Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/35e90ecc-da26-3ec8-90f5-16d2b79993b9.roa
File: 35e90ecc-da26-3ec8-90f5-16d2b79993b9.roa (raw, json)
Hash identifier: tIhJ0Ea+g6ywFS47bKJeS+drRmt0EaGCG9IemBoDV5g=
Subject key identifier: 20:9B:BD:AC:4C:8D:84:80:C6:F3:9C:B2:F3:51:50:9A:50:92:31:D6
Certificate issuer: /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Certificate serial: 010D0C9F4328584877E227D9750DE869B94BCED0
Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/35e90ecc-da26-3ec8-90f5-16d2b79993b9.roa
Signing time: Tue 07 Jan 2025 18:43:45 +0000
ROA not before: Tue 07 Jan 2025 18:43:45 +0000
ROA not after: Mon 07 Apr 2025 17:43:45 +0000
asID: 20473
IP address blocks: 206.197.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:e2:27:d9:75:0d:e8:69:b9:4b:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Validity
Not Before: Jan 7 18:43:45 2025 GMT
Not After : Apr 7 17:43:45 2025 GMT
Subject: CN=25cbdc2f-a365-47c3-8103-0f50b949da5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:d0:f6:f2:f5:86:03:fe:54:10:39:bf:06:
05:48:d7:a5:24:70:13:6d:f6:3d:94:0e:1b:92:7e:
a2:77:3b:1d:e2:ce:1e:d2:6e:77:07:88:42:c2:af:
cc:7c:2e:9e:b2:21:a4:d8:06:2d:88:c2:c5:9e:17:
34:79:53:78:1c:c5:da:5f:a5:a0:7a:89:69:47:07:
e5:28:8b:85:8a:46:e2:a7:76:36:6b:86:2d:60:21:
30:e6:e1:ae:4b:cc:02:d6:64:82:da:23:e7:fd:a1:
7b:41:ea:2c:32:71:a2:a4:10:10:ab:79:4e:67:84:
9d:81:04:55:92:56:20:38:04:d6:43:68:27:93:32:
52:d5:67:9d:2f:3e:19:6f:df:87:3a:3b:96:f9:8d:
cb:29:7d:a0:fc:5d:03:ee:68:db:cb:43:fe:dd:42:
2a:8a:32:e8:8e:b6:e4:aa:14:12:00:f9:84:d0:78:
b0:e7:74:d7:75:33:0f:8f:c1:7d:05:df:b3:21:ad:
22:55:ae:58:d2:2e:61:af:d3:b3:56:1a:eb:a4:b8:
3b:10:c0:19:75:c4:ca:9b:66:9f:5f:b0:9a:75:42:
59:5d:48:52:ed:eb:ad:d3:fc:0d:c7:fe:fb:cc:49:
56:e5:dc:9e:08:1c:95:ee:84:06:56:19:da:47:df:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9B:BD:AC:4C:8D:84:80:C6:F3:9C:B2:F3:51:50:9A:50:92:31:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/35e90ecc-da26-3ec8-90f5-16d2b79993b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl
X509v3 Authority Key Identifier:
keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
sbgp-ipAddrBlock: critical
IPv4:
206.197.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:3e:79:88:93:88:2e:88:81:cd:0b:d6:df:3b:62:97:b2:19:
72:32:21:bf:8e:f4:c2:6a:f9:f5:28:87:df:47:22:da:e0:2a:
f5:d1:65:a9:96:3a:1b:04:47:5b:3a:f2:94:ef:de:70:49:36:
63:a5:e9:0d:19:8a:88:f1:b8:db:c2:88:78:0b:c9:3d:18:58:
05:14:f9:ab:f4:07:fc:ff:2e:9a:94:ff:b0:1d:d0:9b:d1:9f:
ce:e6:0d:07:fc:9c:d4:aa:d8:7c:dd:8d:f2:ff:7f:81:d4:9d:
26:6e:07:15:fd:66:18:fb:13:99:54:db:cc:5b:ce:64:51:26:
7a:01:90:ab:6d:27:93:67:f4:c5:53:1a:37:bf:99:6c:ea:1e:
b3:b3:ac:f7:c2:70:7f:22:ce:5f:a3:5d:7b:aa:d2:d9:9e:06:
35:4b:a9:3e:5f:a1:67:df:6d:a5:e3:69:ec:e3:eb:b1:8f:cb:
c1:4d:e8:99:4d:ca:54:b5:66:7a:b8:28:d9:8c:1c:87:d4:c4:
ae:91:87:05:35:6b:c7:9e:f5:78:09:ca:93:1f:4d:3a:43:56:
24:2e:8e:f2:f7:aa:74:d0:e9:c9:f3:83:92:17:cc:9b:b5:1d:
89:e7:72:fb:05:83:33:af:a7:c7:04:7a:4a:72:f9:37:8f:10:
34:b9:e8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:38:36 2025 by rpki-client