Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a28dd51-fa51-3b62-b48f-741edd053fb6.roa
File: 0a28dd51-fa51-3b62-b48f-741edd053fb6.roa (raw, json)
Hash identifier: dVEuatTxGRme9TAYnWZ0dZSkJ5xQegMhxJ3VXqUpjdI=
Subject key identifier: DA:32:0F:7B:94:B4:D1:79:0D:7B:8A:86:DF:CB:4D:36:02:EB:74:47
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A716FAFDA401DB9800800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a28dd51-fa51-3b62-b48f-741edd053fb6.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 74.125.66.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:71:6f:af:da:40:1d:b9:80:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=1f185794-190e-4f13-94bf-5fdf0a28a993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:cc:61:fb:13:63:5c:5b:0b:82:2a:c9:61:
a4:74:38:c7:af:36:e4:56:88:38:9b:38:a2:2d:a4:
1b:54:eb:36:86:cc:6f:59:b9:c6:04:e9:7b:89:e7:
7f:c7:b9:76:b2:9d:e5:f8:52:d1:6e:bc:4f:18:9a:
3f:8d:f2:b8:5d:7b:9e:4c:47:b8:70:2a:e9:20:bc:
64:e4:1e:56:e8:2c:3d:9d:53:38:27:ae:f3:c6:53:
b7:8f:89:df:eb:07:33:dc:eb:9a:5a:e2:50:2b:37:
12:20:4b:f1:6a:2c:3b:f7:b3:71:97:40:45:a1:45:
be:c3:34:b8:f8:73:21:89:e1:8f:67:84:60:10:6f:
fd:5f:c3:89:19:7e:b1:24:b6:5b:9d:7e:4f:7d:73:
3a:60:51:e6:a1:bb:58:46:e8:00:fd:ce:9c:b8:fb:
bd:91:d5:51:b2:18:69:32:a1:9e:c0:09:ee:df:27:
16:b0:14:ee:5f:00:4b:c2:93:c9:40:13:ba:92:13:
fb:45:f8:a0:27:a2:5a:ad:ff:f9:88:1e:34:24:55:
53:bb:ca:ba:d1:d7:3f:cf:4b:7f:40:1c:d3:60:e1:
e6:73:db:8a:42:53:48:b0:8e:07:c9:0f:3b:ce:9e:
cb:b0:48:48:04:f0:48:99:9b:bb:19:2e:32:70:00:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:0F:7B:94:B4:D1:79:0D:7B:8A:86:DF:CB:4D:36:02:EB:74:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a28dd51-fa51-3b62-b48f-741edd053fb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.66.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:0b:f0:9a:06:58:b3:57:0f:62:6e:ad:9c:aa:db:cf:2d:54:
54:7a:99:e3:af:72:66:7e:5f:bf:6a:a3:ff:0f:73:3b:a8:ea:
a0:a8:07:a9:46:56:14:37:70:12:5d:b1:f2:e3:0e:cb:de:c6:
31:a3:56:3b:40:5f:c3:70:15:38:66:0d:58:d6:12:32:1f:4b:
f4:2a:24:91:9d:f3:18:33:67:5f:59:f9:10:46:b8:61:82:fe:
c7:6f:fa:2d:a7:15:75:9d:8d:cb:de:b8:1d:30:4c:93:a5:27:
d9:6a:6d:b5:75:89:86:8b:81:0b:61:fc:65:ff:55:90:b5:18:
bd:9d:3d:3e:d7:b3:2a:dd:b4:eb:a3:7a:18:02:5d:1f:a6:d3:
31:16:37:49:c7:16:f3:68:16:6f:4d:5f:1d:c6:8d:18:24:3f:
b5:bc:76:0d:3e:3b:59:4a:e8:16:79:85:2c:81:7e:86:d5:a2:
1b:ee:22:4d:78:e8:73:24:86:91:23:9e:36:42:93:52:dc:45:
7c:0a:1e:b5:54:9b:d2:8b:44:54:09:14:36:49:5a:41:2a:20:
ff:16:9e:5a:9c:b9:2e:5f:d7:b8:06:4a:be:39:44:09:fb:32:
98:0f:a1:85:f5:a5:89:58:63:33:18:d6:a4:9e:6d:2a:08:bd:
5a:14:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:07:01 2025 by rpki-client