Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/4fe32820-0dfc-337c-966b-15ebc60d246c.roa
File: 4fe32820-0dfc-337c-966b-15ebc60d246c.roa (raw, json)
Hash identifier: BMnl2t2I6ZSO6CAXn6q2UA3DysJmY9vem3rayQaJ0+4=
Subject key identifier: 53:56:A3:0B:0D:1A:95:62:33:19:6F:7E:B9:6A:4E:F9:CA:7E:EB:D2
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F4328584880E0E1FCE8A6AB4ADA80DC00
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/4fe32820-0dfc-337c-966b-15ebc60d246c.roa
Signing time: Sat 11 Jan 2025 00:03:28 +0000
ROA not before: Sat 11 Jan 2025 00:03:28 +0000
ROA not after: Thu 10 Apr 2025 23:03:28 +0000
asID: 400597
IP address blocks: 217.149.96.0/24 maxlen: 24
2602:fb1b:60::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:e0:e1:fc:e8:a6:ab:4a:da:80:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Jan 11 00:03:28 2025 GMT
Not After : Apr 10 23:03:28 2025 GMT
Subject: CN=3688e109-35f3-436a-a257-968c9f885397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:1f:cb:07:50:8e:df:6d:51:82:cb:87:42:
6a:7f:fe:a6:60:fa:80:ba:9f:a7:78:46:4b:56:17:
ea:a7:2c:8b:0f:e6:f1:c9:16:ed:13:a0:5f:df:61:
2a:39:06:b4:58:99:3e:8f:8f:68:ae:e4:16:cb:e4:
b2:50:3f:08:00:ff:68:3d:4d:15:41:b8:13:82:0b:
5f:7c:3f:5d:d0:b8:b1:c6:f7:06:65:0c:69:67:21:
8b:a5:1f:a1:6d:28:a6:b5:c6:bc:7f:13:1b:29:a8:
df:6c:fc:cb:63:e8:38:a1:fd:93:0a:9a:14:d9:cf:
cc:13:7a:95:54:e7:c8:d6:94:2b:b4:31:65:76:b4:
08:1a:08:48:f3:fb:a5:28:16:0e:d5:09:91:41:13:
8d:6b:14:56:db:b2:c8:03:65:7c:ec:ea:58:7d:33:
4f:9f:42:89:65:cd:cc:25:64:96:76:41:cf:ad:4f:
d9:8c:5d:d2:fa:25:0b:36:ed:1b:11:23:ed:9c:9c:
62:75:05:0d:be:2a:01:6c:60:eb:be:c3:a9:4c:e1:
a2:1f:6e:28:61:1c:4a:df:cf:15:45:fd:95:99:60:
73:76:a6:22:1a:6b:0b:8e:66:1d:fb:60:57:af:a2:
cc:1c:fc:52:19:fe:28:94:39:9e:6a:9d:05:e2:a3:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:A3:0B:0D:1A:95:62:33:19:6F:7E:B9:6A:4E:F9:CA:7E:EB:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/4fe32820-0dfc-337c-966b-15ebc60d246c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv4:
217.149.96.0/24
IPv6:
2602:fb1b:60::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ad:2b:53:45:cd:9d:97:84:d2:72:21:96:e5:a8:95:75:ae:
3f:1f:6a:e2:ac:fb:db:93:64:7c:12:6f:b9:3a:61:cb:77:96:
d1:00:12:ec:52:5a:0c:59:f8:6a:4e:0f:95:89:6c:94:e6:36:
12:71:6b:14:df:ab:0d:38:a9:70:cd:4c:b7:a8:58:61:23:bb:
00:fe:49:be:ce:ea:34:8f:a9:af:4d:73:e7:35:55:27:b2:89:
9f:72:d6:72:fa:92:f0:18:f4:1b:c5:e6:84:2f:61:96:25:52:
95:cb:a4:0a:e3:91:e8:8b:fe:9b:e1:33:85:40:ba:46:57:e5:
0a:d6:9a:6d:e6:c1:54:d3:68:15:ea:02:d5:6f:91:c3:44:1a:
6f:cb:42:be:93:0f:3c:27:1a:27:af:fb:ea:da:c9:b0:67:a9:
c1:26:fa:fa:46:93:22:9a:29:c1:8c:16:dd:52:a2:17:82:b4:
99:56:9d:2e:a6:45:51:8d:ab:5e:a8:2b:78:3d:db:df:c1:ac:
4d:8e:fe:11:69:7c:5d:ea:6d:ce:fe:95:ab:a2:d5:be:0f:99:
f5:6b:53:71:df:35:61:99:fe:6d:87:17:71:d3:f3:e4:c3:0a:
b3:b4:e3:04:cd:dc:a9:4d:03:57:b4:b7:67:ba:e5:54:3e:07:
42:de:90:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:24:50 2025 by rpki-client