Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b105939-009a-3d2f-acbc-27ddc682322c.roa
File: 0b105939-009a-3d2f-acbc-27ddc682322c.roa (raw, json)
Hash identifier: KuQuVj6pOw84wH1RxtHho7LEiMzsGRlbi7c8nCDQOeg=
Subject key identifier: 82:BA:A1:18:36:02:71:4C:84:ED:8F:5B:AE:B9:DC:9B:24:3C:DC:76
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584620644D1626831E7338BC9500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b105939-009a-3d2f-acbc-27ddc682322c.roa
Signing time: Fri 07 Jun 2024 01:00:24 +0000
ROA not before: Fri 07 Jun 2024 01:00:24 +0000
ROA not after: Thu 05 Sep 2024 01:00:24 +0000
asID: 46646
IP address blocks: 65.49.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:20:64:4d:16:26:83:1e:73:38:bc:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 7 01:00:24 2024 GMT
Not After : Sep 5 01:00:24 2024 GMT
Subject: CN=a61b8f99-2f0e-4d93-81e2-56dcaa4cdc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:b2:be:41:53:b6:a5:c2:8d:6b:05:f0:25:
5f:52:5f:a3:a0:ee:74:67:f1:e1:d8:17:22:ea:62:
ee:1b:83:7a:75:fc:6b:65:5b:d3:c7:e7:a6:ca:ec:
71:19:5c:4f:83:f3:70:17:55:e4:ef:57:5b:26:e4:
67:3d:55:dc:d2:6e:82:a5:f9:35:9c:8b:53:43:3c:
3b:2b:27:ce:ec:3e:76:94:bf:0f:e4:10:58:3e:71:
88:86:73:c4:ad:d7:80:15:ef:55:99:79:b7:58:d5:
ec:dc:12:4f:d7:43:91:62:ba:e7:a2:47:a0:b7:c3:
fe:13:65:f5:3c:c3:e6:b7:09:14:33:30:31:18:a7:
de:e2:b3:68:18:2d:dd:78:d0:2e:c4:9e:15:9f:44:
28:84:d7:06:cd:29:29:bc:2a:63:bd:13:20:0f:f6:
da:cf:89:3b:c9:e4:22:2f:37:3e:e7:a2:e9:8c:9f:
4a:62:c7:7f:40:cf:20:98:e6:50:72:de:62:98:c3:
b3:e2:5e:5d:2b:9a:e6:49:b9:8d:66:5a:cf:84:08:
27:04:96:f5:1e:12:e0:e1:bf:9b:dc:d4:f4:1c:ab:
e2:7b:7a:35:97:0b:a5:8e:e9:84:f9:5e:67:be:4e:
da:55:d5:f6:9f:b0:16:49:c6:7a:a4:01:01:b3:04:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BA:A1:18:36:02:71:4C:84:ED:8F:5B:AE:B9:DC:9B:24:3C:DC:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b105939-009a-3d2f-acbc-27ddc682322c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:a7:bd:eb:ff:93:cf:f9:2e:62:9a:09:c4:56:a2:a1:fd:67:
5a:aa:43:fa:a9:21:72:0c:93:b0:a2:f2:70:eb:f8:d4:09:01:
5c:dd:f2:4b:d3:ac:cb:6d:1d:49:be:3e:26:de:70:63:f9:24:
89:9c:00:09:c6:da:f9:ec:90:91:5f:36:e6:17:4c:9b:7c:b7:
0c:75:fe:be:bf:da:a8:a4:29:e0:40:07:6e:f6:60:21:d7:2d:
94:6f:84:75:25:ce:71:5b:63:7f:02:5e:e2:1b:a8:3d:c5:b4:
95:25:49:f6:9f:85:5a:31:57:88:a9:b9:37:28:44:de:02:f5:
4e:dc:7a:99:8d:e9:24:9d:d3:44:85:04:c0:7a:3d:21:8f:de:
0c:5b:01:63:b9:7f:a0:c3:3e:c9:c2:dc:58:fb:5a:5c:5b:21:
a6:60:55:4e:2b:8d:fd:72:c2:40:17:12:46:9b:b6:3b:d1:fd:
4e:a1:2c:4b:d9:ed:22:26:6d:77:72:0a:ad:53:b8:f5:fb:cf:
6f:f8:ff:52:34:eb:c1:31:e8:12:ca:bf:a3:ce:b6:ab:84:1d:
fb:d1:73:29:aa:3f:72:6b:26:da:38:ae:e0:70:63:06:03:63:
cb:a4:e2:e6:0c:19:de:83:ac:91:3d:c0:76:70:ac:ef:78:5f:
75:f8:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:21:47 2025 by rpki-client