Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/54f5191f-5ac8-3296-86b5-a963cacaae47.roa
File: 54f5191f-5ac8-3296-86b5-a963cacaae47.roa (raw, json)
Hash identifier: koMe8nNu5fBlyAxkruktLgne2N9zujO9Jc5qOcHr9tA=
Subject key identifier: 94:C7:22:5D:50:43:F1:1B:54:92:7E:DC:BC:99:2A:5A:91:1C:C6:B5
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328576D51CC73C042CFC1736431FA65
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/54f5191f-5ac8-3296-86b5-a963cacaae47.roa
Signing time: Sat 18 Jul 2020 23:11:03 +0000
ROA not before: Mon 13 Jan 2020 05:00:00 +0000
ROA not after: Fri 21 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 208.70.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:64:31:fa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Jan 13 05:00:00 2020 GMT
Not After : Oct 21 04:00:00 2022 GMT
Subject: CN=7c16c048-6e91-4560-ab71-7d39f21d391d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:a8:32:91:53:50:97:69:b1:df:7e:0f:b9:
c7:ec:16:fa:f4:9d:17:e6:bb:14:64:b4:bd:f8:fb:
af:ee:0c:4a:2a:61:d8:ef:d7:cd:c4:ec:83:c2:46:
c5:fe:1d:24:df:4b:33:38:d7:91:36:70:15:13:12:
25:1f:81:88:34:e1:1d:d8:7a:3e:b4:c2:92:90:ea:
78:51:83:ef:68:21:0c:42:8f:1b:6d:14:49:50:80:
14:25:7e:33:c0:8e:c2:e8:9b:93:65:3e:b4:b1:4f:
16:a2:76:55:16:d8:ad:cb:d6:36:b4:2e:1c:72:9e:
63:b1:98:80:d6:4c:17:d6:b4:04:21:27:d5:10:cb:
86:6b:15:72:c6:4e:ea:8e:9e:ce:bb:8d:18:3f:24:
9c:c0:47:82:51:82:1e:e4:9b:48:25:bf:a5:43:7a:
1a:a1:59:43:66:b7:81:62:3d:9a:b8:97:e9:f0:dd:
2c:86:7d:4b:80:ce:0d:eb:3d:67:80:de:8d:fe:e3:
92:67:91:9e:0b:87:b6:cb:16:a1:d7:63:ee:7e:92:
8d:f1:4b:87:20:b4:0b:8c:f3:59:6e:aa:b4:d4:ba:
21:92:74:0c:5c:30:b4:63:6f:2b:82:9c:f6:66:b9:
6d:fa:29:9d:18:ff:20:1b:95:cd:95:91:5b:4d:2d:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:22:5D:50:43:F1:1B:54:92:7E:DC:BC:99:2A:5A:91:1C:C6:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/54f5191f-5ac8-3296-86b5-a963cacaae47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:66:18:09:60:9c:8c:05:7b:0d:60:74:35:89:4a:a4:a0:31:
d3:7c:10:58:a9:30:c1:3a:fc:3f:84:80:ec:48:83:c1:17:eb:
17:13:fe:ef:d4:17:6f:7b:e6:7b:d2:0f:5f:d1:d9:4e:95:49:
55:d8:49:c9:ee:30:c7:b7:4a:a7:54:9c:7d:9b:9e:5f:e0:38:
75:e8:48:0d:df:39:6f:72:4c:c5:62:7f:ec:4a:cf:ce:69:ed:
43:1d:e0:cb:8d:75:4f:bd:59:db:bd:49:38:04:76:bc:26:ad:
e3:d3:e8:b7:35:27:dd:65:d6:eb:a7:1e:b7:76:cf:d6:74:7a:
46:31:f0:60:d9:99:58:39:d9:13:4a:56:e5:47:db:ff:15:2c:
ef:c7:75:8b:cc:17:e7:f1:0a:1a:b1:28:d1:2b:59:3b:eb:7b:
ca:b2:83:ba:8f:04:dc:f6:e6:fa:0e:cc:bd:6e:23:13:80:00:
6b:3b:2e:2b:47:43:0f:91:8e:41:95:39:21:14:25:8b:e5:ac:
50:d6:1f:c8:23:97:61:89:1a:bd:13:40:c7:3f:68:bf:b8:0e:
46:e0:50:39:a1:85:53:96:9c:7c:0f:20:55:d6:37:27:81:f0:
a1:70:28:00:bd:20:f6:a6:b9:67:57:df:91:ed:49:a3:ea:89:
3e:57:34:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:04 2025 by rpki-client