Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f8aaa81-dc4f-3eca-909e-1355ddb494ab.roa
File: 4f8aaa81-dc4f-3eca-909e-1355ddb494ab.roa (raw, json)
Hash identifier: P9ZjxJwpJHdtGCzSLDUo5Q+z5xS+8jsvjKPjY5j4nvs=
Subject key identifier: 34:12:48:03:38:4A:CD:31:C5:CA:48:7F:16:65:EF:9B:1F:14:DB:E8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584807AA898A89A2BF5D330E7C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f8aaa81-dc4f-3eca-909e-1355ddb494ab.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 6167
IP address blocks: 174.247.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:89:8a:89:a2:bf:5d:33:0e:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=8d2b2772-47c6-4dda-83d3-b46efddfb347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:ef:b0:36:90:19:b3:c5:eb:cb:b7:f8:54:
11:a3:02:e7:0d:88:04:9a:28:d8:17:5a:37:36:1f:
86:dc:06:bd:8d:53:6b:6e:28:45:20:db:ef:3c:00:
61:73:9f:d1:74:f0:5f:1d:88:f5:61:b7:23:6f:4b:
1f:49:c7:8d:6a:07:ba:53:06:df:22:27:db:26:5f:
80:05:5c:5f:f2:18:57:c5:a3:73:52:65:b0:12:56:
1c:69:d3:2c:7a:3f:2d:6a:3a:a3:95:ee:1a:ff:67:
09:6f:7d:97:20:57:1b:fe:08:85:25:d2:1d:f6:01:
37:c0:a7:ef:ab:7b:1a:44:a6:8b:a4:9b:01:0b:d2:
b6:a1:e4:54:74:a9:42:cf:9f:80:ef:20:54:22:25:
72:88:75:d2:fe:1d:19:2e:bc:b9:63:05:eb:56:9a:
73:9e:fb:8f:cf:7f:bd:88:a0:45:05:c6:05:60:a8:
b4:c1:8b:2e:32:38:24:da:22:0c:36:01:a8:e7:bb:
74:15:79:eb:17:c5:60:26:5b:20:42:67:e8:e4:40:
e7:b6:dc:c8:14:f3:f9:93:50:30:a3:1b:e4:1d:03:
c9:8c:8e:6d:fc:cb:c3:61:a8:64:24:69:a1:82:83:
db:aa:17:5a:93:bc:7f:20:34:b8:d9:3d:60:15:c5:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:12:48:03:38:4A:CD:31:C5:CA:48:7F:16:65:EF:9B:1F:14:DB:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f8aaa81-dc4f-3eca-909e-1355ddb494ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.247.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c9:56:d2:ae:c2:0b:8e:9e:ef:3a:e1:f2:6b:37:8b:a8:3b:
1d:58:46:7a:11:28:80:91:5f:29:0b:50:a6:73:2d:66:40:8c:
c9:61:b8:3b:be:85:f0:be:10:56:83:50:3c:fd:e8:21:47:ed:
2b:c4:35:8d:4c:6a:c6:7c:fb:a5:aa:78:9d:97:75:06:31:dd:
d1:77:fe:93:27:84:8c:be:16:cd:f6:60:f1:4a:70:32:ff:01:
02:5d:b3:16:e2:4b:b0:2b:6a:af:1f:e8:2b:66:70:db:0c:4f:
fa:99:2a:d2:a7:b6:5c:fe:f9:98:88:5e:69:25:93:23:fe:c5:
57:fa:ef:2c:fd:cf:7b:1b:30:90:47:63:77:7b:ce:69:12:97:
aa:aa:74:2f:88:41:31:a3:02:58:5e:31:f1:12:92:50:ea:2f:
90:81:8f:9d:3f:71:d9:7c:c5:a7:97:24:e8:1d:a2:1d:e9:d1:
48:81:de:0a:a2:01:03:2f:ce:24:4c:53:d7:8d:8d:88:d6:af:
45:5d:0f:a4:bc:77:ff:a3:09:80:36:e9:c1:21:cc:ab:94:4f:
90:ac:11:17:ce:38:2c:e1:81:1e:c3:45:c0:ad:69:7e:c3:09:
eb:77:8e:8b:a1:19:60:88:00:9d:d1:7d:a5:3b:b1:a9:bc:0c:
68:34:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:39 2025 by rpki-client