Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7eb16e2c-d4c7-3227-bb03-08c82fe32e8d.roa
File: 7eb16e2c-d4c7-3227-bb03-08c82fe32e8d.roa (raw, json)
Hash identifier: G1B63bmoowLJa/aTL2d9LnEx2Py5BQY5Gv+9uyrTGPA=
Subject key identifier: 88:5A:7A:E8:4A:8F:4E:1E:AE:44:4D:AD:FE:4B:42:1D:E0:E8:D3:4B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF9E4AD5111A5F1411860
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7eb16e2c-d4c7-3227-bb03-08c82fe32e8d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 40571
IP address blocks: 209.51.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f9:e4:ad:51:11:a5:f1:41:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=7b2de9bf-78a4-49e0-a11b-b4beb87051ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:58:77:a5:15:6e:50:00:2f:e8:7e:07:25:
a5:9f:33:ba:14:f6:cc:27:98:6d:70:7b:e1:cf:f9:
14:ec:c1:3e:1f:dc:9f:a1:c9:9f:28:3f:b7:f6:44:
73:d5:b1:18:f1:99:b8:ba:b0:a1:e1:55:b9:75:38:
c1:83:c3:e2:9e:a0:1b:d5:fc:ce:bd:db:e7:3c:7a:
f3:32:6a:8c:ef:b1:2e:01:c0:40:68:cb:ed:1d:c1:
01:86:c7:e9:34:55:7f:90:20:24:49:1a:bb:50:d2:
2d:fd:8d:85:75:a1:8f:4f:dc:06:ee:23:ea:b5:a5:
cb:54:60:b1:ba:7d:b1:25:17:4f:20:14:d3:d7:a9:
c4:f6:36:b1:08:3f:89:2b:58:63:fa:8c:20:06:ac:
c6:46:22:15:b0:6d:1b:88:2a:87:37:bb:9e:0a:2f:
f7:fe:6e:27:ad:81:ce:b7:a5:fb:ea:4f:f5:d2:99:
42:0d:06:59:fb:17:f2:3b:3c:fd:8c:39:5e:d6:87:
1b:a3:cd:f2:92:4d:d9:8f:f1:eb:f0:b6:7a:76:31:
b2:04:14:40:14:14:ca:db:6d:5f:02:ed:c6:06:77:
66:dc:68:31:cf:fb:5e:72:22:82:13:32:56:23:c5:
73:35:a2:a3:a3:df:cf:95:f8:70:8f:01:a2:55:88:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5A:7A:E8:4A:8F:4E:1E:AE:44:4D:AD:FE:4B:42:1D:E0:E8:D3:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7eb16e2c-d4c7-3227-bb03-08c82fe32e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:28:2d:ea:63:f7:d1:0f:ea:6b:7c:8e:ee:e7:25:b9:6e:52:
b5:e0:ac:40:4f:b4:18:cd:0a:7d:0e:7f:1b:7f:07:51:b7:b6:
99:91:67:ed:c4:ed:32:b6:82:64:51:0d:0a:fd:83:de:fb:a0:
19:bf:b3:48:e8:36:aa:52:cf:fb:35:df:39:78:54:bb:f3:85:
06:03:c7:81:ef:a1:8f:76:b7:91:24:3a:9e:1a:4e:09:21:a8:
1d:33:a5:c0:4d:1f:9e:f3:cd:40:33:42:cd:8c:79:b6:e1:de:
a7:4a:e4:47:2a:68:99:2f:2a:39:b7:31:75:21:b3:5c:fb:bd:
34:1e:0e:6a:19:6e:40:bc:f8:56:aa:34:83:0e:b2:da:d5:54:
25:dc:dd:94:32:c8:f3:f5:3d:cd:d7:35:d4:99:7b:e4:48:c5:
50:d6:f4:6b:fe:b7:92:22:94:12:a5:10:c9:46:5e:55:9d:39:
0e:5f:b2:b7:a7:fd:1c:92:db:12:2d:5b:61:ad:d2:72:c0:3f:
6e:03:ba:a0:30:25:23:52:8c:d2:14:9c:d3:20:ca:1d:69:7e:
71:88:28:39:e5:5d:f4:68:6a:a4:32:10:ad:86:fa:5c:de:85:
67:4a:b5:f9:a2:33:c1:02:10:dc:25:18:a7:04:c3:f5:2a:9a:
28:1e:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:23:35 2025 by rpki-client