Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ac40ce7b-7c10-3a14-98aa-ba26a2506e9d.roa
File: ac40ce7b-7c10-3a14-98aa-ba26a2506e9d.roa (raw, json)
Hash identifier: rjsYhMBVKSBJSUpDZpZJ5TJBq61OgDgJ0jRqs1e77N0=
Subject key identifier: B5:69:67:2F:68:7D:DA:6F:B6:FB:50:A9:D1:95:8A:28:56:9B:EE:09
Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial: 010D0C9F432858484231B65CEBCB2321F2B94180
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ac40ce7b-7c10-3a14-98aa-ba26a2506e9d.roa
Signing time: Thu 19 Dec 2024 13:10:24 +0000
ROA not before: Thu 19 Dec 2024 13:10:24 +0000
ROA not after: Wed 19 Mar 2025 12:10:24 +0000
asID: 10753
IP address blocks: 209.142.68.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:31:b6:5c:eb:cb:23:21:f2:b9:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Validity
Not Before: Dec 19 13:10:24 2024 GMT
Not After : Mar 19 12:10:24 2025 GMT
Subject: CN=186eb98c-06c9-4d14-9c1d-aa34620973b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:8f:08:57:34:5a:7f:58:1a:c7:dc:01:cf:
e4:d3:28:b7:3e:8e:87:99:47:5f:69:1c:32:99:e9:
53:24:02:bb:b8:e5:32:e4:f5:57:64:80:f8:a7:6d:
8f:16:76:43:eb:0c:c5:6a:76:ae:ac:f5:5e:b1:1e:
ee:70:d3:8f:89:6f:8f:0b:ec:69:f7:e0:3f:dc:9d:
30:8d:56:a9:43:5f:ff:68:b3:1c:90:0a:ac:92:39:
75:9b:b2:af:9c:fb:ba:83:7c:ce:86:17:75:46:8c:
1d:a8:01:7e:5a:95:32:64:53:4c:6e:ac:0b:00:82:
2f:31:99:dd:ce:2a:d8:27:20:99:9a:8c:6d:62:ba:
5f:93:85:62:a0:75:f7:ab:ed:c9:7c:ae:86:0c:ae:
a6:90:22:a7:c4:56:ab:e9:0d:b4:19:24:1c:79:65:
22:e3:75:a0:2c:f7:18:60:1c:a4:4c:38:2e:cd:1a:
e4:76:fd:7d:fa:c9:08:9b:28:19:1b:99:68:97:bf:
3c:23:e1:9c:ee:23:6b:5f:72:f5:db:95:1c:4a:0e:
f3:b6:e5:77:80:c2:c8:44:17:d4:a0:d1:4a:2a:0c:
ae:4e:7f:76:8a:5c:16:35:ed:00:e3:f0:00:dc:1c:
d4:43:59:51:08:22:c2:53:5d:da:fe:d4:55:a9:a2:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:69:67:2F:68:7D:DA:6F:B6:FB:50:A9:D1:95:8A:28:56:9B:EE:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ac40ce7b-7c10-3a14-98aa-ba26a2506e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
X509v3 Authority Key Identifier:
keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.142.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:32:a8:90:a3:cd:6a:6f:99:dd:fd:d6:d9:82:b7:d5:c6:95:
37:ea:d8:de:8f:7e:66:4f:7a:d0:f8:2e:73:22:6b:bd:f3:7f:
61:22:0f:e3:cd:e2:8d:3f:c4:db:bc:c1:06:d4:c9:69:d2:3e:
fc:4c:b7:e6:01:63:12:41:2c:7a:54:e0:b9:b9:27:7e:9d:a3:
31:2d:bb:2a:e8:09:a2:2f:4e:d7:1d:4d:89:c1:84:ad:9a:53:
69:49:e8:36:1a:ee:24:21:08:48:b9:1d:bd:8f:76:dc:48:a1:
15:cc:47:fb:f3:af:c7:ab:8c:75:81:85:c5:af:34:a6:d0:fc:
c7:f3:7c:6a:1b:c5:b3:78:cd:0e:b3:52:a4:5d:a2:7a:44:48:
33:64:dc:71:c9:06:68:b8:18:74:ec:47:36:a1:19:33:7e:76:
a2:09:d4:78:be:9d:df:1e:74:86:27:66:7b:0d:52:76:d2:b1:
27:70:d6:96:71:81:21:d3:92:e0:25:c6:12:97:dd:f8:f6:06:
c2:78:4f:f7:6a:bc:8b:a5:05:6f:11:18:9e:de:ba:93:4a:14:
a6:96:61:66:34:43:65:e6:f9:d5:3f:16:c5:31:89:42:7d:07:
13:03:34:ea:85:ba:8f:86:d5:93:7f:62:6d:e5:8c:e9:f8:18:
f5:9e:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:18:35 2025 by rpki-client