cd:34:7e:8d:7c:e9:23:d3:8f:
f4:70:19:94:cb:76:1e:2a:50:2d:cf:ce:16:2c:95:9f:cf:bc:
c1:22:0c:0a:6f:4e:e0:df:c9:da:ac:ef:b9:84:5d:72:9c:21:
20:11:eb:ea:49:a1:4e:84:ba:8e:49:19:61:76:91:b5:84:f2:
89:35:f6:00:0d:c6:e4:d9:d8:e7:9c:d5:f7:74:7b:d2:ee:d4:
24:78:0e:f0:0c:f0:98:8b:80:84:8a:b7:db:3f:1c:90:de:2f:
f1:a1:7f:12:98:c2:af:01:78:93:e2:20:00:55:a9:8a:5b:67:
40:98:00:8c:f0:c9:24:45:ab:38:e7:40:fa:65:af:9a:ce:ea:
3c:78:28:03:32:66:ac:43:ea:8a:6e:fc:1f:26:9f:30:5b:cf:
44:69:82:ae:c0:d4:1a:13:41:ae:60:d8:2d:e8:0d:7f:d1:cc:
4f:a1:28:16:98:dc:48:1e:dc:c7:d5:71:89:cb:6a:0c:eb:5b:
b9:a2:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:49 2025 by rpki-client