Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/c688e021-2e03-3b91-b846-a81e96dc4b11.roa
File: c688e021-2e03-3b91-b846-a81e96dc4b11.roa (raw, json)
Hash identifier: w70HFSCN93lxar+Ga84GIJQgtohQwvKqVlS8ouSHATY=
Subject key identifier: E9:C5:DD:33:C0:4D:E5:37:D1:9B:DF:AE:BD:66:CE:A6:94:69:9C:59
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328583A5D7C5DC4F423568007BE4000
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/c688e021-2e03-3b91-b846-a81e96dc4b11.roa
Signing time: Thu 24 Jun 2021 04:00:00 +0000
ROA not before: Thu 24 Jun 2021 04:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 36692
IP address blocks: 67.215.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:5d:7c:5d:c4:f4:23:56:80:07:be:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Jun 24 04:00:00 2021 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=bd3cf664-f7be-4100-bc97-da080446f4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:9c:20:26:c2:4e:41:7a:30:35:fb:d1:2f:
a6:45:79:5d:99:a3:92:92:6e:78:df:2b:32:51:ba:
6a:e6:23:d0:9c:06:d5:d3:75:cb:62:8a:f4:ab:5d:
45:b2:3c:80:39:83:72:fb:ef:d6:74:ad:51:0c:b5:
25:32:dd:ba:73:23:d7:c5:ea:a0:0f:e4:27:5b:cd:
25:5e:62:7e:29:41:e5:0d:cc:3a:5d:fa:97:da:fc:
88:33:f3:f6:9e:1f:88:81:3a:b3:a4:82:88:e8:c7:
c7:0e:ab:34:e4:c1:f1:2a:cc:e4:c0:3b:73:a5:e5:
c4:44:e0:58:90:16:8f:c9:0d:ab:fe:97:8b:50:05:
1f:2f:7b:4b:bd:da:c7:bc:a3:53:7d:16:53:fd:c3:
7b:ef:4c:3f:a5:a4:8f:61:45:3f:3a:7e:5e:99:dd:
05:9b:82:37:81:b0:87:28:5e:af:96:c8:e0:5e:74:
45:a6:fa:8b:7d:06:08:cb:95:0e:c5:48:e5:08:bd:
cd:a9:87:7e:f9:1a:47:94:88:8e:b0:d4:5c:15:16:
33:ad:93:3b:1f:99:b6:40:d7:71:45:94:8a:04:4d:
e4:0e:9b:50:e5:65:73:24:7a:95:c6:36:80:22:6e:
9d:27:c6:22:16:ee:5d:44:93:d2:5d:f1:4e:f0:80:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C5:DD:33:C0:4D:E5:37:D1:9B:DF:AE:BD:66:CE:A6:94:69:9C:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/c688e021-2e03-3b91-b846-a81e96dc4b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.215.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:6c:ab:35:06:5f:4d:7a:aa:d5:bd:a7:cc:12:45:92:5f:9d:
13:71:60:ef:70:d7:c7:a8:cc:5c:f5:25:ff:94:be:1c:8e:22:
75:5f:0e:7f:87:ff:f8:77:54:69:a6:1c:c9:3b:3f:95:85:9c:
a1:30:72:1d:44:0f:f9:1d:02:36:b9:dd:32:90:ec:06:e0:5c:
7e:5c:78:f2:e7:59:65:2a:5d:dd:45:a1:b9:a1:53:d3:bb:8b:
47:25:4c:94:82:da:c3:68:c6:98:e8:87:ca:bd:14:4f:7e:94:
3c:7e:d2:55:1d:88:83:67:ca:f7:78:48:08:40:4e:b9:33:8a:
c7:cf:65:d9:7d:6d:37:8d:a3:31:6b:63:b8:1e:8c:97:fe:97:
51:5a:14:91:34:14:26:4a:10:fd:c7:d1:d7:b3:74:4f:24:2c:
12:3a:94:9b:f4:69:6a:5d:27:7d:91:89:c7:55:2e:a6:88:41:
41:43:19:cd:97:de:c1:a5:f7:73:18:03:69:28:e5:d8:a2:3d:
bb:92:3d:b3:30:8d:3c:5a:29:56:96:2a:a8:0c:d2:f6:2d:f6:
ad:71:e9:1c:7a:a9:8e:52:8a:32:21:51:2e:4f:8e:6d:e7:48:
a1:48:bf:9b:64:e7:3d:5a:5c:e2:fe:57:b2:08:52:c4:41:2d:
ba:f8:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:44:44 2025 by rpki-client