Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/857dc5e5-a2c3-34be-9ec8-1bde80a3068d.roa
File: 857dc5e5-a2c3-34be-9ec8-1bde80a3068d.roa (raw, json)
Hash identifier: 9AA1DxuKeO4rwsrOVzx8en8zvkkmxhoahmgYLO2n7iI=
Subject key identifier: 30:FF:97:D0:C9:45:7C:45:53:EE:F5:B0:89:15:FB:B9:07:E5:53:88
Certificate issuer: /CN=58551ca9-c834-4e94-9452-385a3685aa05
Certificate serial: 010D0C9F4328583724B9F25B84397F0A67C16B80
Authority key identifier: A6:24:61:55:FC:1B:55:C3:F2:C7:22:B7:0D:54:55:94:CD:8F:02:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/857dc5e5-a2c3-34be-9ec8-1bde80a3068d.roa
Signing time: Tue 28 Apr 2020 04:00:00 +0000
ROA not before: Tue 28 Apr 2020 04:00:00 +0000
ROA not after: Mon 05 Dec 2022 05:00:00 +0000
asID: 13335
IP address blocks: 170.39.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:24:b9:f2:5b:84:39:7f:0a:67:c1:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58551ca9-c834-4e94-9452-385a3685aa05
Validity
Not Before: Apr 28 04:00:00 2020 GMT
Not After : Dec 5 05:00:00 2022 GMT
Subject: CN=984e6a63-bd8a-4373-87c4-d7471670413a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:e1:4a:5c:f2:d3:e0:ee:ee:72:42:ea:89:
b4:d2:98:ed:bb:78:3c:64:aa:98:0a:3d:5f:67:b8:
44:75:6b:b8:b4:30:be:6f:0c:71:aa:aa:21:3b:eb:
35:6e:de:ec:39:2a:8c:16:56:95:cf:76:35:db:5b:
22:cb:7a:da:c9:1f:8a:02:46:85:8e:73:de:8f:01:
c9:89:ae:0b:a3:e5:60:83:f0:22:ad:b5:b8:a1:f0:
85:3b:a1:ff:92:11:07:bf:be:89:93:e8:21:59:4a:
20:9c:4d:f1:f6:c5:4b:58:bc:4d:c2:3d:11:ca:52:
b3:62:8e:17:a2:ab:62:9a:9b:a4:72:e9:98:f2:9f:
32:a6:8a:b9:c8:2f:24:ae:f9:3f:3b:96:10:79:5e:
fd:3d:3d:8d:76:44:75:e2:30:51:fe:69:19:d5:9e:
17:81:b1:45:1a:d0:78:56:2b:a8:16:5e:f6:74:58:
0b:8e:48:23:a1:f7:f2:8f:e3:d8:02:4a:6e:c1:63:
33:45:90:05:c0:ef:ed:76:4b:f9:92:db:f5:b5:cb:
b8:ae:e7:8f:a3:40:18:aa:35:38:4e:14:b7:ec:c2:
40:aa:ee:2e:fc:8b:39:f9:3f:56:25:e9:ce:7c:43:
6b:61:39:47:dc:1a:77:38:7c:01:b2:cc:8f:32:3b:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:97:D0:C9:45:7C:45:53:EE:F5:B0:89:15:FB:B9:07:E5:53:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/857dc5e5-a2c3-34be-9ec8-1bde80a3068d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/58551ca9-c834-4e94-9452-385a3685aa05.crl
X509v3 Authority Key Identifier:
keyid:A6:24:61:55:FC:1B:55:C3:F2:C7:22:B7:0D:54:55:94:CD:8F:02:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:ed:d8:eb:49:d9:50:fe:07:50:64:53:4d:58:cb:8c:4c:ae:
4e:b8:72:b5:14:ab:99:1e:09:79:a7:ec:8a:7b:cc:f1:96:34:
84:76:c0:ea:5a:e4:1f:4d:ec:09:dd:48:4a:7f:97:10:11:81:
d9:dd:26:ad:98:de:8d:f8:63:31:77:a2:91:5b:18:94:1c:6b:
02:24:9f:c7:56:8e:de:d5:b2:b6:bf:0c:27:e5:71:f0:4b:6e:
a3:33:30:e7:91:03:2a:bd:ce:9d:59:f0:c6:78:e2:7b:b2:d5:
d1:74:82:5d:32:2c:8f:32:b2:50:90:d4:62:c6:d8:7d:94:50:
38:96:08:26:06:85:a5:2a:ea:6b:2f:ed:5f:a7:77:19:f1:27:
f3:14:73:6f:a8:5d:fa:d7:ba:1a:6c:f6:5d:ab:eb:84:bc:d2:
a1:2b:35:34:06:a5:10:5f:03:2d:a8:25:76:47:56:23:9c:b1:
24:fe:69:e1:17:81:05:9e:e7:39:6d:51:91:d9:77:f5:77:fc:
ee:9b:ab:61:f2:0a:1a:c2:fd:a3:7c:4b:8f:8e:8e:da:32:a1:
6e:ed:60:bb:4e:3f:f2:eb:6f:f8:37:c2:ad:fa:e2:d8:e1:54:
7e:aa:86:e6:35:d0:62:85:99:41:91:f5:f5:27:78:32:9d:e5:
dc:94:0b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:08 2025 by rpki-client