Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7578e1d5-6bac-39df-8f76-a75fa9f60fa0.roa
File: 7578e1d5-6bac-39df-8f76-a75fa9f60fa0.roa (raw, json)
Hash identifier: PAyB+NZdKzQlraWm7gsnsZUN8TSW8vZVSCV8DjukDPU=
Subject key identifier: CF:F8:24:9F:DA:FA:9A:65:7E:F3:61:AD:05:38:28:02:D2:65:15:FE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845F3C8315D80B0F742F96A1A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7578e1d5-6bac-39df-8f76-a75fa9f60fa0.roa
Signing time: Wed 22 May 2024 01:30:52 +0000
ROA not before: Wed 22 May 2024 01:30:52 +0000
ROA not after: Tue 20 Aug 2024 01:30:52 +0000
asID: 397493
IP address blocks: 64.71.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f3:c8:31:5d:80:b0:f7:42:f9:6a:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 22 01:30:52 2024 GMT
Not After : Aug 20 01:30:52 2024 GMT
Subject: CN=d858c5ac-6d1f-41ce-8a0c-ca8191af4ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:cb:c9:57:d0:ce:cd:e7:cf:0c:e5:cb:70:
24:72:98:eb:d9:c1:5a:0b:30:9c:85:33:e0:de:bd:
0a:50:94:4b:d7:6a:57:2c:e0:f8:35:d3:bb:7d:fb:
c1:ac:a0:16:ac:8e:ed:80:60:35:56:aa:a1:4a:be:
be:7c:f1:0f:be:ba:ae:24:12:64:e7:db:4b:8b:14:
af:e6:30:ad:f6:1e:f0:4a:81:24:e3:a9:66:8e:1b:
3e:85:3a:73:27:07:5e:8a:fe:d1:9f:78:80:db:55:
53:d6:da:4e:2b:2e:fc:9c:29:eb:b9:ea:a3:c0:75:
eb:58:0f:21:2d:61:8d:92:17:5b:54:70:18:be:47:
47:20:84:c7:d2:18:c6:45:88:34:0d:bf:48:68:a6:
3f:38:c7:3b:5c:23:ba:e8:4a:a5:bf:d9:49:93:5d:
56:f4:01:52:21:82:43:9d:ad:06:2f:e8:9f:66:20:
9a:82:21:58:b5:1b:b5:64:f2:30:02:bd:ae:3c:84:
cc:71:55:8e:4e:a2:f8:96:e7:36:3d:ec:db:6d:65:
5d:ca:07:0b:39:4e:41:13:f6:3c:d0:c0:bd:dc:ae:
ec:01:43:a8:6f:b9:34:dd:91:03:88:b4:55:b4:3e:
19:75:23:c5:8f:6d:ba:21:fa:ef:df:5d:6e:7d:ad:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F8:24:9F:DA:FA:9A:65:7E:F3:61:AD:05:38:28:02:D2:65:15:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7578e1d5-6bac-39df-8f76-a75fa9f60fa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:a2:46:51:5e:35:f2:52:9a:f9:3f:eb:16:92:b0:52:f6:f1:
5f:d1:43:5b:76:21:d0:66:54:28:74:fa:f4:ec:79:89:c1:d5:
6b:17:fb:8a:da:1e:28:2e:e3:75:cd:f3:ba:fd:f7:57:92:2f:
f6:c5:fb:f0:62:b6:31:f9:20:9d:83:e9:54:80:8a:0e:f7:8b:
08:be:02:13:fb:e6:8c:b5:72:e0:a9:fb:f2:9f:af:66:ce:ff:
65:68:cb:04:f1:fb:37:14:2b:77:ad:af:f6:ce:cf:cb:70:25:
c3:c1:38:55:29:e3:79:16:a4:87:c3:4c:e0:ea:fd:28:d9:15:
a6:07:f5:ef:c8:95:cf:a5:c2:be:fa:fc:28:7a:a6:4a:6b:07:
a0:a5:0a:31:84:b3:14:14:2b:69:9c:77:33:88:01:c7:53:47:
18:4a:1a:ac:4b:f7:ac:c6:5c:43:bc:c2:9c:7b:e3:9f:1b:47:
4d:b6:dc:95:7c:e6:f0:fc:89:1b:45:ea:f9:4c:9a:4c:31:77:
44:a0:43:d1:2a:28:e2:33:64:2a:bd:ab:a2:6c:cb:e6:bc:d5:
5d:23:43:8e:ac:0a:4e:05:c8:09:c6:6e:86:66:0e:ef:57:60:
44:b8:6b:11:1a:d5:60:41:38:39:a6:0b:ca:d9:9f:4f:b9:93:
5e:34:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:21 2025 by rpki-client