Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de630873-b0b8-3ba9-9cef-0e0d17945cf9.roa
File: de630873-b0b8-3ba9-9cef-0e0d17945cf9.roa (raw, json)
Hash identifier: 3+TpUqRj/XUMEEfFJd0Cejcr6KGS5viajdHxc6DWQvM=
Subject key identifier: C1:AF:ED:66:5A:7E:FE:AC:8D:CA:A1:B6:E5:B4:22:00:5C:5E:1F:90
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858463DB4527339D8EF64CFF494E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de630873-b0b8-3ba9-9cef-0e0d17945cf9.roa
Signing time: Mon 17 Jun 2024 13:00:33 +0000
ROA not before: Mon 17 Jun 2024 13:00:33 +0000
ROA not after: Sun 15 Sep 2024 13:00:33 +0000
asID: 398922
IP address blocks: 216.66.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:3d:b4:52:73:39:d8:ef:64:cf:f4:94:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 17 13:00:33 2024 GMT
Not After : Sep 15 13:00:33 2024 GMT
Subject: CN=a3200d04-750b-428d-a32f-d7931be895af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:67:7b:16:57:87:c5:d5:c0:7c:1a:3b:a5:
06:56:b0:ec:65:14:3d:93:74:8f:bc:9a:c4:bf:4c:
88:5a:41:f9:22:2b:41:14:dd:bb:39:8c:6b:f7:26:
ed:f3:50:b2:03:1e:5c:e2:21:61:a8:65:b6:dc:b5:
ea:63:52:18:5e:f1:d8:92:e5:43:67:96:24:1e:ad:
aa:a7:13:d1:79:71:9c:ac:af:59:31:5d:94:d9:90:
2f:80:29:d0:b5:7e:c0:2d:cc:a0:88:94:d4:68:d9:
12:31:9b:7b:68:d8:9c:d5:70:68:0c:57:5f:d3:73:
59:dd:88:2c:9c:a0:f2:d1:35:b5:c4:5e:f9:52:2c:
d1:53:72:d7:5d:6a:02:57:21:fb:3b:43:52:69:9c:
94:bf:b5:b3:c1:50:4b:e1:ff:0b:0d:8d:62:71:d2:
07:8a:74:5e:b7:2c:14:40:da:56:be:3e:7c:83:d1:
46:a3:20:08:3a:d3:49:27:67:ec:a7:a9:b2:53:ec:
cd:08:68:ec:c2:33:79:24:47:db:cf:aa:e2:26:51:
89:bd:ae:5b:12:e5:d9:45:58:9f:65:82:1e:20:7b:
62:f5:fd:a2:c6:3e:ab:65:66:dd:33:6b:26:0e:3e:
bd:66:3e:01:8d:59:ed:27:9b:a4:e9:50:f5:12:de:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:ED:66:5A:7E:FE:AC:8D:CA:A1:B6:E5:B4:22:00:5C:5E:1F:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de630873-b0b8-3ba9-9cef-0e0d17945cf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:11:b2:99:e7:19:bd:05:b9:bf:60:ed:74:17:d3:e7:6b:39:
f8:af:2b:60:10:77:ac:7f:2d:66:f0:3a:d6:2f:4e:bf:4b:1d:
34:18:19:ba:71:1e:62:88:50:7d:9b:cb:20:62:26:3f:71:6e:
0a:34:b8:2d:cd:5f:e9:97:5d:5c:91:fd:dc:b8:a4:f1:2f:e7:
70:4f:79:57:54:08:30:e6:ad:de:da:6b:66:d1:c4:1c:e8:7f:
f5:f7:92:4d:cf:03:77:75:35:c3:1f:52:a5:dc:18:20:08:56:
9b:2e:46:e2:de:8b:6e:a2:a6:8e:83:75:29:b0:92:26:d4:17:
05:e8:72:1f:b9:7d:7a:fc:29:59:c1:13:bb:ff:ee:0b:b2:39:
b4:25:23:16:34:6e:31:2a:3b:68:5d:c3:a4:19:60:6b:d5:91:
68:83:d2:02:bd:9c:54:01:3a:b7:ef:b9:a9:c1:c0:b5:64:bc:
c7:e4:f6:50:70:10:a1:4b:9a:2a:bf:5a:fc:c4:8c:75:5b:d5:
cd:e7:d9:aa:75:4c:58:5d:54:e7:11:31:90:c5:37:d2:9a:bc:
aa:e8:2c:08:20:fb:f3:2a:29:0e:b8:a7:b8:c8:ca:3e:09:0f:
ec:b0:c6:3d:cb:e6:f9:f6:be:a7:be:20:ce:55:d6:c1:ac:ae:
c7:ae:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:07 2025 by rpki-client