Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5bd7ced6-f71f-4992-bf88-9f250c29d403/e4e8d034-36d0-345c-a20c-3647bd0ee691.roa
File: e4e8d034-36d0-345c-a20c-3647bd0ee691.roa (raw, json)
Hash identifier: S/xKzmNTaRY8Xv5cNJ6VJYqVcC2i5cA04jua4tQ663M=
Subject key identifier: 3D:8E:1A:0A:43:CA:C5:30:F9:98:9A:EB:0C:7C:C8:0B:EB:57:90:6C
Certificate issuer: /CN=5bd7ced6-f71f-4992-bf88-9f250c29d403
Certificate serial: 010D0C9F4328576D51CC73C042CFC16D819539DC
Authority key identifier: BF:21:10:01:04:B3:2F:7D:74:1F:C5:7B:FD:E6:73:6B:B2:44:54:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5bd7ced6-f71f-4992-bf88-9f250c29d403.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5bd7ced6-f71f-4992-bf88-9f250c29d403/e4e8d034-36d0-345c-a20c-3647bd0ee691.roa
Signing time: Mon 30 Sep 2019 09:51:43 +0000
ROA not before: Tue 02 Jul 2019 04:00:00 +0000
ROA not after: Mon 02 Jul 2029 04:00:00 +0000
asID: 55002
IP address blocks: 66.45.0.0/17 maxlen: 24
66.179.0.0/16 maxlen: 24
67.217.224.0/19 maxlen: 24
69.48.192.0/18 maxlen: 24
173.209.224.0/19 maxlen: 24
216.183.96.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:81:95:39:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd7ced6-f71f-4992-bf88-9f250c29d403
Validity
Not Before: Jul 2 04:00:00 2019 GMT
Not After : Jul 2 04:00:00 2029 GMT
Subject: CN=21b5d9eb-8961-4c7e-a1ad-03e7ca6ea14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:fd:f1:4e:34:62:f3:0a:00:ff:5f:a6:df:
04:a2:54:8d:a6:e9:1f:b1:de:2d:b1:34:f7:68:46:
fc:50:b6:a5:39:1e:c0:b8:54:7a:b1:c6:25:f6:51:
1e:f5:6a:d7:fb:4f:64:c6:d7:e5:f9:fa:0c:a1:ce:
e9:14:6a:81:35:3b:2d:27:19:4a:dc:df:7d:e8:77:
8b:3f:db:a1:7f:2f:09:73:6c:e0:7e:53:38:5e:4d:
fd:3c:f4:f0:12:49:bf:17:71:5b:f5:a3:80:4f:8d:
78:fc:ec:aa:32:e6:66:5b:05:e0:02:88:b9:62:8c:
0e:cf:e1:37:fd:c6:dc:44:e3:c9:ff:41:74:0d:a9:
8f:a5:a7:47:93:15:a5:4b:c8:f7:0f:03:19:82:e9:
79:ad:04:11:a7:1f:69:2d:7f:40:9d:56:7a:96:71:
2d:12:9d:dd:da:fb:a4:72:12:af:c4:a0:ef:f9:bc:
74:6a:c7:02:84:5d:46:b6:06:b3:ee:bc:60:70:bb:
e2:93:a8:fc:21:3f:f3:52:61:85:94:d4:63:86:19:
ec:4d:10:e9:70:66:2d:fd:42:69:6a:bc:da:6c:dd:
18:4d:0d:33:9f:70:ae:59:ac:d7:e5:bc:7a:99:81:
e0:32:93:99:e8:26:7d:76:93:f1:ca:61:ba:89:9f:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8E:1A:0A:43:CA:C5:30:F9:98:9A:EB:0C:7C:C8:0B:EB:57:90:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5bd7ced6-f71f-4992-bf88-9f250c29d403/e4e8d034-36d0-345c-a20c-3647bd0ee691.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5bd7ced6-f71f-4992-bf88-9f250c29d403/5bd7ced6-f71f-4992-bf88-9f250c29d403.crl
X509v3 Authority Key Identifier:
keyid:BF:21:10:01:04:B3:2F:7D:74:1F:C5:7B:FD:E6:73:6B:B2:44:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5bd7ced6-f71f-4992-bf88-9f250c29d403.cer
sbgp-ipAddrBlock: critical
IPv4:
66.45.0.0/17
66.179.0.0/16
67.217.224.0/19
69.48.192.0/18
173.209.224.0/19
216.183.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:86:0a:ae:9d:de:59:76:81:28:ee:80:ec:92:47:5c:35:5a:
bd:bc:d8:90:70:45:4e:0a:99:ba:23:be:85:94:56:67:b8:43:
a9:66:ba:1b:b8:fe:44:6b:e3:2b:cc:e6:95:d8:ae:66:be:3c:
75:63:38:e9:26:46:e9:c5:79:79:99:7b:db:5b:78:70:1b:53:
2c:38:1a:76:fe:60:ee:56:30:dc:9a:90:d6:11:3b:7e:d6:e5:
b1:cf:75:92:f2:93:b4:ed:3f:3e:d7:cf:a8:f8:a7:b0:3d:65:
99:2e:37:d8:67:c8:dd:34:5f:d6:71:ce:6a:3b:85:16:d5:20:
b8:b6:29:2b:c0:e0:bf:31:04:1d:11:97:49:fd:60:a0:53:9f:
4c:20:ad:cf:72:1b:4c:43:a1:f9:38:ef:64:e9:92:c6:d4:54:
05:ed:fb:00:f6:5c:2d:08:48:35:f1:c8:e0:5e:06:b0:49:ad:
4e:11:86:c8:ce:cf:2b:51:e8:43:b8:cd:87:b0:04:d9:86:73:
c3:c3:9b:69:cd:31:94:65:07:4d:56:38:2e:56:7e:30:5a:9e:
5f:86:34:16:2c:62:3f:19:11:78:67:8d:c2:b4:cc:fd:1e:93:
09:b3:59:78:75:7b:64:77:b1:cf:02:eb:a8:94:ea:b5:31:6c:
bc:cc:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:46 2025 by rpki-client