Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e4d1ea32-c0cf-3d46-9113-be6ec60af435.roa
File: e4d1ea32-c0cf-3d46-9113-be6ec60af435.roa (raw, json)
Hash identifier: 933614it5eIxj93l8pwW7ThdE2RC5PGnJhij1+Bg4E8=
Subject key identifier: 18:79:3E:C3:07:14:8F:F9:1D:47:53:D9:FC:17:6C:8D:28:32:40:A0
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F43285847E1FA1A3119D5239EDA4D4400
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e4d1ea32-c0cf-3d46-9113-be6ec60af435.roa
Signing time: Fri 15 Nov 2024 02:00:28 +0000
ROA not before: Fri 15 Nov 2024 02:00:28 +0000
ROA not after: Thu 13 Feb 2025 02:00:28 +0000
asID: 400859
IP address blocks: 67.214.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e1:fa:1a:31:19:d5:23:9e:da:4d:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Nov 15 02:00:28 2024 GMT
Not After : Feb 13 02:00:28 2025 GMT
Subject: CN=422a9837-2421-4585-b606-a64c33b02fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:c8:af:20:8b:f7:d8:15:69:5d:dd:7e:bd:
df:99:82:4a:c3:2f:ad:05:3b:1e:70:c3:6a:e9:57:
66:ce:40:d9:76:24:d4:82:94:14:55:cf:98:56:6e:
ba:88:67:84:48:7c:ce:e0:8c:9b:bd:be:79:07:9e:
66:61:b1:5b:eb:8e:c6:c3:c8:1b:23:c9:ca:92:1c:
12:25:92:18:87:26:06:39:a0:e5:c3:0b:da:74:3a:
fe:20:d8:d6:d3:fe:f3:10:bc:a2:fd:3b:4f:ee:bd:
9a:64:87:24:e9:b1:e3:96:eb:6f:81:8f:d6:eb:c9:
5e:8a:ab:09:c2:cf:02:45:72:3e:e7:3a:ae:40:12:
a4:92:af:f2:c2:56:18:8e:a9:cb:96:c0:51:5b:fa:
14:06:b6:ad:cb:49:7b:3a:0a:e7:75:e6:25:7d:70:
9a:b2:75:89:e1:dc:d7:bb:43:4b:45:e7:85:9a:63:
9a:da:8d:87:04:51:ca:b4:77:c0:96:81:c8:4e:c5:
87:09:0e:85:6d:cb:1f:80:ab:58:62:52:5b:94:b2:
61:03:be:97:6b:f6:ff:c1:a8:1c:be:df:d9:24:4d:
3e:d4:09:92:ec:6d:65:bc:8d:f8:6d:50:ed:87:3c:
3c:d3:a6:81:88:83:23:02:76:c5:ab:06:e2:55:66:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:79:3E:C3:07:14:8F:F9:1D:47:53:D9:FC:17:6C:8D:28:32:40:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e4d1ea32-c0cf-3d46-9113-be6ec60af435.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
67.214.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:7f:19:ca:06:4d:a3:61:d0:c6:93:f7:31:bf:1c:c9:86:69:
32:a5:01:ae:41:fd:2d:19:50:ff:bf:3b:73:bb:e7:8c:c0:73:
f1:e6:8f:c6:57:04:92:76:e3:4e:a8:47:8c:00:cd:bc:ab:14:
69:f1:da:5a:a8:f0:af:e6:f9:8b:df:f0:c1:30:de:c5:82:d9:
86:69:74:34:1e:ed:6a:5c:aa:5a:0a:ab:a8:d6:7f:a3:60:39:
a8:d7:0b:c5:47:de:21:5c:ba:fe:99:c7:1b:d7:7f:f4:3c:64:
3f:e4:00:be:ac:4e:70:3c:10:8d:ad:05:78:51:ec:32:9d:43:
4f:33:4b:fd:18:95:19:4a:fa:e6:d9:3c:58:03:b0:06:d2:88:
e1:a3:55:0d:da:e0:34:ed:e2:88:02:fa:b7:a4:fa:c0:12:dc:
4a:27:57:e7:40:e2:ae:25:de:8b:83:90:24:30:d9:c8:ae:3f:
83:a6:db:37:b7:e9:5b:ee:72:ba:dc:49:ae:7f:da:c0:c6:ca:
8f:50:41:48:2c:c5:0e:19:e1:9e:60:ae:0e:a6:16:9d:21:f9:
27:25:5d:c8:a9:ea:81:08:3d:20:bd:cd:b8:c2:28:27:fc:ed:
d8:fb:73:1d:40:81:85:b6:58:35:b6:f8:47:15:16:63:63:69:
31:93:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:56:11 2025 by rpki-client