Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9b6087b-0cfd-3267-8086-0004758f7acb.roa
File: f9b6087b-0cfd-3267-8086-0004758f7acb.roa (raw, json)
Hash identifier: gYCpv5SsjMUIXcvNmWr5M+0iLRS1bY4w42kRQQfvOoo=
Subject key identifier: E7:32:3E:56:F5:18:A3:16:9E:79:96:06:D9:26:D2:41:B9:37:61:54
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584835BAA07A54328A4B93836B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9b6087b-0cfd-3267-8086-0004758f7acb.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 184.86.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a0:7a:54:32:8a:4b:93:83:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=65ac9215-e7a3-46bf-b7fd-7551604e20c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:3e:b6:e9:90:5b:00:cf:92:d2:61:fb:ed:
64:e2:d8:59:bc:94:51:64:3f:ea:bd:ae:b6:43:2c:
a4:bb:cf:e9:fd:a7:d5:b5:61:c3:cd:43:87:da:49:
cb:d2:ae:e4:99:82:2d:cc:c9:10:bd:0a:0c:89:21:
bf:f0:7e:ad:89:ee:bf:ac:bc:64:e4:a0:61:0e:14:
d0:18:a2:65:2d:bb:80:0c:57:a2:d2:7a:91:c4:1e:
85:8f:f8:6b:21:a5:69:1b:86:f1:b0:f0:ac:0e:2e:
c1:d0:ba:ed:7c:83:1f:61:7f:ca:49:0f:c2:bf:70:
cd:9c:af:2f:46:1e:db:a0:d8:c2:74:a2:fc:db:e1:
9e:72:cf:17:b0:3c:cf:1f:2e:03:c5:2f:7c:7f:2a:
1f:06:dd:de:ef:c6:23:60:5f:1d:af:91:0e:f9:42:
9d:be:9a:a7:8e:4e:5c:02:71:9a:b7:72:f2:4e:e7:
83:73:4d:6c:0f:30:ab:82:3b:ba:c1:49:00:6c:d6:
77:90:35:0f:59:68:ef:cf:a3:24:7a:d9:6e:60:75:
6c:1b:15:80:65:ab:23:83:49:b0:6e:5e:c0:43:34:
d9:37:10:dd:ee:e4:f1:3b:55:d8:95:f2:0f:57:37:
8a:4d:88:43:13:14:73:58:d8:21:2e:f8:c3:4c:5f:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:3E:56:F5:18:A3:16:9E:79:96:06:D9:26:D2:41:B9:37:61:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9b6087b-0cfd-3267-8086-0004758f7acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.86.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:93:7e:e8:9c:2d:1d:63:02:76:c0:47:e1:64:53:84:36:43:
d7:16:61:5e:cd:97:f8:40:f7:df:17:80:bb:0f:7f:60:cb:00:
5f:b4:d6:8e:1b:b8:bf:17:6c:92:43:01:38:44:03:df:d4:e5:
c5:ae:e2:60:5a:c4:d2:45:d3:c7:06:20:09:0c:2d:fd:fa:18:
8b:74:7c:3b:6e:14:e8:02:c2:bc:5c:8a:bc:26:c5:43:4d:70:
fb:8b:d8:5f:dd:95:ce:44:89:6b:17:83:3a:0b:9e:5d:f9:e5:
f1:71:6b:fb:ed:fa:10:1a:9a:ee:62:6a:e5:97:9b:bd:9c:2b:
0d:96:35:6f:b7:69:4b:cc:aa:bc:78:6b:43:56:d5:f1:2d:be:
86:93:3f:ad:51:db:19:4f:42:4f:12:cb:c9:82:3f:b3:1c:f8:
37:87:63:8e:27:3c:0f:4c:bb:b2:7c:e0:bb:6a:54:b6:39:fc:
ae:36:2a:5d:51:ad:37:5c:3b:3d:d8:e0:47:87:28:77:bc:e5:
e5:4e:98:2a:dd:75:bb:f0:27:83:b3:d8:64:5e:0d:ef:d9:97:
df:6c:c7:0f:5d:17:02:cd:70:26:1b:25:f6:cd:77:c4:50:20:
ad:96:b4:23:b0:bd:6d:bc:ad:56:dd:a9:0f:b8:4e:6c:18:76:
2f:5b:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:03 2025 by rpki-client