Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/228608e8-c7cb-3d1f-b0b6-00c3fd7b988e.roa
File: 228608e8-c7cb-3d1f-b0b6-00c3fd7b988e.roa (raw, json)
Hash identifier: Jkh0BlqXWCotV6+/GhQJn1UyljfTfn7ekbTz7D9SB+M=
Subject key identifier: B5:58:47:EE:85:44:2A:F0:D9:99:DD:77:AB:7E:C4:B6:0B:D4:EB:28
Certificate issuer: /CN=b45f6374-6cde-4681-a96a-9233e2715465
Certificate serial: 010D0C9F43285845542991720A20109F946D44C8
Authority key identifier: 12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/228608e8-c7cb-3d1f-b0b6-00c3fd7b988e.roa
Signing time: Mon 25 Mar 2024 21:17:44 +0000
ROA not before: Mon 25 Mar 2024 21:17:44 +0000
ROA not after: Sun 23 Jun 2024 21:17:44 +0000
asID: 33044
IP address blocks: 192.122.206.0/24 maxlen: 24
205.211.166.0/23 maxlen: 24
199.7.136.0/22 maxlen: 24
199.91.112.0/22 maxlen: 24
199.91.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:54:29:91:72:0a:20:10:9f:94:6d:44:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f6374-6cde-4681-a96a-9233e2715465
Validity
Not Before: Mar 25 21:17:44 2024 GMT
Not After : Jun 23 21:17:44 2024 GMT
Subject: CN=0679aa21-3e89-40d9-8cde-018895c11dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:b4:4e:b9:c7:e0:88:41:0d:e4:56:8e:ca:
aa:9c:7a:55:6c:bd:d6:6b:b9:82:83:74:e0:62:d8:
0a:d9:41:d1:24:38:9b:ae:3b:c1:43:e7:64:88:d0:
88:cd:f1:16:45:11:54:e5:b0:8f:14:8b:8f:52:be:
cd:2a:ca:d6:1f:b6:5b:aa:d6:6f:75:77:44:aa:e6:
67:59:17:ce:76:1c:f1:d4:4c:26:49:ec:e6:e6:59:
df:54:78:81:6c:b1:13:c0:07:93:43:b2:96:02:b7:
7c:69:99:9d:c5:2a:d2:55:2e:1c:85:82:21:18:d3:
c3:6d:6f:56:76:62:bf:ea:f4:fc:57:37:ce:39:2d:
d1:5b:b2:7d:d3:7d:b7:11:e3:be:2e:3b:e9:82:e2:
05:98:24:3b:c4:ed:19:11:b3:ed:af:83:f8:45:90:
97:4c:6b:9d:72:1e:e7:d8:8b:f8:06:e2:66:4d:f7:
0b:03:7a:02:bd:84:dd:67:05:8b:99:9b:21:cc:50:
59:f1:ec:b6:8d:9e:f4:16:3d:5d:67:75:36:a2:10:
a6:ae:7f:cf:8e:6b:72:b8:3a:e7:c6:f1:a0:3a:0b:
4e:4f:90:d6:38:26:1f:26:f5:de:31:01:a1:1d:57:
60:fd:b8:c6:b2:5f:d9:89:50:9e:ec:d1:70:c3:ef:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:47:EE:85:44:2A:F0:D9:99:DD:77:AB:7E:C4:B6:0B:D4:EB:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/228608e8-c7cb-3d1f-b0b6-00c3fd7b988e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465/b45f6374-6cde-4681-a96a-9233e2715465.crl
X509v3 Authority Key Identifier:
keyid:12:39:E2:63:A9:4F:E4:5A:B7:C9:13:A2:AC:35:02:79:4A:5E:B5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b45f6374-6cde-4681-a96a-9233e2715465.cer
sbgp-ipAddrBlock: critical
IPv4:
192.122.206.0/24
199.7.136.0/22
199.91.112.0/22
199.91.252.0/22
205.211.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:4c:0b:94:e2:60:bc:d3:7e:b4:c7:bc:ca:b7:33:cd:76:98:
b3:a4:dd:11:f3:6f:c5:0c:72:1e:7e:e5:35:be:9e:ee:bd:5f:
c5:24:a1:33:3b:7f:80:ce:00:8e:65:92:8a:52:c8:ac:c3:04:
f3:0b:88:00:f7:d9:88:33:40:70:30:c7:42:22:1a:e1:56:eb:
3c:1f:f7:3e:79:31:4f:7b:e9:5b:17:65:d7:8b:db:c2:7b:8f:
c7:83:ef:fc:8e:2f:a7:5f:c6:de:af:bf:e8:72:e2:90:d5:05:
e4:d9:6c:ce:9a:49:2f:82:60:0c:67:c8:27:a7:eb:68:41:f6:
9d:0b:bf:1d:fd:d1:da:62:d3:4b:06:2d:f3:48:92:7e:8a:b5:
e4:bb:7f:3d:42:4f:a6:82:ab:91:fc:9e:4c:23:66:ef:11:58:
02:ec:d0:69:0c:4e:57:00:77:91:8c:e4:f0:50:6f:56:3a:b3:
a8:80:2e:c0:e8:8f:9a:67:cc:4c:69:80:41:a6:1d:54:42:8e:
1b:26:4e:f8:db:a7:a2:7b:44:65:8b:4d:90:09:3c:25:62:15:
f1:72:1b:a4:26:2c:53:74:39:52:f1:5a:13:4c:b2:92:7f:ce:
c9:1c:64:5e:7b:b5:0c:de:d3:a4:d2:23:40:ef:e4:9a:e9:61:
9b:e1:55:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:03:54 2025 by rpki-client