Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/6c11e1ee-2dc3-33ae-bbe4-e4062a990805.roa
File: 6c11e1ee-2dc3-33ae-bbe4-e4062a990805.roa (raw, json)
Hash identifier: OMKG7qzpCpBjfbv5n7RQpMsAcBn8uMkThcOJYpJhpc8=
Subject key identifier: AE:3A:2F:AC:32:25:05:64:19:BA:BE:68:A5:0A:AA:D1:0F:0E:2E:90
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F43285848265FF731BC5E1E72B0D77600
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/6c11e1ee-2dc3-33ae-bbe4-e4062a990805.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 14315
IP address blocks: 68.67.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:f7:31:bc:5e:1e:72:b0:d7:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=bdacb448-dd21-482d-b91d-a8ceaaf44243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:0a:42:e1:ce:c1:bc:41:68:79:33:ef:29:
a9:71:b8:aa:9e:90:22:36:7c:40:2b:6f:8b:20:7f:
fd:85:e6:1a:0a:bd:59:f7:63:f0:4a:ed:30:84:8b:
40:c6:bc:02:7b:c9:40:de:92:11:58:72:0f:56:65:
20:9d:a6:33:0b:ae:4d:15:cb:85:20:9f:3c:86:40:
b1:a3:fc:24:0b:b5:ca:bf:29:33:2e:9d:ec:73:ff:
e5:0a:1e:ad:f4:bd:08:9a:c4:3f:8f:b0:93:45:e7:
92:e8:cd:d1:8b:49:ef:70:76:44:32:f6:a6:9f:95:
ea:47:19:c8:6a:35:82:82:6b:19:78:90:88:97:3b:
6f:d8:11:b8:ee:bc:1e:28:37:48:1d:bb:01:a9:87:
96:5b:c2:9c:b7:3b:b8:69:d7:b3:d3:c2:83:3b:7a:
e8:cb:ca:98:80:e8:ec:4a:92:2e:dc:a2:cb:cf:2b:
0b:58:1b:cc:0c:d9:e3:16:f5:17:90:15:70:79:15:
8f:d2:86:20:99:1c:d4:b3:d9:00:ed:3e:f5:9b:f0:
2b:58:09:74:76:1c:b8:28:7c:82:da:a4:1a:d8:51:
e6:05:d0:af:67:9e:fc:eb:1d:dc:20:2e:0a:a3:2a:
8b:ab:e7:59:8a:56:45:35:22:15:2f:93:ea:2a:3e:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:2F:AC:32:25:05:64:19:BA:BE:68:A5:0A:AA:D1:0F:0E:2E:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/6c11e1ee-2dc3-33ae-bbe4-e4062a990805.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:d0:af:f3:a1:c1:c4:d7:76:dd:e2:be:89:b5:27:32:90:0d:
7b:81:61:aa:cf:27:b2:81:91:9e:82:01:91:cd:df:dd:0f:58:
dd:91:a0:1d:69:d1:c7:96:50:e7:55:27:71:03:80:3d:08:c9:
58:70:52:26:48:f1:e7:2a:e5:c6:88:84:07:f3:1b:87:24:24:
bd:04:1b:d8:cf:21:26:3d:ec:da:76:1d:13:a7:a3:39:d3:80:
59:fc:8e:28:25:b0:32:5d:56:0e:ea:bc:ac:09:c5:5d:f9:13:
c6:30:c7:e0:0b:ef:08:bb:f3:34:9a:c9:19:46:8f:82:2a:20:
12:7d:e1:be:d5:8d:0d:1e:6b:fc:54:f5:7d:cc:b6:d7:60:19:
fb:b2:c6:1a:18:aa:bc:2a:5f:6e:20:c1:f7:f8:3b:c8:41:c8:
8c:9f:ea:8b:c0:a6:6a:69:2e:9f:b2:a4:aa:64:1b:a5:3d:03:
ff:bc:91:47:0c:55:1c:b7:7c:0b:a6:7d:6d:10:d4:b7:e7:ca:
cc:89:78:d2:8e:c1:db:73:75:39:0f:3a:96:eb:2d:e2:43:37:
c0:4f:db:3e:15:aa:ee:0f:a2:3a:c1:94:db:13:39:f8:51:f8:
7e:83:2b:92:e7:99:3e:56:e5:75:92:e6:82:00:e5:cb:2c:97:
6a:25:35:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:20 2025 by rpki-client