Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2955cb4-ddd1-394c-9fd9-225da50ff72e.roa
File: c2955cb4-ddd1-394c-9fd9-225da50ff72e.roa (raw, json)
Hash identifier: ooa5hA3yEI/ldPJT+gDvE8U51lDaWWRHU9Z+kTc2XxM=
Subject key identifier: 01:59:98:42:4C:51:04:96:92:B4:0A:94:52:FE:D7:F6:B8:80:39:4B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A508B7EACA5C6EECA072480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2955cb4-ddd1-394c-9fd9-225da50ff72e.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 36794
IP address blocks: 184.105.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:8b:7e:ac:a5:c6:ee:ca:07:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=ad844e92-2442-4c55-b5c0-55c829bc4ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:5a:64:28:f9:df:66:8b:65:6b:7e:b2:2a:
4e:2a:b7:e7:11:96:73:f6:fa:b7:4d:e5:41:bc:80:
83:b1:49:c2:d7:fc:9c:66:90:d0:b8:06:c3:32:6f:
c0:8b:4a:86:52:2b:44:ce:0a:14:e1:82:0b:81:78:
5c:36:47:a6:1b:41:7f:2a:be:4a:24:22:bd:14:69:
f9:d2:f2:81:ca:ab:96:f1:0a:ad:43:a8:86:2e:7f:
52:5d:3a:be:9e:6f:e7:db:c2:ff:7e:5b:9f:50:9c:
50:99:a7:b8:ec:d8:a4:58:5e:27:e8:d6:bf:69:83:
2a:12:ee:f0:c5:c7:31:ca:12:60:7a:7d:29:d2:8b:
c3:4e:6e:ff:1a:59:04:45:3f:17:6e:44:a6:c1:da:
b3:7c:16:8a:07:0b:aa:9d:67:e1:2c:44:25:2f:61:
36:a0:59:e7:1d:d8:d8:2b:a3:89:08:bb:8f:92:90:
6b:2c:eb:1c:7b:72:26:b4:fb:11:4c:11:53:48:b8:
ee:2d:d0:f3:f7:9c:88:e3:c8:31:f7:10:ca:f4:c4:
a8:67:88:02:37:12:b8:fa:db:00:bf:fa:89:39:c8:
b8:29:b3:13:b2:ec:8b:9c:bc:d4:d4:ac:c7:2b:02:
48:57:73:2c:5e:54:35:7f:63:90:b2:dd:62:19:56:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:59:98:42:4C:51:04:96:92:B4:0A:94:52:FE:D7:F6:B8:80:39:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2955cb4-ddd1-394c-9fd9-225da50ff72e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:8e:5a:a5:c2:49:84:9e:f3:d5:ab:3d:3f:56:03:c3:bf:3c:
ff:f4:be:b0:73:ce:ea:dd:67:b8:e4:1c:80:58:75:46:4a:b5:
24:2f:cf:80:5f:b1:f6:88:a3:5c:4d:d0:11:a0:6c:8d:87:e5:
ec:c2:1b:e4:64:ed:2d:ee:87:31:fc:11:b2:00:75:69:d1:14:
01:62:79:6e:35:d2:13:a2:aa:3b:8d:2d:ee:54:6e:14:08:b4:
23:c7:80:79:3d:f5:ea:19:1d:f3:7f:b2:fb:7a:97:5f:a5:93:
33:4b:c2:c9:b5:e3:ea:3a:32:80:f0:de:39:26:a2:40:b8:ac:
aa:81:49:82:da:1a:22:57:93:2b:0c:fb:af:6e:9d:f7:cf:c3:
cf:0f:5c:62:de:08:ca:64:00:eb:b5:09:cd:d2:ce:f9:c6:5c:
8d:8f:05:d1:6a:64:f0:55:cc:d6:50:d2:ab:62:96:ea:60:bd:
41:70:a0:e8:bf:01:07:d5:ea:dc:32:d1:1e:82:d2:95:e4:aa:
73:e0:0c:0e:88:26:fa:5d:de:a0:2e:19:50:b8:82:94:43:41:
5e:6c:85:f0:06:54:ab:6a:f1:a5:ac:fd:80:58:a7:60:b2:eb:
6a:82:46:3e:25:ad:67:82:7b:f0:7b:34:6a:4b:14:b2:d8:db:
42:9f:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:29:57 2025 by rpki-client