Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/439b7d7f-8378-3387-be8e-2cad82786c8d.roa
File: 439b7d7f-8378-3387-be8e-2cad82786c8d.roa (raw, json)
Hash identifier: N6ZGOaZ4dTJVIbfrQd0XAyj+HmqbHGXXso1WfTWhvlc=
Subject key identifier: 66:39:64:4A:C6:63:6C:10:2E:95:75:70:E4:02:B9:F4:EF:97:5B:59
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F43285848C6AC679DAFF5CAFA9E615000
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/439b7d7f-8378-3387-be8e-2cad82786c8d.roa
Signing time: Wed 05 Feb 2025 00:04:19 +0000
ROA not before: Wed 05 Feb 2025 00:04:19 +0000
ROA not after: Mon 05 May 2025 23:04:19 +0000
asID: 834
IP address blocks: 64.112.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:ac:67:9d:af:f5:ca:fa:9e:61:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Feb 5 00:04:19 2025 GMT
Not After : May 5 23:04:19 2025 GMT
Subject: CN=7a31c0cd-e798-4de2-8498-2716c9afe8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:a2:c6:4e:b7:f1:46:e9:0c:be:95:5b:00:
4f:19:4e:92:b7:36:b9:32:b8:c5:bf:02:b7:81:b6:
40:e9:12:2d:57:e6:0b:a4:3d:18:94:48:d9:5c:e4:
62:7f:cd:7a:d4:b1:19:b8:29:1a:0d:68:53:5d:ce:
ec:2e:72:a6:1f:5e:7a:a2:b0:d8:65:70:79:ca:46:
c2:70:84:47:4b:77:e1:15:80:f3:34:5b:fd:db:5f:
c2:23:65:9d:6a:ab:8d:df:d3:c8:87:ef:c2:bb:9c:
87:d6:b8:17:da:e3:78:7d:8d:1e:ec:0f:da:cb:34:
3f:48:19:ed:6c:8b:56:eb:1e:b8:e1:96:8c:99:99:
08:32:7a:98:22:77:e8:c6:39:9c:8d:41:c2:7a:dc:
a7:f1:5c:df:83:22:5e:bb:93:34:68:38:af:af:bf:
41:d7:0a:95:92:40:62:11:7a:2b:e2:fc:e5:16:6e:
d6:f0:41:8a:e0:ad:39:04:29:4c:33:9d:eb:89:85:
8d:a1:80:fa:f3:ea:6e:1c:1f:34:36:e6:ef:c7:fc:
63:fe:d7:d0:f3:ca:84:bc:6a:3b:49:a3:ac:3c:4c:
b8:9c:df:dd:d1:28:98:40:b9:ef:2a:bd:49:b0:64:
a1:0b:5b:1a:c7:2c:da:8c:a3:e3:7d:c0:ec:4a:29:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:39:64:4A:C6:63:6C:10:2E:95:75:70:E4:02:B9:F4:EF:97:5B:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/439b7d7f-8378-3387-be8e-2cad82786c8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:cc:20:cf:67:ed:33:b5:43:d5:dd:60:2a:53:fd:88:e5:f1:
f3:9d:61:bf:f5:4e:9f:92:31:13:6e:a5:94:29:44:77:d8:c7:
eb:54:02:cc:80:f1:12:2c:12:46:26:b1:7b:83:65:39:8a:8b:
6d:5d:f8:0b:23:c1:a4:c3:0e:75:0e:1d:5e:83:de:30:64:46:
26:c1:0b:23:80:f9:84:e1:04:3b:cb:d5:08:93:e2:83:21:7d:
06:74:15:45:f6:dc:41:da:49:b4:6b:11:43:2b:52:26:24:53:
12:1f:24:6d:53:80:38:e8:83:c6:3c:8f:0a:62:e9:05:5c:61:
eb:7c:1a:1f:f2:77:90:21:fd:98:41:f8:17:9c:05:02:cd:9e:
36:2f:e8:da:be:f9:4f:10:ef:31:ba:76:96:6a:73:26:23:8a:
1f:1b:b1:7f:a1:a6:c7:19:1b:9e:a5:0b:ed:10:4e:23:95:2f:
6e:be:39:f8:7c:66:17:d6:9b:fa:a7:9f:09:73:4a:a6:bb:04:
65:94:36:37:bd:f1:a0:9f:98:f5:c4:f7:13:74:0e:ae:28:74:
32:81:6c:58:4d:2c:2a:88:c1:a8:5a:98:28:2e:05:74:19:04:
34:cb:8e:1b:2a:0f:fe:a3:91:b1:82:f9:39:a8:7c:0a:5a:60:
9e:43:ff:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:17:37 2025 by rpki-client