Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c0f81cd3-c84b-33f0-987f-bc6c7fbb60d9.roa
File: c0f81cd3-c84b-33f0-987f-bc6c7fbb60d9.roa (raw, json)
Hash identifier: O+blupzQIU9MJQOijkk9Ubr8RKv5E+CiYYSpknF0rOs=
Subject key identifier: 58:99:53:4D:81:17:EC:B1:89:9E:06:A7:66:4C:49:D7:86:23:74:FC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858446E737A641A53EC7118A39CC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c0f81cd3-c84b-33f0-987f-bc6c7fbb60d9.roa
Signing time: Wed 03 Jan 2024 14:30:44 +0000
ROA not before: Wed 03 Jan 2024 14:30:44 +0000
ROA not after: Tue 02 Apr 2024 13:30:44 +0000
asID: 14978
IP address blocks: 209.51.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6e:73:7a:64:1a:53:ec:71:18:a3:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 3 14:30:44 2024 GMT
Not After : Apr 2 13:30:44 2024 GMT
Subject: CN=af4b248b-8b28-4eac-9c89-b8f1770cd5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:1e:0e:e9:e6:18:77:16:91:66:9f:bb:90:
c3:8a:e4:cf:65:35:9d:4c:a1:bf:58:18:04:93:02:
a6:99:bd:59:dd:10:1d:ca:c1:19:6a:2e:79:a5:4d:
fd:dd:ce:cf:cd:1b:01:89:5b:c5:c8:1e:76:9a:56:
4c:20:76:a1:f8:2c:f8:d4:7c:c3:9e:cf:10:cf:96:
a5:d4:dd:a3:98:fc:d5:3a:63:d4:50:cd:cf:ce:19:
18:61:33:4e:7e:85:42:8d:3e:c3:96:d5:ac:76:9a:
0d:52:34:30:48:e4:9f:08:ac:40:c1:14:0b:bd:47:
e3:99:54:80:4c:35:14:5d:ca:29:97:2b:61:c5:78:
47:64:4f:5c:93:14:fc:68:b4:a7:51:77:40:27:04:
29:05:75:76:42:9a:3e:85:0d:00:8d:10:5e:f1:d3:
08:ae:31:22:4a:20:4a:0e:0a:aa:89:8b:72:fa:ab:
3e:7c:d8:a2:36:d2:60:2c:e4:aa:20:87:74:19:cc:
77:ef:34:2a:b7:1b:b0:de:58:d3:04:b0:ca:9e:c4:
29:1b:d1:ba:11:a1:e0:16:30:3e:e9:13:c8:e9:7d:
62:9d:df:8a:77:be:36:d1:47:9a:90:4b:ec:2c:26:
78:af:5a:c4:04:91:73:5a:35:ec:d1:1c:7f:75:10:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:53:4D:81:17:EC:B1:89:9E:06:A7:66:4C:49:D7:86:23:74:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c0f81cd3-c84b-33f0-987f-bc6c7fbb60d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:b5:4b:e5:ff:81:c8:50:81:c3:2b:75:82:87:c6:78:8d:ba:
3c:80:f9:9c:b1:e9:1f:a1:78:4a:b0:77:ca:27:55:c9:c4:5a:
4b:36:9f:9c:91:a0:50:5b:b6:f2:e2:43:d6:c5:48:d1:b8:76:
8c:c2:1b:6e:ec:9e:d0:67:f2:d7:9e:e0:77:48:33:89:27:9e:
df:e1:70:c9:c7:a1:bb:ab:59:90:85:84:9d:70:7b:7b:a3:31:
64:6d:39:91:b9:64:d8:e6:93:3f:ac:8c:f6:5b:f0:c2:3d:8b:
ec:5a:22:e1:89:76:2c:88:4e:46:e9:16:1b:81:39:2a:46:75:
74:90:2b:f1:c5:60:b3:f4:3a:93:36:a9:d6:b8:4a:b5:eb:e5:
c3:2b:14:6f:0f:fb:12:e7:df:1c:e1:d4:1b:1b:2a:8d:84:99:
fa:15:0c:84:13:fd:2e:31:67:d2:0b:ad:59:dd:bc:e1:63:1a:
e4:6e:94:ab:48:10:02:74:fa:2e:12:3d:cb:3b:cd:a3:a5:e2:
35:43:e8:92:d4:7d:ff:28:3b:20:46:92:93:79:ab:a4:97:92:
20:e2:12:5e:d1:25:1b:36:05:f2:fc:f9:2b:76:ab:83:65:f9:
ba:0f:2e:3e:4b:1b:fb:6b:43:4d:87:3f:e9:f7:82:25:f9:e0:
a1:88:f9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:44:48 2025 by rpki-client