Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/efc58c05-e367-34c4-aa53-4be86a76c57f.roa
File: efc58c05-e367-34c4-aa53-4be86a76c57f.roa (raw, json)
Hash identifier: hMwo5+qeWcPSC3gAm8sEc6DDNdei7bdMPiUGwZiYWiM=
Subject key identifier: 50:74:B3:D7:AB:AD:86:83:71:34:18:52:7E:25:3E:8D:22:C2:15:FA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B329A3750A737A0F11AC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/efc58c05-e367-34c4-aa53-4be86a76c57f.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 63949
IP address blocks: 66.160.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:32:9a:37:50:a7:37:a0:f1:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=74eb2ea2-f53e-4b99-adcf-235091f6416b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:ca:27:b1:6d:9e:d1:95:4d:47:0f:57:d2:
66:0c:55:ba:ff:57:c7:86:a1:ad:dd:50:b1:01:1d:
08:ad:b6:1f:50:56:9b:c4:80:e1:3f:c4:df:03:e7:
c0:02:2e:a6:ac:ec:d1:24:12:be:4b:29:ee:66:72:
63:4e:46:18:e3:09:03:8e:c8:53:8a:96:0a:58:8e:
38:a2:4e:3d:59:c7:29:a3:8b:46:2e:3c:b9:f1:6c:
38:fe:20:28:af:24:20:08:e2:24:6d:0e:01:d5:64:
7d:ec:a5:cb:87:22:6c:10:37:47:72:14:ae:cf:98:
5f:f7:1b:18:db:cc:0d:e0:16:18:ca:11:64:e2:43:
2d:db:37:4d:21:d8:ad:d3:97:a0:e5:3c:46:3f:52:
2e:16:07:bc:8e:e9:2a:9d:71:64:36:ab:57:61:fe:
6a:dd:35:dd:c0:63:a1:ec:57:4a:ae:ed:38:68:01:
c4:0f:00:d6:b6:c1:18:7f:a1:4b:c7:30:30:ee:67:
3e:41:47:bd:22:14:56:1f:ae:d6:b8:4e:9f:ea:4d:
f8:68:be:e7:b8:95:85:07:61:d5:73:24:f9:ed:7d:
d8:f5:96:f3:0f:10:16:9b:e6:4d:2e:81:22:61:4b:
de:ec:bd:1a:98:f7:51:ef:96:b4:dd:66:51:66:5f:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:B3:D7:AB:AD:86:83:71:34:18:52:7E:25:3E:8D:22:C2:15:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/efc58c05-e367-34c4-aa53-4be86a76c57f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:8e:08:c5:50:b7:eb:91:62:8b:ab:0f:99:8b:1d:11:07:d2:
14:6b:39:f4:a3:f9:f3:e3:fe:75:b0:4c:32:84:97:8f:d6:84:
01:60:1b:64:cb:23:21:1c:76:52:8b:c3:35:15:17:6b:fd:63:
a6:a7:52:a8:db:ac:30:20:06:fe:f7:3a:6c:0b:f3:fe:02:ae:
32:8a:b2:27:56:08:36:e3:72:75:48:fd:2e:6c:2c:d0:f1:2f:
67:99:30:68:35:8a:5c:6a:0b:db:5d:e7:be:cf:b9:6d:6e:67:
26:a0:0f:25:e3:fa:26:dd:c0:2d:a8:2c:0f:f4:44:55:29:66:
fc:75:23:75:68:05:37:cb:ac:f9:c0:1d:d2:5c:00:d2:5c:8a:
e7:8c:8c:27:ab:b2:7f:40:bd:3b:e7:78:99:69:26:a1:aa:0e:
be:c8:a2:57:ee:56:3c:8d:20:95:29:e5:b9:a9:6b:28:ff:4f:
91:ab:4a:e7:cf:b6:76:66:a4:86:5a:c5:4d:f1:80:4c:0d:1e:
4a:3a:84:69:f2:48:95:03:33:a7:59:60:00:28:19:c9:a5:0d:
10:85:70:14:e2:84:ff:e6:1d:15:6e:73:66:53:e4:85:43:1f:
de:0e:80:e4:59:2b:ce:e7:20:f6:a2:bc:f3:a7:78:4e:03:04:
6b:8e:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:22:10 2025 by rpki-client