Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a945ab-0c34-3cef-bd1a-5965644cee88.roa
File: 48a945ab-0c34-3cef-bd1a-5965644cee88.roa (raw, json)
Hash identifier: JHbyLmF67YwHDyRJovv3Pz6RjXZ8ePR97ulHKgmrrEw=
Subject key identifier: BC:96:49:57:67:5F:8C:AD:10:BD:3C:6B:39:57:31:EE:B1:14:5B:70
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AA09F67D950933AB98500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a945ab-0c34-3cef-bd1a-5965644cee88.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 209.85.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a0:9f:67:d9:50:93:3a:b9:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=4e170a5d-f9cd-4031-8847-b793c3946ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:86:7a:6c:b5:f2:57:f5:88:d0:8b:87:7d:
47:fd:a1:b8:a8:19:e6:04:76:91:62:a2:de:9c:65:
51:0a:34:a8:fa:27:99:bf:2f:2b:c9:25:02:43:97:
36:47:0a:cf:12:78:a1:05:47:55:20:e5:3f:8c:85:
fc:cd:be:35:55:af:ed:24:81:a9:12:60:05:c5:14:
54:f7:fa:1a:64:bc:95:f8:9d:ef:85:bd:1b:57:ab:
2a:a8:a6:83:22:5f:5d:92:b5:98:68:db:95:0f:8d:
f8:26:12:73:5a:b3:75:29:96:e4:1a:b9:d1:86:42:
d6:6f:b5:95:44:15:48:d8:d2:bb:47:1a:4f:b1:2e:
8c:04:02:7c:c1:0d:c1:ee:bc:0f:a9:34:a2:3a:21:
ce:03:bd:7b:49:0e:52:53:a0:dc:12:31:fd:7b:03:
ad:a6:6d:1a:ab:03:b7:7b:a2:7e:32:be:03:19:55:
97:90:58:d1:ba:bb:37:a2:a4:8f:a6:58:7b:8b:2d:
fa:65:b2:80:71:16:65:e7:e8:ec:ee:b6:1a:ad:6c:
72:1f:0f:96:f9:b0:18:18:32:56:32:bc:d6:fb:4a:
58:d1:88:d2:3c:b9:4b:28:2a:44:1c:0f:84:0a:01:
75:de:f7:8b:ab:c9:6f:e4:98:d3:ff:f9:8c:ef:d1:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:49:57:67:5F:8C:AD:10:BD:3C:6B:39:57:31:EE:B1:14:5B:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a945ab-0c34-3cef-bd1a-5965644cee88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:ac:d6:28:65:fc:c6:32:cf:f8:9b:a6:f9:fc:e0:52:bb:97:
f4:56:2a:f9:9c:89:c5:d9:d4:da:57:9f:33:70:b8:0e:49:cf:
09:bc:0e:08:d3:11:28:2c:25:9a:14:cf:64:73:c6:d1:71:65:
17:e2:e8:33:88:12:04:77:71:d5:f8:9b:3f:ea:e9:52:17:0b:
0d:7f:42:41:d7:58:c5:27:38:73:34:fb:09:7a:f6:a4:7c:85:
8b:c5:75:75:59:b5:53:b3:58:96:a5:9f:c5:d3:c2:23:06:63:
e1:2a:29:a8:ec:4e:ac:2d:03:51:ff:08:16:17:15:ce:bf:db:
33:ac:2f:69:9e:9a:82:52:cf:52:5d:15:b5:9d:77:77:0e:63:
18:16:46:c8:d3:d4:c6:0b:dd:1a:d6:76:e3:9c:18:1d:d4:9f:
a9:a2:59:9c:6f:77:09:7a:d7:83:65:31:5d:a1:0c:57:02:89:
23:9a:2b:43:fb:a2:52:6c:e4:28:b9:46:4c:86:e5:14:b0:d1:
3d:23:fa:8a:04:84:c5:76:07:00:49:70:06:eb:14:00:7c:cc:
56:d3:7e:28:f3:8e:6d:be:12:0a:2a:b2:ca:0a:d1:f3:ff:d0:
87:89:85:ed:a9:84:80:a5:e8:a9:5e:38:28:1d:77:e4:3e:e8:
38:be:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:37 2025 by rpki-client