Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d2957a87-d5fc-3477-a642-20742bc6c3cc.roa
File: d2957a87-d5fc-3477-a642-20742bc6c3cc.roa (raw, json)
Hash identifier: OeF5MxdB1ACrYtddYNSoVUnpEvi+f3xJuYFwAYBQnfM=
Subject key identifier: 09:94:18:EF:74:29:AB:C2:4E:0C:D1:3E:3C:C5:55:40:90:E5:24:4F
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F4328584818BD206D55A3CEE7A591F980
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d2957a87-d5fc-3477-a642-20742bc6c3cc.roa
Signing time: Wed 04 Dec 2024 16:47:21 +0000
ROA not before: Wed 04 Dec 2024 16:47:21 +0000
ROA not after: Tue 04 Mar 2025 16:47:21 +0000
asID: 834
IP address blocks: 216.24.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:bd:20:6d:55:a3:ce:e7:a5:91:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Dec 4 16:47:21 2024 GMT
Not After : Mar 4 16:47:21 2025 GMT
Subject: CN=1d51e0a2-df18-4118-a999-c758c6e2bb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:75:a3:4c:78:54:30:d9:05:43:d7:00:23:
7a:bc:68:ce:c7:f5:75:b9:22:a4:3d:a1:13:f6:cb:
21:00:42:52:82:14:f5:dd:0e:70:b5:46:a8:79:d3:
56:2b:31:d4:d9:35:62:ce:68:0b:2d:fb:a4:74:05:
0d:7c:36:59:a6:8b:0d:88:8b:75:11:70:a2:d4:20:
df:3f:2f:5d:78:47:a3:65:c5:c3:19:82:56:34:5f:
fe:7c:9c:c0:3f:98:bb:2f:bf:14:a4:bf:00:6d:f6:
a5:8a:ad:5f:1c:30:88:9d:5e:5e:35:92:29:3c:08:
0c:44:43:29:21:a9:cf:3a:9b:a3:4b:b9:01:0f:dc:
f5:34:3e:02:2e:6a:19:69:aa:01:8f:43:6c:e9:bd:
12:2a:48:7f:1a:b2:cf:0a:db:2d:50:3c:d9:d3:77:
37:11:2d:62:d0:77:0f:d9:7b:e3:95:d5:f0:fe:71:
9c:d5:3f:1a:b0:36:00:48:61:86:ef:eb:e5:48:f5:
76:ef:e7:2d:c8:b4:29:0d:79:78:4c:37:ab:48:85:
04:38:7e:01:46:5f:25:95:ae:96:67:09:35:2f:06:
1e:8d:ea:e8:5a:08:8c:36:e7:74:03:68:6a:a9:ab:
d4:f5:e4:fb:50:c3:08:0b:d1:9d:21:3d:3d:63:07:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:94:18:EF:74:29:AB:C2:4E:0C:D1:3E:3C:C5:55:40:90:E5:24:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d2957a87-d5fc-3477-a642-20742bc6c3cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:d8:51:5f:cf:47:7b:38:7e:02:82:85:70:7e:02:61:bf:77:
f3:8c:36:16:6f:ff:6d:d7:f8:49:94:c6:ac:03:ff:7e:be:3c:
8d:11:df:de:ef:62:76:68:04:6a:44:13:8f:c1:94:16:ee:fb:
7f:37:a2:fb:4a:39:da:15:0a:20:ac:0a:91:23:d1:24:f7:33:
14:ff:88:f1:34:d1:ed:69:ee:6e:06:6a:16:cd:4d:4e:52:1d:
be:42:f6:a3:aa:e5:cd:ad:28:50:f1:97:5b:d0:32:e3:ba:15:
89:bf:c6:32:39:c6:82:17:f5:f2:99:e0:4d:dc:b0:73:25:c4:
f5:6a:7b:e0:2d:5b:14:7b:33:75:a7:4c:42:fb:85:45:b7:13:
86:dd:37:08:d3:0a:42:e8:4d:fe:fd:cc:99:84:79:a6:ad:89:
d4:82:91:48:f5:9a:6f:4a:13:2b:5a:dd:84:02:6b:2d:49:aa:
aa:90:ae:f2:53:94:5d:86:1a:23:23:b9:2a:03:5d:2f:18:70:
68:4a:e9:d7:df:92:9f:50:25:37:39:64:6b:a7:cc:dc:dd:4c:
6e:63:f4:be:48:24:d0:23:c6:00:7a:cd:fc:ac:e2:97:4e:63:
db:0b:c4:9f:3a:f2:e6:b8:7f:a7:d5:d7:0e:44:58:51:e7:e6:
9e:65:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:50:18 2025 by rpki-client