Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3e3f0d5-69a3-3345-ac97-654d30b71e25.roa
File: d3e3f0d5-69a3-3345-ac97-654d30b71e25.roa (raw, json)
Hash identifier: mIxLF3eWrUhOg6NFwUUkSIRZg04RdAEBQ3IobxLyGqs=
Subject key identifier: 7C:38:33:E8:4B:27:03:46:E8:2A:52:51:5F:08:A2:C7:33:00:8D:5E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848854B3156BAD5CE782DA9DE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3e3f0d5-69a3-3345-ac97-654d30b71e25.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 46373
IP address blocks: 64.62.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:31:56:ba:d5:ce:78:2d:a9:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=a2884003-a37a-4670-b311-2332d0eb57c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:b9:d1:a7:ce:b7:81:bb:fb:52:fc:b8:97:
8c:ea:d2:cc:46:2d:30:c7:e9:82:ff:33:d2:da:43:
0e:b2:d2:31:66:7a:e0:b6:94:69:84:bd:c7:4e:10:
a5:c0:89:a4:2d:9d:6a:1f:8e:88:24:ef:cc:a0:f6:
6d:b9:3b:01:b1:b7:86:91:cf:3a:d5:a3:aa:aa:3d:
e0:94:63:35:bd:2c:1e:ff:92:23:f0:10:08:7c:d7:
2f:6c:9e:14:67:0f:e2:32:6f:19:ae:91:f8:6d:ad:
1a:52:46:ca:e7:fd:58:5a:ea:bd:e4:44:a7:22:57:
16:e7:ae:df:88:ae:1f:65:13:16:c9:63:93:46:6f:
ea:38:d0:80:53:d9:13:36:03:a5:5f:86:88:e7:d6:
41:7b:8b:c6:87:8f:7b:13:6a:09:d1:a5:56:8d:97:
56:f3:6c:ca:f2:b8:a9:9c:3a:79:5f:b4:35:75:8a:
7c:81:71:47:a4:60:f1:23:e2:ca:41:c9:d6:08:cf:
92:70:25:53:d9:e8:36:40:9b:ba:46:70:e7:ff:62:
2a:17:3b:67:b6:e2:79:11:0e:66:1a:ee:a2:ce:65:
0c:32:1e:2f:b9:56:95:f1:b2:48:e4:11:50:33:6e:
b6:1b:dc:f8:25:2a:5c:85:4d:90:f5:ad:d0:d5:5c:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:38:33:E8:4B:27:03:46:E8:2A:52:51:5F:08:A2:C7:33:00:8D:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3e3f0d5-69a3-3345-ac97-654d30b71e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:34:4d:c5:a1:59:96:fa:c8:ad:4a:ff:8b:4d:02:50:d0:23:
c4:50:a0:7d:d6:4e:06:08:1c:77:cf:06:29:c7:3b:93:8e:91:
18:ec:13:54:fa:0d:f3:6c:7b:b5:c3:2b:e2:a1:0b:aa:68:45:
10:a2:73:37:fa:66:b1:7f:40:34:11:29:a4:44:db:0a:5e:1e:
35:c4:68:d7:87:19:35:56:41:6c:af:31:bc:84:fb:9d:c4:7a:
8c:5c:af:10:2a:c9:0c:48:5e:0c:35:8a:b8:4d:89:cb:71:1d:
c7:2d:ce:a4:3c:8f:bb:80:2c:58:01:5b:f0:94:d1:17:4b:75:
b6:34:0d:35:a0:83:5b:ca:aa:1e:2e:78:9e:13:75:d7:54:0a:
73:b8:c3:7d:f8:51:d9:83:c3:6c:9a:49:1e:ad:47:90:1c:75:
f1:37:3e:7f:91:14:c7:cd:ba:75:65:f9:19:2e:e4:da:67:61:
4a:d7:df:36:24:15:91:83:f1:96:fa:76:5d:68:53:31:31:36:
b8:1b:0e:89:19:ca:db:a5:25:5e:95:57:5d:27:f2:de:da:eb:
f7:36:f0:b2:4f:cd:58:88:cf:f5:67:71:c3:b7:22:19:53:ce:
2c:af:88:be:38:52:c6:87:ce:8c:b9:05:96:09:c2:0c:cb:5f:
47:42:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:39:06 2025 by rpki-client