Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4314c21-aa21-34e1-a683-ea52efeec306.roa
File: f4314c21-aa21-34e1-a683-ea52efeec306.roa (raw, json)
Hash identifier: gS3tKhv0yrHXBLU4uFYJUudx62nqkt4If8zw+Q78zmg=
Subject key identifier: 8A:85:24:D9:E9:F5:D6:2E:62:7F:AB:81:8D:BB:A3:05:DF:A7:10:F8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584807AA75BAAC79AE5FF94BB800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4314c21-aa21-34e1-a683-ea52efeec306.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 6167
IP address blocks: 174.250.12.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:75:ba:ac:79:ae:5f:f9:4b:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=8ac91e43-c597-4073-8c19-f857e0c883de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:d3:51:b3:f2:28:9e:e8:b6:e6:9c:d2:2f:
8b:96:e7:c0:25:b3:95:f9:1a:8a:2e:68:ec:82:b1:
de:54:a9:b9:22:55:ea:ac:2b:41:a3:c4:af:27:dc:
3a:64:98:ff:57:27:f0:a2:87:89:e8:78:60:70:fb:
8c:18:d2:13:63:69:dc:3b:66:a1:35:e3:1f:9f:6e:
89:71:36:7e:ff:15:f4:bb:34:1d:05:46:c1:68:d8:
5e:0a:91:dd:da:4b:cb:1a:43:d9:14:82:ce:28:b6:
fc:c8:02:b2:78:22:42:12:f8:23:79:12:cc:e2:0b:
11:53:4e:a9:b9:e1:f0:63:67:15:e6:41:33:51:4b:
2f:9c:21:f2:26:d7:e1:0a:4b:db:a5:2f:db:f3:bc:
f7:88:3c:4c:ab:e5:6b:ed:93:da:8a:8b:26:c2:30:
68:dd:cd:48:2b:c1:86:e7:b3:3a:a2:e2:27:52:82:
47:0b:93:15:72:ab:d2:93:2b:29:70:85:59:08:d4:
bd:47:b5:db:ca:08:7f:ad:15:8e:d1:84:52:62:67:
dd:5a:0a:b4:53:3f:62:02:6d:83:25:18:ec:bf:6f:
93:b6:a2:bd:23:8d:44:e1:6e:69:e6:a1:e7:eb:4a:
22:c0:48:f1:c3:5a:e0:ca:07:59:0e:a9:64:6b:51:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:85:24:D9:E9:F5:D6:2E:62:7F:AB:81:8D:BB:A3:05:DF:A7:10:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4314c21-aa21-34e1-a683-ea52efeec306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.250.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:0c:71:15:9e:03:90:a5:d8:93:32:b4:70:80:ec:b1:cc:66:
c2:db:14:2d:67:2f:26:02:74:15:64:30:5d:b7:82:17:ca:e1:
83:20:a7:9e:39:a9:8c:6b:48:77:1d:41:b6:f0:c6:87:31:ef:
37:cc:67:a1:55:6f:2a:17:c2:d1:6a:75:e2:0b:fe:45:59:51:
9d:d3:6a:d8:fa:96:24:5a:7a:b3:85:3f:cc:a2:08:3a:20:e2:
04:21:cf:72:58:e8:69:d4:a8:3f:35:26:ac:8d:59:15:7d:26:
a8:16:8c:6e:2c:c8:f0:60:3c:47:10:34:36:51:49:36:a2:f0:
fb:b3:d6:74:1a:f0:52:9f:34:3a:61:85:55:45:f6:6d:bd:0b:
6a:90:35:7b:e2:9c:62:63:72:46:c8:26:8c:05:0f:11:86:cc:
a4:36:f7:9e:e8:60:e8:5d:ae:17:93:37:19:37:28:14:ec:a7:
b2:3e:0b:6d:95:f4:df:32:fa:a8:07:ad:bb:46:b0:f8:a6:ef:
80:21:fb:94:a5:81:b1:dc:85:4d:22:48:78:96:a0:c5:c2:d0:
5e:84:25:2e:25:e8:4d:a5:7e:2a:5a:dc:83:ad:d2:75:4e:b4:
46:fc:9a:8a:1a:b9:19:49:07:c4:7e:dd:45:ac:76:ef:00:b8:
ae:b6:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:57:14 2025 by rpki-client