Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6957b296-0adc-3835-ae9f-cda834c6b95c.roa
File: 6957b296-0adc-3835-ae9f-cda834c6b95c.roa (raw, json)
Hash identifier: DVdgrwyd95Uka7Scw9mj8bD1qBzlPQ+o+BvJFoyRXg8=
Subject key identifier: 70:63:68:AF:1B:3A:53:EF:CA:21:00:E9:CF:B0:3F:24:FD:64:7E:91
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584807AA7E5A9B2A78E2FC2066B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6957b296-0adc-3835-ae9f-cda834c6b95c.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 6167
IP address blocks: 174.232.214.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:7e:5a:9b:2a:78:e2:fc:20:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=9bec6668-0e59-4637-b9c9-f5d5a8995d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:5a:cc:1f:77:90:80:b5:7a:55:eb:c0:4a:
28:e7:17:1b:fe:61:67:81:8f:85:70:71:70:76:f0:
78:d2:55:fa:41:31:5c:06:0b:1c:e5:f4:8a:a2:3c:
de:f9:ed:ce:ad:f4:44:a6:39:7c:57:c5:e6:02:d3:
53:20:79:00:97:15:13:e6:3f:75:4e:53:b5:68:c9:
dc:a1:d0:cf:cd:07:ff:8e:4f:ba:e0:78:12:fd:48:
7c:1b:32:8e:b1:43:ee:2e:4b:f4:8f:93:3f:c5:4d:
55:31:a1:74:8a:8a:cf:96:f1:8f:61:e2:42:54:82:
c9:47:88:16:dc:cb:d5:af:e9:54:e4:4d:eb:f3:cd:
50:48:e1:cd:ef:60:a4:86:3a:bc:8f:a9:23:dd:44:
31:6c:3d:69:ed:f9:54:b8:db:30:3e:36:c4:a5:54:
07:ff:34:7f:02:c9:a6:fd:01:98:b4:28:02:79:b9:
5d:80:1f:01:5d:b3:ee:e9:ca:3c:2e:7f:30:f8:e4:
02:d7:95:b8:e1:69:bc:c9:e5:55:af:7c:e6:05:8d:
29:a4:4c:30:43:97:fa:4f:89:ad:6a:d3:16:36:10:
39:21:9a:e7:ff:de:9e:1e:c8:30:fb:a8:b9:1d:cd:
c5:8e:d7:93:0e:33:d6:fb:4e:92:5a:e5:1f:a9:06:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:63:68:AF:1B:3A:53:EF:CA:21:00:E9:CF:B0:3F:24:FD:64:7E:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6957b296-0adc-3835-ae9f-cda834c6b95c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.232.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:78:cd:81:36:40:e4:c9:e5:5d:ce:09:12:f9:ef:0d:16:0b:
5f:0a:7e:dc:04:32:ba:a6:2f:fe:35:b8:90:58:e8:15:11:d0:
7b:65:c8:a9:99:5e:c1:8e:b5:4b:3f:78:59:55:f8:0d:95:c9:
f0:87:39:9f:85:78:b3:52:a3:03:86:0a:64:c8:a5:b6:10:a8:
61:d1:55:6b:45:a3:0e:c7:c4:98:13:75:19:4a:7a:2e:a2:33:
6d:19:0e:67:cd:bc:da:78:0f:f4:d1:46:01:32:ad:92:11:a7:
af:1e:af:58:da:05:94:f7:c6:96:69:bd:7b:d7:2c:49:63:00:
ce:b1:18:f5:2c:eb:56:31:fe:12:c6:ce:01:61:be:77:e8:00:
da:6c:62:50:29:93:7e:9a:f5:97:10:92:21:07:e8:56:54:e0:
51:b4:84:58:2c:88:9e:f1:a1:b5:c1:e6:2c:1a:a6:bd:bf:3c:
1b:28:03:40:1d:79:ac:d4:23:8f:2e:4c:ef:50:0d:11:02:17:
fc:9c:95:31:b9:82:42:f2:e9:72:f5:07:28:1c:29:99:b2:2d:
01:cb:a2:6a:0e:9f:d7:52:74:d1:5f:0b:77:09:a9:36:d3:c6:
70:ce:c3:8b:a7:19:7d:57:65:97:ff:b6:b8:a7:9f:cf:72:67:
75:2d:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:52:05 2025 by rpki-client