Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98d03654-ce18-35d1-8351-ddc106792cb8.roa
File: 98d03654-ce18-35d1-8351-ddc106792cb8.roa (raw, json)
Hash identifier: RRqYxPASGafzV1zLSuGFVCV240szMOwST5gon1oQEb4=
Subject key identifier: A3:37:AD:8A:36:74:66:C8:4F:06:00:B2:D0:5F:EF:C1:AF:E2:01:E5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A5115315150010C5154E500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98d03654-ce18-35d1-8351-ddc106792cb8.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 36111
IP address blocks: 184.105.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:15:31:51:50:01:0c:51:54:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=b25d465a-d3fa-4968-8e67-fcd16bcd9a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:11:a7:91:ba:ff:00:a7:33:e7:e8:23:24:
4e:2b:1e:65:e6:f5:60:2b:23:a1:c4:ad:d8:20:12:
57:e7:fe:33:01:58:4e:d9:20:dc:36:d1:b3:b0:31:
da:f6:00:f8:05:96:75:e4:d3:69:88:65:f6:fb:ce:
84:8f:ef:2a:e7:2a:1d:8b:f6:49:24:d3:7c:ce:0b:
a8:1e:c4:d1:da:5c:81:90:3d:48:a4:df:7c:f1:cb:
84:d1:6e:4a:62:4b:d0:e7:93:5e:60:76:26:78:c2:
54:b7:73:68:4d:af:62:f4:01:dc:8f:8a:44:61:b5:
44:76:70:77:f1:10:b9:69:13:3a:61:c6:6c:2c:25:
8a:a2:d6:c8:c5:ca:5d:b6:19:7c:90:61:df:67:38:
ce:fb:24:e4:a5:8f:01:8f:3f:01:ad:6c:7b:4d:1d:
2c:ed:f7:52:c9:f4:df:4d:15:2f:5d:18:ee:a6:a2:
4f:d3:19:bd:ad:f6:5e:9e:55:78:86:75:22:a1:5f:
5a:28:a6:f8:19:6b:0b:0a:ba:44:25:e7:93:14:75:
5a:9d:d1:89:36:d0:7b:c9:81:b8:42:96:62:f1:f4:
74:08:5d:ca:5e:99:5d:62:c0:bc:f6:3d:5e:fd:ce:
0f:1f:7a:1f:b9:28:d4:a5:9b:31:4e:5a:8c:6c:e3:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:AD:8A:36:74:66:C8:4F:06:00:B2:D0:5F:EF:C1:AF:E2:01:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98d03654-ce18-35d1-8351-ddc106792cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:2f:51:7e:49:41:da:54:2d:8e:58:28:a5:05:4e:c6:78:f2:
2f:7b:52:ab:58:12:95:ed:0d:48:75:35:25:0a:0c:07:e9:4a:
25:0e:bc:f4:a8:e0:d5:6b:ae:8d:46:d4:eb:bd:64:61:68:7f:
e6:23:22:3e:12:f4:82:3f:13:27:a4:ef:51:ec:1d:ff:0f:42:
be:56:de:f8:f9:07:8a:f5:fc:7a:23:42:79:82:42:45:71:08:
60:9a:3f:40:75:d5:94:05:e8:20:37:29:88:20:a7:56:93:e8:
d5:3f:77:04:51:1d:1a:af:f7:da:e5:30:1e:04:a5:77:53:35:
31:19:08:64:85:64:f2:df:c9:c3:ea:81:8b:9b:ee:f5:5f:5b:
5f:f1:d6:e5:bd:e6:fb:72:40:25:c4:ea:27:ab:65:0a:b9:1e:
1b:4b:4b:f8:fc:d4:b1:a8:f7:3d:64:58:7b:22:39:5c:cc:dc:
ab:c0:04:53:85:26:ef:9e:d6:eb:33:f7:73:5f:76:44:db:88:
75:06:42:d0:8b:eb:96:bc:b6:60:90:61:a3:20:d4:2b:22:4a:
38:13:79:d3:4b:0a:fa:f2:cf:98:d5:b4:f7:12:3e:fa:32:4d:
ca:b9:a6:e9:ba:fa:6b:d1:c8:34:51:68:ca:d8:54:e0:24:f1:
e9:da:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:18 2025 by rpki-client