Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35413ea8-8e3d-3217-adcf-853a4c44d0f6.roa
File: 35413ea8-8e3d-3217-adcf-853a4c44d0f6.roa (raw, json)
Hash identifier: iZuZGjnivbgxE0PYqcDxexn9i+DkYt+Vzs7S4EF6euE=
Subject key identifier: FF:2E:26:89:A3:7F:D9:06:22:43:40:7C:D4:1B:74:1D:D2:E4:E9:D2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285844ABCF8C6C6BC6165C84E35C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35413ea8-8e3d-3217-adcf-853a4c44d0f6.roa
Signing time: Thu 25 Jan 2024 14:00:29 +0000
ROA not before: Thu 25 Jan 2024 14:00:29 +0000
ROA not after: Wed 24 Apr 2024 13:00:29 +0000
asID: 209
IP address blocks: 204.10.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ab:cf:8c:6c:6b:c6:16:5c:84:e3:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:29 2024 GMT
Not After : Apr 24 13:00:29 2024 GMT
Subject: CN=71064d1d-55f8-4ff4-bd67-9b5834cea2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:52:de:16:db:ac:1f:56:af:4f:df:de:22:
e3:13:c7:3c:a1:53:0e:bc:77:72:4c:f7:ea:14:1c:
74:f5:e6:df:e7:13:4f:d2:ab:f3:cf:87:a1:fa:80:
28:68:c0:b8:a3:f7:3f:7b:34:e4:fd:b7:40:4a:c6:
2b:d0:7e:e9:e1:5f:74:4b:20:d3:05:3d:68:84:38:
75:2b:78:aa:d3:d6:a3:f5:ef:31:da:73:13:fa:ca:
e7:0e:4c:9b:fb:5f:42:bd:45:bd:4e:46:eb:cd:41:
34:71:81:3b:dd:e1:5d:c2:28:46:f7:88:76:cb:63:
44:66:12:ef:03:83:a1:e4:c1:da:97:af:12:f1:2a:
d7:cd:85:f4:74:6a:64:b7:07:6e:fe:df:0d:f1:60:
99:9e:82:6c:cb:60:40:bc:a8:ad:f0:14:0c:c8:d5:
97:33:23:76:08:95:80:27:b1:0a:5d:da:2f:f9:16:
7f:81:47:93:7a:b8:a1:15:10:08:63:b4:8d:43:6e:
7b:40:5c:4c:66:a0:f0:3f:78:ea:c4:0a:51:a6:c7:
c6:40:ef:d6:4f:6e:07:d0:a7:29:52:25:4a:84:d8:
2c:7d:bc:06:72:c6:75:53:00:a3:20:eb:3f:f4:2f:
58:76:d0:6b:c0:fd:4d:34:fb:7f:5d:9a:85:24:09:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2E:26:89:A3:7F:D9:06:22:43:40:7C:D4:1B:74:1D:D2:E4:E9:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35413ea8-8e3d-3217-adcf-853a4c44d0f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
204.10.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:d7:c0:e3:f1:bc:fa:0b:d2:4f:6d:86:e9:67:a0:91:c8:21:
62:df:a3:6b:c0:e3:86:ef:79:19:00:94:6b:b5:42:75:df:17:
e4:2c:23:b8:f9:ca:10:83:ed:2d:b5:90:9a:0c:73:08:3c:6e:
dd:33:65:b1:30:5b:24:cc:27:db:00:cc:39:e2:9e:de:09:29:
af:fd:8a:cf:17:69:b3:72:6c:24:c8:f9:c1:43:c5:fb:66:f9:
50:db:66:55:9b:da:0b:51:84:a9:b1:08:8a:2e:14:ae:31:48:
57:f8:ca:b0:a6:ba:b4:40:5a:a2:f2:19:cb:52:07:26:44:79:
ef:02:ea:4a:5d:93:54:ee:0e:47:a1:68:eb:0f:d3:df:91:ca:
15:15:04:b9:d8:82:1e:5d:08:96:23:66:6d:55:74:32:10:85:
81:a4:93:23:a4:08:87:2e:af:c7:74:a8:17:28:04:38:6a:07:
b4:b6:24:de:0a:0a:d4:6e:91:9f:8b:5d:43:e7:f7:64:70:b9:
3e:b0:bf:e5:9f:5a:77:d0:d7:b1:b8:47:a1:5d:f9:6c:af:03:
9a:3c:43:ff:37:f5:46:3c:fb:b7:af:99:47:36:8e:6b:a0:5c:
12:65:4d:6c:f2:98:f5:0b:b4:01:8a:e7:0e:52:cd:f7:a6:44:
19:d9:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:07 2025 by rpki-client