Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/f0aa875f-bb99-3bbd-bbb7-04151511bbba.roa
File: f0aa875f-bb99-3bbd-bbb7-04151511bbba.roa (raw, json)
Hash identifier: BHlD+UIXBVTzFcFx/IAFgYWtcMUDRTLzZfL3/7Bgjck=
Subject key identifier: 77:F0:D6:28:81:1F:BA:6B:FE:FB:28:89:FF:D0:C9:B8:8C:2D:D7:1F
Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial: 010D0C9F4328584668F9D926A17D5421FC628F00
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/f0aa875f-bb99-3bbd-bbb7-04151511bbba.roa
Signing time: Wed 03 Jul 2024 01:00:24 +0000
ROA not before: Wed 03 Jul 2024 01:00:24 +0000
ROA not after: Tue 01 Oct 2024 01:00:24 +0000
asID: 26282
IP address blocks: 67.219.246.0/24 maxlen: 24
67.219.247.0/24 maxlen: 24
67.219.250.0/24 maxlen: 24
67.219.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:68:f9:d9:26:a1:7d:54:21:fc:62:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
Validity
Not Before: Jul 3 01:00:24 2024 GMT
Not After : Oct 1 01:00:24 2024 GMT
Subject: CN=2ed89d76-e8b6-465b-bb07-89f09e1a26fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:47:9a:e8:ef:3e:29:6d:0f:69:2e:80:6f:
b7:b0:39:07:26:65:1a:f2:cc:be:fb:6a:dd:d4:70:
b8:cb:71:6c:e4:43:16:29:5b:74:bc:dd:cc:4b:ec:
6e:59:e4:89:f1:5e:85:42:86:4e:67:5c:41:ee:c9:
ff:7f:d8:9f:37:9b:bb:59:c5:ad:f8:27:1f:f0:48:
5c:7f:84:66:df:50:ae:eb:0f:22:7a:a1:71:c4:45:
6d:a4:b7:e9:54:7e:66:5c:ac:63:16:c3:33:44:9c:
e0:5a:60:dc:0c:71:c3:89:bc:5d:85:ca:3e:c1:79:
a6:56:fa:4a:a7:ab:68:b2:b8:b2:e2:84:c7:ce:d8:
82:83:00:24:8c:51:15:cc:26:0c:dd:0a:3c:83:8f:
96:4f:39:49:27:be:9e:da:cf:ef:e6:fb:0c:15:e1:
bb:67:e8:75:9f:c0:99:9c:db:52:b8:e7:9d:2b:05:
60:fc:4d:e4:17:8c:c6:7f:22:e0:61:5d:e0:e7:1e:
83:d7:b1:6c:a9:d1:be:c4:cb:2f:d5:ab:89:54:ea:
83:66:6b:ec:94:9b:9f:21:89:70:fb:62:a8:46:d1:
14:a7:5c:41:ad:8c:e7:fe:ff:ed:3f:18:e3:c0:66:
f6:a8:a7:86:71:9c:e5:0e:c2:b7:ff:6a:6e:c7:ee:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F0:D6:28:81:1F:BA:6B:FE:FB:28:89:FF:D0:C9:B8:8C:2D:D7:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/f0aa875f-bb99-3bbd-bbb7-04151511bbba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
X509v3 Authority Key Identifier:
keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
sbgp-ipAddrBlock: critical
IPv4:
67.219.246.0/23
67.219.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:2a:aa:aa:5b:4c:c9:bb:7c:6f:94:a9:29:1b:f4:9b:75:e6:
bb:ae:36:95:a8:cc:d5:c7:a7:b1:2f:eb:ba:2a:ad:89:fe:51:
22:21:78:df:66:4f:c7:88:cd:66:bc:72:f3:2c:56:39:37:56:
23:d9:df:2d:fd:c9:c1:0f:e3:cd:f6:55:0e:23:ba:33:43:d5:
b9:bd:e5:46:2d:69:11:62:f6:ec:17:76:6e:1e:ab:5d:88:69:
d6:e6:bf:be:0c:70:6f:06:bd:65:6d:37:39:a9:69:df:bc:98:
e6:0b:9d:7e:aa:da:05:8c:f1:55:7a:a6:df:94:fd:53:35:45:
ff:b5:b2:0e:1a:8d:42:c4:99:a8:78:cd:f7:cf:ce:c5:7b:74:
30:df:83:a1:d1:5c:7d:e4:fc:78:c0:10:cc:42:2e:25:2a:b4:
49:74:d3:d8:2b:a8:87:89:44:5d:19:8b:c6:0f:a9:9c:7d:00:
df:b8:29:10:75:f1:40:f9:17:d3:3c:a0:b6:d5:96:e7:57:e2:
c8:ba:95:9d:a8:61:76:af:10:4c:ef:83:73:58:24:70:6c:8a:
4c:87:ce:32:67:1b:07:51:52:fb:05:9b:25:3c:27:e9:47:5a:
b1:16:70:cc:9b:86:4d:f6:8f:b6:c1:62:d4:3d:0d:6a:60:d5:
9a:1e:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:32 2025 by rpki-client