Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47d482db-5240-32a6-9426-bf406ed97396.roa
File: 47d482db-5240-32a6-9426-bf406ed97396.roa (raw, json)
Hash identifier: bdi0A4igO1tdmYpgBhVFtn1EUzo/Ly9qCQlrFGS7ezI=
Subject key identifier: 35:97:13:EE:3D:F7:E8:D1:D6:DD:B8:21:E9:C9:30:BA:0F:47:FF:76
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A5E7330DA2A360D4BDA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47d482db-5240-32a6-9426-bf406ed97396.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 208.68.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5e:73:30:da:2a:36:0d:4b:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=2791c0d6-88fe-41b1-8221-913a90a9b8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:6a:ba:85:7f:c2:ce:e2:b5:3b:ee:a1:27:
b8:13:78:b0:38:89:0e:c4:45:54:72:92:5a:56:e5:
79:a8:22:8b:dd:45:a4:8b:cc:28:36:45:e1:4f:1c:
15:52:e4:72:6f:79:3c:31:a7:dd:96:71:6a:d9:f9:
3d:0c:d1:a5:37:1a:af:e7:be:1f:06:6b:31:48:4a:
30:9b:6a:45:72:d3:e0:94:13:90:2a:9a:cc:66:df:
e2:cd:08:85:d4:64:d6:c5:6a:54:b1:a1:02:8e:4a:
7e:90:35:8e:66:ff:55:40:a4:7a:06:b8:5d:92:8d:
2d:2e:29:74:3e:26:a1:66:9b:c9:ff:70:2d:f8:d2:
16:45:2d:1b:79:3c:5c:7c:5c:ce:e0:9e:49:a3:5e:
ce:95:d0:86:f0:94:83:b4:33:70:8e:26:00:da:d4:
4c:d7:94:82:7e:b5:62:6a:f7:99:8a:28:a5:fd:de:
20:41:0d:a8:9a:32:36:0e:e8:6a:a6:82:1d:76:6a:
08:b8:be:cc:03:5d:96:0d:63:2d:a8:99:a2:ce:e4:
d9:f9:5c:96:aa:d0:15:6a:ec:79:f4:ca:b4:7d:57:
57:01:b9:0c:ec:94:ba:05:02:08:d1:ac:74:35:5a:
b0:d4:aa:f7:f8:6f:09:9b:7f:17:7e:1c:bb:96:4d:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:13:EE:3D:F7:E8:D1:D6:DD:B8:21:E9:C9:30:BA:0F:47:FF:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47d482db-5240-32a6-9426-bf406ed97396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:7c:26:43:55:1d:14:50:81:15:40:7c:23:c3:c6:cb:0e:1b:
d0:a4:a9:18:67:6f:24:3d:46:67:e9:60:76:0c:db:22:e0:9f:
0a:9e:41:7b:6b:64:dc:57:bd:5a:ca:86:39:4a:be:66:03:df:
2d:33:b5:92:d6:95:3e:97:40:61:8e:47:c0:5c:02:25:00:fe:
bc:7c:53:22:5d:df:d2:fe:51:ff:30:6a:a2:28:17:0d:72:69:
f6:b8:2a:a0:21:c0:c3:2f:4c:76:c4:61:8a:62:be:01:f7:6f:
7b:e9:46:0e:97:0d:2f:5e:34:e3:00:a9:bb:48:63:69:ac:d7:
aa:38:a0:6d:53:de:03:ec:fe:83:e6:37:24:40:5c:52:f2:3d:
22:1e:93:fa:d5:7e:b6:87:a2:d7:a4:ae:4b:0d:d8:54:fa:3f:
17:d5:0f:a3:fd:6d:c8:46:db:5a:ad:35:db:ba:c5:d0:be:15:
68:d0:d4:60:62:0f:24:c6:22:32:76:f3:f7:a0:35:aa:8a:39:
10:4a:9c:27:ef:dc:a9:b2:61:bc:67:df:a0:f7:43:3b:41:82:
2a:25:36:f2:2e:2d:25:b0:a8:95:a4:58:ab:39:b9:d9:1d:40:
ba:f4:db:1a:7c:43:17:b0:4b:db:e9:8b:b7:b5:2b:fc:39:2e:
94:25:33:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:41:10 2025 by rpki-client