Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fcaf88-13c6-3150-baf7-e6c823848267.roa
File: d6fcaf88-13c6-3150-baf7-e6c823848267.roa (raw, json)
Hash identifier: t7EMJVh9CXmk+qSRMxRQfNGO87QpTrNhgVOTMnKjRe0=
Subject key identifier: 82:71:DC:26:21:1C:AF:FE:46:81:BC:D4:C8:1D:00:89:BD:C1:98:1B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847819A54304907154DA22AC380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fcaf88-13c6-3150-baf7-e6c823848267.roa
Signing time: Fri 11 Oct 2024 13:30:11 +0000
ROA not before: Fri 11 Oct 2024 13:30:11 +0000
ROA not after: Thu 09 Jan 2025 14:30:11 +0000
asID: 21527
IP address blocks: 184.104.238.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:81:9a:54:30:49:07:15:4d:a2:2a:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 11 13:30:11 2024 GMT
Not After : Jan 9 14:30:11 2025 GMT
Subject: CN=6fd088cd-96fa-4167-a77c-3995f25a8474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3c:01:2f:73:87:19:50:81:db:d9:e2:9c:9f:
f2:a7:9a:ef:a5:d2:67:c8:27:65:d6:f5:a4:ee:7c:
5d:7e:0b:92:e7:e6:0e:70:b1:e4:9a:05:4b:af:f6:
55:f6:b4:70:8a:4f:e2:73:54:15:e9:93:45:71:e4:
5d:c2:87:c0:43:af:df:32:ff:be:ea:f1:6f:7b:b8:
69:5c:ff:1f:7f:70:e2:66:fd:09:bc:1d:05:4f:ce:
ed:07:87:e5:81:f1:2e:bb:37:9f:3d:78:98:21:0b:
b6:27:11:24:f8:2e:34:3c:d8:33:89:c8:9b:5e:23:
e3:4a:7c:2a:b9:f9:60:52:ae:15:6f:c1:fc:8d:01:
1a:6c:32:cc:37:91:e8:b8:5e:0d:0e:64:42:95:b5:
ea:2d:6d:89:60:f3:85:98:24:5e:4c:3f:66:a8:0d:
df:b2:b9:74:08:f4:30:d0:29:aa:f0:8e:99:ac:00:
db:e6:ef:74:79:f7:52:79:03:93:71:e4:0d:91:0a:
df:5d:9e:03:e9:8d:e0:75:a7:17:9f:f6:c9:c7:3b:
64:04:0f:45:f4:10:2f:fa:0d:c3:b9:67:09:73:87:
5a:4a:e0:97:61:a9:95:99:d1:84:75:df:e5:1e:e9:
9b:74:a5:3a:d3:97:51:1c:d5:72:52:3e:2b:d9:95:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:71:DC:26:21:1C:AF:FE:46:81:BC:D4:C8:1D:00:89:BD:C1:98:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fcaf88-13c6-3150-baf7-e6c823848267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.104.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:cc:75:a5:03:f5:fa:17:a6:1c:96:76:83:89:64:7b:eb:21:
e8:51:7c:5b:5d:41:1f:b8:46:34:c3:95:96:9c:2e:2d:5c:ff:
a5:bb:a8:23:17:2a:a5:4b:ad:e6:cb:3d:04:91:ee:75:dc:b5:
be:92:aa:49:af:dd:08:f1:04:eb:cc:35:80:2a:e1:35:4f:54:
1b:71:12:fd:7a:c2:62:ef:cc:3b:af:74:29:55:17:9e:b6:5d:
e2:3a:40:5f:f6:c0:5d:41:af:21:21:0a:81:64:db:19:de:fd:
ad:ff:8b:7b:bf:c0:d1:b1:ed:df:7d:9e:0a:e4:3b:5d:b1:f1:
ec:17:ec:d4:17:a8:6b:33:76:44:31:0a:86:97:c1:56:69:92:
58:ee:57:59:76:b2:06:0e:62:eb:f8:e2:48:49:41:e9:58:b3:
8e:fe:ff:b6:0d:1b:b3:a3:7c:7c:63:b1:a1:20:22:36:83:45:
a7:c8:a6:9e:1e:c4:d0:c8:88:0e:13:8b:75:71:43:57:61:8d:
f2:a6:e6:f6:2a:b3:f3:3b:3c:0f:2c:46:db:f1:2b:77:91:cc:
70:86:5e:e8:e7:a8:ab:3d:35:0f:7d:82:28:ba:4e:de:bd:e7:
e2:a6:e0:62:e2:28:98:08:f0:79:a3:18:f2:cf:26:d6:2b:fb:
07:cf:a1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:19 2025 by rpki-client