Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb91f0fa-4b82-3002-bac2-9a39808ba4d6.roa
File: eb91f0fa-4b82-3002-bac2-9a39808ba4d6.roa (raw, json)
Hash identifier: dwLkyDOddbiSO9yB/h3JARf+JVgrClkoC2UYqIDTu6g=
Subject key identifier: D7:24:B5:24:48:BB:12:D4:13:24:97:07:26:F8:74:15:BE:A0:21:3C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848372021A0A6DB4EF317944F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb91f0fa-4b82-3002-bac2-9a39808ba4d6.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.103.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:21:a0:a6:db:4e:f3:17:94:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=338c1a7f-1c66-4800-9f16-04d52305a617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:5a:00:42:b7:45:50:d5:5f:78:56:ec:d1:
0f:bd:16:4a:ea:97:67:23:ea:6d:27:95:17:3f:be:
f5:27:0e:68:ad:0f:e7:76:51:fb:80:ba:e8:11:08:
52:0a:bb:4f:48:18:e7:9a:5f:f9:81:fc:33:0a:17:
36:16:e3:21:f1:d1:7b:85:65:b7:c9:c6:9e:85:ef:
54:4c:87:50:74:48:25:f4:9f:2a:e7:24:2b:22:93:
b3:4b:24:58:d7:c9:f8:57:e1:12:e2:a8:9a:f4:2e:
a1:ca:14:5b:d2:a2:b1:58:04:3f:3c:66:35:3d:fe:
9a:2e:95:24:dd:78:42:94:2e:62:c7:55:0f:f2:44:
2a:a5:8e:4c:56:ec:91:a6:b6:aa:2b:dd:c4:7d:84:
b6:9e:3c:9d:b1:2d:e8:70:b5:51:33:cd:5f:09:6e:
a4:fa:20:34:c9:5d:a3:bb:de:0c:07:84:11:97:0c:
42:19:7a:d4:16:fa:78:0e:4e:4f:72:d1:d4:af:f5:
02:f1:ca:88:aa:7e:c1:04:93:e8:64:57:e6:4a:f3:
3a:9b:f1:34:a4:84:83:5e:24:32:a4:14:ca:ab:6d:
2b:19:d4:6c:d3:3c:06:6a:b1:46:66:e0:18:74:97:
a1:0d:76:c6:a9:c6:23:ba:a7:76:23:3e:10:a6:44:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:B5:24:48:BB:12:D4:13:24:97:07:26:F8:74:15:BE:A0:21:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb91f0fa-4b82-3002-bac2-9a39808ba4d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:88:f7:3d:cf:44:b1:e2:f7:e1:b2:dc:e4:8e:d4:56:07:9e:
88:f3:12:70:f3:cb:65:1d:6b:79:b6:48:ae:9e:31:7d:0c:be:
76:28:52:73:6d:26:9c:2b:8c:f7:9d:91:95:77:6d:e8:88:60:
b7:44:d4:3b:1e:ab:73:d6:28:d1:b5:66:65:9b:b2:53:5c:c0:
9d:71:02:c4:d3:21:b5:c4:88:81:3c:33:a8:7b:4c:bf:0a:a1:
00:bb:82:58:7f:01:87:a7:05:33:a4:88:cc:65:24:b6:6a:8b:
9d:37:31:a7:3a:da:30:b0:ca:b7:e9:0d:d1:0e:68:b3:37:43:
f5:e3:a1:b2:61:18:7c:6d:31:db:16:6d:e7:71:e2:34:4b:c0:
44:ac:be:ac:b1:72:24:a5:62:d7:f6:d5:ce:84:21:2b:21:73:
b1:0c:10:03:b0:5a:1b:57:49:a0:1a:90:37:86:37:49:ca:0f:
f9:e3:99:94:48:0a:3c:a0:dd:3b:85:a0:5c:53:69:a3:9d:8e:
33:42:e3:21:70:db:51:b7:d8:01:dc:bc:66:75:e6:bd:6c:6e:
d5:2d:1b:36:1b:05:c3:bd:4d:63:07:5f:b8:0e:61:8f:64:fb:
ab:42:53:54:d1:58:10:08:30:a7:06:93:07:55:67:e5:a3:6b:
23:c1:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:29:38 2025 by rpki-client