Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/af7bd920-47ed-376a-8ba1-789a65d898f6.roa
File: af7bd920-47ed-376a-8ba1-789a65d898f6.roa (raw, json)
Hash identifier: eblj4Ez/eC8UY3psQtg4jqyu+p+gycBGL8Oia+yVXYs=
Subject key identifier: F3:07:B2:AA:46:9B:85:6D:38:9A:20:77:E6:99:64:64:57:F6:37:6E
Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial: 010D0C9F4328584767061ECC12D60402698B6B20
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/af7bd920-47ed-376a-8ba1-789a65d898f6.roa
Signing time: Wed 02 Oct 2024 01:00:31 +0000
ROA not before: Wed 02 Oct 2024 01:00:31 +0000
ROA not after: Tue 31 Dec 2024 02:00:31 +0000
asID: 398355
IP address blocks: 64.112.124.0/24 maxlen: 24
207.2.123.0/24 maxlen: 24
2602:fbdf::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:67:06:1e:cc:12:d6:04:02:69:8b:6b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Validity
Not Before: Oct 2 01:00:31 2024 GMT
Not After : Dec 31 02:00:31 2024 GMT
Subject: CN=2ba6d68f-8071-4b20-b648-545ab54b212b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:30:6e:80:39:ef:80:e5:f0:f4:3d:40:ba:bb:
74:04:14:ce:74:2e:ce:fe:cc:ff:7c:79:47:4d:29:
09:3d:06:4e:be:0c:96:37:bb:4d:8b:b5:f0:82:62:
80:22:77:23:50:88:8d:00:b7:21:7c:87:8d:78:0f:
c4:90:1f:f7:e7:de:77:d7:1d:29:55:ce:08:9b:e2:
99:8f:f7:67:7f:42:77:49:3e:f8:b4:b0:eb:37:59:
a7:50:3e:9a:ba:4d:5f:ed:ff:a2:90:99:d1:7e:8e:
b1:17:66:08:fc:0c:eb:b0:19:06:58:27:cf:5a:38:
71:65:c7:54:da:b6:59:4e:0e:d2:84:f4:b7:cc:11:
9f:de:33:94:26:82:3b:fc:7e:6e:23:41:70:5a:d3:
fd:08:ef:95:f6:f2:56:05:10:40:02:c7:e8:da:a4:
7a:77:c1:8b:8c:ad:b9:48:e9:f7:f3:40:25:a1:19:
2e:81:8c:6e:0b:6f:2d:96:10:9c:75:4e:58:7e:6d:
39:8e:f0:e3:13:86:ce:fc:36:f3:a2:ee:55:19:82:
7c:4f:94:a6:94:a0:95:d8:51:6b:ff:77:ea:6c:7c:
58:c1:0b:4d:a3:6a:bb:3f:ed:c6:b6:6b:d8:c3:bb:
14:dd:16:b6:a2:0d:b0:bc:14:1f:41:3d:40:a1:1e:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:07:B2:AA:46:9B:85:6D:38:9A:20:77:E6:99:64:64:57:F6:37:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/af7bd920-47ed-376a-8ba1-789a65d898f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
X509v3 Authority Key Identifier:
keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.124.0/24
207.2.123.0/24
IPv6:
2602:fbdf::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:da:b2:f5:11:11:38:5c:83:33:a0:e2:23:2e:bb:24:dc:90:
d1:44:a1:c9:f9:d2:d9:8d:22:e9:68:3d:14:df:88:b3:88:52:
1d:a2:bf:d5:26:3d:b5:e4:26:7e:6e:26:c5:a0:12:50:bb:ca:
72:8e:74:28:72:80:6b:14:23:e3:38:23:e4:3c:40:f6:35:cd:
39:35:6f:4d:27:9c:7c:03:9a:c9:a7:eb:d0:4a:9c:4c:58:43:
66:ab:68:d6:e1:51:5f:84:d1:36:9f:33:98:b0:22:3c:44:5d:
89:5d:56:48:ef:d8:5e:68:69:c0:b5:7f:0a:9a:c0:7c:98:7a:
0f:1d:77:a8:32:d8:7c:81:13:42:b4:6a:a2:e7:53:0e:d0:db:
42:97:14:1c:b3:a2:00:42:68:47:2e:76:6d:3e:4e:a2:72:65:
f8:dc:ef:e5:11:f0:ff:be:56:d8:a0:2f:a6:e5:b4:f7:46:c0:
4e:11:b4:99:e9:0a:68:e6:ea:d0:37:2c:32:70:9f:04:ab:2a:
49:bd:b8:72:f6:51:88:e3:15:89:92:6c:4c:37:93:1e:3d:f0:
01:49:e3:8b:51:80:73:19:b9:97:1b:33:3c:67:58:9a:2d:03:
9c:5f:20:75:05:b3:30:a4:74:89:aa:e5:51:90:dc:fb:1f:10:
b9:aa:7a:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:18:59 2025 by rpki-client