Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d3d32888-962b-3249-b10c-8ca5d913e792.roa
File: d3d32888-962b-3249-b10c-8ca5d913e792.roa (raw, json)
Hash identifier: y7hcd75p57fHlPKUUZSgJEC0xHjtP+0rc28myZUL1O4=
Subject key identifier: F6:7C:4B:D1:14:93:50:61:A2:BD:92:E1:7A:3B:BA:84:C2:E5:19:3F
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F43285848703EFBC46ED7BD55984C8F00
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d3d32888-962b-3249-b10c-8ca5d913e792.roa
Signing time: Sun 05 Jan 2025 01:04:20 +0000
ROA not before: Sun 05 Jan 2025 01:04:20 +0000
ROA not after: Sat 05 Apr 2025 00:04:20 +0000
asID: 834
IP address blocks: 64.112.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:3e:fb:c4:6e:d7:bd:55:98:4c:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Jan 5 01:04:20 2025 GMT
Not After : Apr 5 00:04:20 2025 GMT
Subject: CN=f0ad5563-e0d4-464b-a457-dc8a55a625b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:c4:e0:aa:54:4b:f7:13:98:dd:69:55:09:
d3:89:8c:8b:ec:78:50:a3:1c:34:4d:a4:39:82:ae:
f2:f7:8f:a0:7c:55:3a:d8:bd:07:21:02:7c:b7:b9:
f1:e7:0b:e8:d4:9a:f5:46:8e:ac:21:5b:41:ec:52:
76:17:47:2d:15:a6:40:a4:b5:3a:89:83:9e:d6:de:
f4:93:84:63:1a:63:02:ae:a2:53:7c:17:3e:38:f4:
1c:f4:aa:3c:9a:1a:56:1e:81:42:a0:60:73:63:1c:
ac:42:74:5c:3c:04:79:b9:8b:b9:b2:e5:e6:3d:97:
a7:7c:98:1a:8b:58:1f:bf:bd:4a:b5:b7:ff:dc:1f:
58:70:b7:d8:35:9d:ac:76:50:00:74:e5:80:b1:9d:
9c:13:a2:4b:42:83:af:c5:81:ab:e3:35:37:b2:66:
5a:84:a4:ae:03:5f:fc:ef:7e:91:43:8e:66:64:27:
55:69:fb:2f:cf:b2:ea:2c:a7:c4:7a:e5:5a:2b:69:
96:75:b3:98:6e:11:08:1a:33:3a:68:54:84:54:36:
1f:91:36:17:67:a6:01:f1:e5:15:b7:33:dd:73:c3:
83:b1:55:ec:d8:15:39:f9:4d:22:52:be:6d:36:75:
4c:ee:fa:1f:53:4a:20:40:8c:ce:5b:6a:45:8a:bb:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7C:4B:D1:14:93:50:61:A2:BD:92:E1:7A:3B:BA:84:C2:E5:19:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d3d32888-962b-3249-b10c-8ca5d913e792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:14:36:91:41:ec:11:63:8a:6b:c3:1b:7b:7e:65:cb:e2:dd:
22:99:7f:97:13:38:f0:5b:4e:40:ba:18:11:82:21:03:71:1a:
21:6c:b6:0d:ad:e9:71:fc:d0:73:b8:0f:3b:55:37:1e:3a:d5:
c7:05:a8:11:56:01:df:77:9d:f2:df:32:63:70:fc:27:c0:a2:
cc:2c:74:8c:d0:7e:07:d9:89:63:0e:08:80:de:d0:42:b8:a9:
80:be:d4:b5:91:d9:8d:15:7f:dd:63:4e:82:e8:bf:fe:a3:98:
5c:b2:3e:47:bf:b8:10:eb:2c:3c:04:2f:4f:ed:cf:45:5c:4e:
ad:dc:c9:98:af:e4:1b:78:41:44:26:05:22:b9:c0:25:c0:43:
b2:9c:d3:30:19:fc:58:8c:ce:00:b9:5d:fd:ed:e9:56:c9:c0:
86:03:70:52:4c:b0:7e:23:ce:26:1b:a6:78:fc:65:43:3d:94:
05:d7:40:5e:68:03:dd:08:69:21:34:04:cf:6e:17:bf:a6:a4:
6d:e4:f3:2d:07:3e:8b:8c:d8:55:38:57:66:08:00:8c:02:9a:
33:cb:c0:ca:12:1c:fc:e5:a9:c8:85:d0:c6:88:b8:39:d8:fa:
4f:8a:a7:47:c5:8d:15:e0:b6:a4:a3:0a:0a:9c:0d:2e:4c:18:
6e:f2:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:18:21 2025 by rpki-client