Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9aa7198b-5eef-3d46-8558-57f654d35d3e.roa
File: 9aa7198b-5eef-3d46-8558-57f654d35d3e.roa (raw, json)
Hash identifier: 8Sdm1m5A+S+1R0AbjaHz30uJ7Xo9FUes8EPfGwiTUDc=
Subject key identifier: F3:AC:23:64:1B:06:65:AD:AA:74:C6:58:FA:AF:0D:35:E4:4A:5D:C3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285841EDA196E7F010717B8692EE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9aa7198b-5eef-3d46-8558-57f654d35d3e.roa
Signing time: Wed 17 May 2023 12:00:00 +0000
ROA not before: Wed 17 May 2023 12:00:00 +0000
ROA not after: Sat 18 Nov 2023 05:00:00 +0000
asID: 54502
IP address blocks: 184.104.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ed:a1:96:e7:f0:10:71:7b:86:92:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 17 12:00:00 2023 GMT
Not After : Nov 18 05:00:00 2023 GMT
Subject: CN=81f709b2-9808-467c-8e48-c617d84e09ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:98:d0:6a:70:b6:54:09:d7:6e:a7:20:bf:
84:66:9d:56:d9:d0:1a:30:ff:37:64:b8:74:ae:d8:
be:46:f0:a2:1b:02:d8:28:8e:bd:0c:f5:6c:85:7c:
f1:fb:5a:dd:36:80:ff:1f:59:89:e6:06:ee:51:d2:
3e:b3:bc:b7:8d:e8:36:67:80:b3:8b:b8:12:60:4b:
cd:18:73:9f:05:2b:11:53:61:02:6b:9f:78:e4:65:
15:9b:04:b7:7c:98:26:12:4b:f3:1c:8e:de:1a:c8:
fc:da:91:f9:1b:16:f8:e6:e9:9a:30:82:3c:6e:6d:
c1:a8:c9:d5:62:85:12:a2:3e:06:d2:b0:8e:ad:87:
b7:4e:ae:7e:a1:d4:b6:c5:7f:bd:93:0b:86:e8:4e:
85:cf:10:2c:81:36:00:b9:bc:aa:02:62:23:9f:36:
f7:fc:25:2e:49:97:31:55:2a:31:12:1c:cb:9e:cd:
06:86:ad:46:fa:32:a8:23:55:62:5d:c7:94:23:42:
16:b6:65:af:fd:67:2a:1d:e4:dc:bf:31:7e:eb:0c:
51:f0:d9:d8:a2:a4:1e:06:01:d8:8d:ea:a4:64:55:
34:3c:12:12:1a:bd:fa:a5:83:b1:06:f3:ba:d0:51:
9d:21:1a:e2:77:6b:52:0c:4e:49:91:72:96:c5:56:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:23:64:1B:06:65:AD:AA:74:C6:58:FA:AF:0D:35:E4:4A:5D:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9aa7198b-5eef-3d46-8558-57f654d35d3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.104.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:df:16:53:e5:c4:21:c8:96:c5:4c:61:7f:e2:88:29:82:d0:
bb:23:87:75:25:71:c6:b4:19:27:08:45:bf:40:7f:19:d9:aa:
9f:03:61:84:b0:42:2a:c6:39:17:d0:79:99:b7:87:91:42:70:
b6:85:a2:d3:0f:ab:5a:c0:bd:4e:8c:38:a9:91:3e:f6:76:30:
9a:30:f4:ab:58:e3:16:ff:2f:e5:0b:c1:e5:38:47:99:d5:60:
d3:7a:e0:4b:45:c9:6f:a5:68:2e:ea:92:2c:ec:1f:41:a9:3e:
db:f1:24:27:af:c0:8c:36:bb:e6:1d:bf:5f:60:d8:a6:cb:92:
96:c6:72:ea:3c:ab:04:6a:c6:af:6d:e1:cd:9e:2a:84:0b:d7:
2e:3f:8d:cf:ac:cb:ec:3e:35:4a:58:c3:a3:2c:4b:51:e3:19:
1a:a9:de:68:5a:86:9a:35:53:3d:29:26:e9:9e:3d:d5:85:df:
8d:b2:54:b0:5f:68:47:31:67:06:49:47:f5:43:72:a4:c3:93:
18:78:17:23:8d:f8:c8:c2:c6:1c:38:89:70:97:84:31:37:2d:
5c:ef:ee:e9:38:42:8e:76:de:e0:c4:b2:a9:7e:ec:df:ac:f7:
e9:10:7f:89:62:c9:07:95:4d:c9:59:e2:78:73:d0:09:46:fc:
bb:af:08:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:16 2025 by rpki-client