Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/72180084-8a27-3781-a896-ce1f0a90b78d.roa
File: 72180084-8a27-3781-a896-ce1f0a90b78d.roa (raw, json)
Hash identifier: U9kK29/XlZGBuzYCuhfy+KkObsJ3rkOwLPDmBZqovCA=
Subject key identifier: 29:02:08:66:98:CB:FB:AB:57:BC:78:2E:2D:32:AB:D7:0C:CA:53:03
Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial: 010D0C9F4328584664C9E22111F6DB98D48A5800
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/72180084-8a27-3781-a896-ce1f0a90b78d.roa
Signing time: Mon 01 Jul 2024 13:00:33 +0000
ROA not before: Mon 01 Jul 2024 13:00:33 +0000
ROA not after: Sun 29 Sep 2024 13:00:33 +0000
asID: 16509
IP address blocks: 67.219.244.0/24 maxlen: 24
67.219.245.0/24 maxlen: 24
67.219.246.0/24 maxlen: 24
67.219.247.0/24 maxlen: 24
67.219.248.0/24 maxlen: 24
67.219.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:64:c9:e2:21:11:f6:db:98:d4:8a:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
Validity
Not Before: Jul 1 13:00:33 2024 GMT
Not After : Sep 29 13:00:33 2024 GMT
Subject: CN=3bc9c34d-fba3-401c-9245-1f6899706ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:f9:f3:56:92:57:f4:50:7e:a7:c2:fb:1a:
d4:81:00:51:fc:21:f7:db:10:1d:9f:8d:50:a7:1e:
c9:58:f8:fb:ff:7b:2c:36:c3:62:8f:fe:f8:7e:ef:
75:a4:73:e4:82:89:75:45:a1:49:51:f6:1c:a6:3e:
c0:56:cf:65:6d:df:e4:c2:b8:67:e1:06:37:e9:ec:
50:78:a6:7e:de:08:b8:81:57:78:82:a6:b1:6d:fc:
54:05:b5:36:80:86:7a:7e:6e:97:4f:39:43:8e:71:
a5:fc:e1:6e:40:92:66:45:d4:22:98:cf:20:6d:58:
52:0c:83:d3:20:8b:3a:b8:bf:06:ba:47:1b:de:0c:
04:2f:07:0c:56:91:02:2d:a4:a7:38:f0:16:16:34:
eb:8c:25:97:cb:c1:27:1f:df:1d:0a:96:7c:e7:4e:
7a:73:79:08:3e:d2:08:81:00:79:bd:44:fd:35:2b:
16:30:2c:ab:53:5a:a2:0d:e0:c1:90:96:38:97:6e:
47:f4:e7:bd:b2:22:73:61:1e:21:c2:10:4f:90:e2:
68:da:6b:2f:bc:b6:7b:8a:fd:f2:c7:7c:31:bb:f7:
e3:6f:22:9d:4d:c5:34:31:1a:cb:3f:6b:cf:30:94:
26:9d:f2:b8:75:43:5c:54:8c:c0:d1:d9:ed:fa:af:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:02:08:66:98:CB:FB:AB:57:BC:78:2E:2D:32:AB:D7:0C:CA:53:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/72180084-8a27-3781-a896-ce1f0a90b78d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
X509v3 Authority Key Identifier:
keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
sbgp-ipAddrBlock: critical
IPv4:
67.219.244.0-67.219.248.255
67.219.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:6b:1c:7a:03:c7:6a:56:e5:9f:31:61:fe:07:59:d5:e4:46:
93:f8:37:32:70:cf:10:e6:da:66:b5:04:9d:a5:97:08:75:41:
35:b0:a4:d4:71:aa:85:78:1a:40:d7:6f:5d:e7:d0:f4:67:7a:
1f:8c:0f:7e:31:07:6e:fa:f4:fe:af:1d:37:b1:06:35:5c:a7:
08:13:fd:ef:d0:89:ca:aa:a5:6c:96:c8:29:0a:dd:4e:0d:fe:
dd:0e:d2:8c:27:bd:26:45:2a:11:b3:3b:41:9b:59:61:61:60:
13:99:51:8d:a0:5d:5b:23:3b:02:48:61:f9:23:fd:6f:4a:bf:
9a:89:af:25:d4:a0:4c:52:34:63:d3:98:42:58:93:a3:d8:30:
99:fa:a4:45:47:ef:24:84:7b:5c:34:2d:5b:ee:e5:17:91:88:
1c:2f:6f:45:fe:ea:cd:bf:c9:31:5e:a5:c9:e5:da:53:9c:c8:
a7:94:e9:12:2c:b6:f8:df:ed:ac:58:d6:12:83:5d:d5:e2:54:
ff:b5:d5:65:1b:d6:4a:24:9d:88:8a:86:e6:cd:72:16:0e:32:
e5:df:ed:45:8a:75:ce:c3:19:12:83:21:f0:66:9a:ba:a0:29:
e1:46:cc:9a:d9:f0:cc:f0:b8:d3:92:7b:8f:49:50:b6:44:c7:
83:cf:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:49 2025 by rpki-client