Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64411576-433b-38c0-85f1-1c8f9d14407d.roa
File: 64411576-433b-38c0-85f1-1c8f9d14407d.roa (raw, json)
Hash identifier: XQMJqxO0WzsaEVnvxqF8oY2Z/M4fiSsxkGIbw/Ma/3A=
Subject key identifier: FB:9B:8D:2C:47:BB:C6:B1:94:23:9C:E4:2E:0E:CA:8A:07:A8:53:16
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845D933BFD8E6A0B42073E7A300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64411576-433b-38c0-85f1-1c8f9d14407d.roa
Signing time: Sun 12 May 2024 13:00:34 +0000
ROA not before: Sun 12 May 2024 13:00:34 +0000
ROA not after: Sat 10 Aug 2024 13:00:34 +0000
asID: 394996
IP address blocks: 64.71.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:d9:33:bf:d8:e6:a0:b4:20:73:e7:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 12 13:00:34 2024 GMT
Not After : Aug 10 13:00:34 2024 GMT
Subject: CN=a07b65a6-8f22-482d-a492-5d4b9f7904cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:cd:35:9b:a3:59:5e:83:ce:84:51:87:38:
8a:8d:c4:c3:54:cf:96:9e:14:0f:d3:32:20:87:de:
73:41:7c:be:79:21:18:fc:03:a2:ae:aa:13:3a:fc:
9a:bb:cb:e0:a9:c2:e2:5d:6c:e5:2e:26:b0:2b:86:
6d:fb:b2:ec:dc:2c:82:e2:6c:d5:74:94:b0:44:61:
94:56:6a:08:42:9c:41:19:bd:58:2e:c4:ff:6c:ef:
f0:30:b8:f4:84:f4:2e:ad:1a:89:ae:6c:77:de:08:
b0:ea:91:c3:b0:5f:99:c3:c2:07:c0:1e:8a:81:a6:
40:df:1f:cf:6c:07:77:ea:c3:6d:ef:28:02:5e:50:
9d:15:4b:0d:bf:06:5c:52:10:e9:3d:93:cd:5a:15:
1f:f8:e1:5f:af:66:75:5a:a7:0c:eb:4b:87:de:70:
1b:41:49:fe:96:c3:df:d0:39:f7:9d:7b:40:8d:65:
5c:43:61:31:91:bc:79:71:f3:12:02:aa:93:98:73:
d2:ab:e9:dc:fc:d1:c7:76:94:d1:fb:b9:04:69:30:
a6:0a:e3:51:15:8c:2f:5c:23:82:8e:9a:06:c5:35:
ba:a6:f2:2a:2e:10:9d:f3:dc:5d:d5:3c:5f:52:25:
c1:e6:fc:f5:f6:35:95:6a:26:23:92:44:4d:1a:79:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9B:8D:2C:47:BB:C6:B1:94:23:9C:E4:2E:0E:CA:8A:07:A8:53:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64411576-433b-38c0-85f1-1c8f9d14407d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:01:23:c3:bc:0b:0f:84:ca:51:1e:18:70:1c:ad:be:5e:d2:
c3:4b:cb:3b:d6:98:09:3a:0c:d6:8c:2e:cf:c3:7d:c2:6c:30:
1e:dc:f2:28:81:fb:a6:06:be:0c:73:13:df:77:54:3c:48:03:
40:8a:60:18:50:59:23:0d:63:95:a9:26:b7:9a:a6:4a:26:46:
c6:07:cc:cd:63:7a:5c:46:9b:37:96:4f:b9:e8:c8:d8:22:51:
fb:6b:7a:02:d5:42:31:2c:b0:93:38:af:2e:73:c8:55:64:14:
84:07:16:97:f8:b5:1e:8a:a1:ef:02:50:ed:0f:34:b9:b7:ab:
bd:db:17:35:dd:ae:24:92:e4:83:4a:aa:dd:5e:c1:45:c1:06:
5f:7b:66:5f:fa:a0:15:df:48:87:8b:0d:64:a4:80:3b:83:4f:
95:9b:6d:a4:2e:f5:48:a7:32:99:68:39:c8:e9:44:28:61:42:
91:71:d4:55:b5:6b:14:d7:ce:c3:28:82:d9:5d:92:41:0e:52:
4c:1e:27:67:cf:04:0f:fd:b2:c5:9e:0e:12:f7:5d:c0:b4:22:
a3:77:59:f7:00:43:97:6e:32:e9:7c:a7:db:15:36:a5:ea:73:
08:fd:c1:53:f1:77:3c:86:76:18:04:e5:67:bc:ca:b9:c0:d2:
77:7d:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:47:55 2025 by rpki-client