Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1cda129-522b-3001-9c87-d1e3a0ccbdfb.roa
File: a1cda129-522b-3001-9c87-d1e3a0ccbdfb.roa (raw, json)
Hash identifier: UDfkXuX6gXgkt5Hv9oivQJjb1zDeB4XhRtUYKtH/8rc=
Subject key identifier: EA:0E:95:73:69:F8:62:9F:77:AF:85:A4:34:6B:5E:44:E7:24:C2:A4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858463AE9A5AC6D3ADF49ADFEEC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1cda129-522b-3001-9c87-d1e3a0ccbdfb.roa
Signing time: Sun 16 Jun 2024 13:00:33 +0000
ROA not before: Sun 16 Jun 2024 13:00:33 +0000
ROA not after: Sat 14 Sep 2024 13:00:33 +0000
asID: 22168
IP address blocks: 64.62.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:3a:e9:a5:ac:6d:3a:df:49:ad:fe:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 16 13:00:33 2024 GMT
Not After : Sep 14 13:00:33 2024 GMT
Subject: CN=1fe70c47-70ee-4c57-822e-d44ff8924e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:88:f8:a7:37:a6:3b:25:9f:12:13:8d:a6:
d6:66:cc:1e:67:b6:e3:cf:17:bd:d2:91:37:cb:db:
c7:92:74:3a:81:1d:84:53:14:78:37:0a:37:53:7c:
17:f2:0a:0a:ab:6e:38:cf:51:74:f7:83:80:00:15:
9a:f0:8d:65:36:8c:3e:84:92:a2:f6:df:73:62:d2:
31:b6:ca:87:1a:97:c1:bf:47:b3:06:ba:55:77:a6:
c0:93:d3:28:c7:85:da:ee:67:ba:66:bf:74:a4:a5:
2a:b9:e9:14:c4:50:48:9b:70:47:f2:30:47:e4:e6:
67:9a:d4:b0:a9:48:c1:f7:04:7c:58:bf:b1:c0:01:
9e:fb:c4:09:63:6f:05:a0:e4:22:d2:23:6e:07:a1:
a9:13:4a:79:7f:8b:9c:32:d7:93:0d:66:b3:28:98:
77:9c:9a:82:1a:f4:ef:f0:a0:53:73:85:12:29:51:
1b:31:99:c9:eb:64:1c:36:ff:bf:db:f3:5d:49:1f:
c9:ab:62:20:4d:20:11:bf:71:92:04:b0:85:ad:89:
33:43:7b:6f:4f:56:b9:6d:e8:c6:40:3e:e0:2c:44:
b1:83:86:d1:78:9d:2f:20:46:8f:d7:6c:24:8b:5c:
12:bb:41:30:d1:13:d6:52:b8:4e:7f:8d:55:b3:3d:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0E:95:73:69:F8:62:9F:77:AF:85:A4:34:6B:5E:44:E7:24:C2:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1cda129-522b-3001-9c87-d1e3a0ccbdfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:22:6d:d5:08:80:1e:37:e9:90:f9:58:ec:15:8e:98:3f:76:
64:ed:6a:bb:4b:e9:f1:c6:ea:b1:be:05:3d:2c:9f:07:8d:a9:
ec:a0:c3:1a:f0:ad:5c:29:11:93:ce:ea:ad:e7:75:d6:f0:d1:
50:34:41:aa:1e:f3:00:34:98:32:7b:87:6f:45:7e:8b:8b:d7:
dc:34:a5:9a:55:79:9d:b3:42:5b:11:57:8e:eb:ce:9e:07:28:
ba:c6:b2:96:5e:b9:d3:a6:66:98:a9:05:67:bf:25:2e:70:a3:
a2:83:37:a4:1f:2d:67:0e:dc:c6:ef:41:8e:14:dd:e7:8c:25:
01:b8:91:85:2e:f7:d0:af:41:78:f1:94:76:7f:c1:12:19:33:
47:08:ed:a3:8d:99:f4:19:e1:35:f9:c8:e8:45:5a:48:f8:00:
eb:00:31:77:d7:72:2f:19:73:b0:b3:3c:e9:4c:a7:42:64:d8:
b4:e0:1f:c4:a8:3e:00:8f:c6:ec:c6:9f:da:9e:cd:5f:4c:c3:
64:7e:06:54:86:d8:cd:07:4c:7a:20:23:44:6f:83:b2:9b:40:
70:c0:f2:7f:f8:49:0a:1e:bb:8b:c7:fc:ca:5a:e9:48:fe:39:
1b:d5:c2:89:f8:b4:f3:99:8d:93:99:c5:e9:c3:9d:14:66:2c:
67:9e:0f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:05:24 2025 by rpki-client