Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/02f8bddf-a27b-30a9-bc96-3584fa56a1d3.roa
File: 02f8bddf-a27b-30a9-bc96-3584fa56a1d3.roa (raw, json)
Hash identifier: dhR5nf9h/Y0bKvnK92e7BpMkXvHTLcvh4R0S6HJxWto=
Subject key identifier: 30:E7:A0:B6:4F:36:C5:10:7A:2D:E5:90:F0:DF:FC:22:C8:52:7D:00
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F432858487528CCEBFF569CFCB302D240
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/02f8bddf-a27b-30a9-bc96-3584fa56a1d3.roa
Signing time: Mon 06 Jan 2025 19:18:40 +0000
ROA not before: Mon 06 Jan 2025 19:18:40 +0000
ROA not after: Sun 06 Apr 2025 18:18:40 +0000
asID: 6461
IP address blocks: 209.66.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:28:cc:eb:ff:56:9c:fc:b3:02:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Jan 6 19:18:40 2025 GMT
Not After : Apr 6 18:18:40 2025 GMT
Subject: CN=46ffa024-18f8-4289-adae-45e5eefe1522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:31:f1:e4:d8:38:6f:8e:e4:9d:d9:1e:63:dd:
ca:3c:05:46:f8:b9:6f:8b:f0:54:65:7e:69:7e:4f:
a2:bb:1c:ac:37:34:c7:67:cf:a7:70:b8:98:f4:0c:
97:7e:9f:0c:61:36:c1:dc:33:59:81:a9:22:1a:65:
cf:4b:51:fd:dd:dc:4b:8e:02:8a:5b:b2:51:db:68:
75:36:61:a7:4e:03:b9:46:83:09:13:29:82:61:2d:
d2:77:7e:18:0f:3d:bc:cb:b2:c9:ff:40:7a:e6:ca:
ec:38:2b:d3:25:99:31:ca:a6:3d:43:4e:6a:57:34:
e5:17:17:a4:62:ee:05:63:fe:52:3d:a5:c4:e9:2f:
3d:68:ee:1d:18:3e:76:c7:5e:67:f3:23:a9:40:62:
8b:65:8b:af:76:f0:59:ca:c9:41:00:57:a1:0a:0a:
e8:b3:35:0f:64:2c:6a:e6:51:a8:32:3c:1d:de:75:
a9:45:97:04:e1:94:52:6f:2c:cd:30:74:d3:b7:4b:
bd:af:13:58:25:4d:0d:84:22:07:ba:e4:e5:e4:a0:
d0:d8:78:ab:c1:fa:82:c8:af:d4:ad:7e:9f:2b:6e:
dd:0d:f6:a4:99:f5:f2:ba:d1:b7:3f:26:40:1d:2e:
02:03:5d:04:17:e8:0b:bf:b8:35:27:70:16:ac:bd:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E7:A0:B6:4F:36:C5:10:7A:2D:E5:90:F0:DF:FC:22:C8:52:7D:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/02f8bddf-a27b-30a9-bc96-3584fa56a1d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.66.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:62:f9:41:7b:43:5f:13:07:7a:a2:e8:63:7d:d6:3d:50:32:
4b:ca:26:31:b6:8d:92:f3:75:b9:49:f7:92:97:87:d9:96:ee:
82:3a:72:7c:91:bf:bf:d2:78:a6:d9:88:ba:ac:e0:3b:7d:fb:
c0:5b:88:ed:95:4b:dc:f1:39:4f:3d:86:a7:0c:0f:88:59:c5:
23:f6:7e:09:fd:14:c3:04:53:18:cb:e4:47:08:64:9b:f2:69:
04:2c:d8:05:17:f4:8e:ca:e1:14:c2:fd:87:9e:b9:19:e8:b6:
e2:2c:40:10:3f:da:0d:75:c2:a0:93:f8:74:19:c9:c6:8c:e2:
82:7d:43:8b:c2:10:7e:68:23:18:41:b8:1d:40:e8:d7:c3:59:
ec:b7:92:82:c3:05:d9:ed:e0:31:a2:68:0d:44:45:de:0f:17:
44:f5:9a:0f:ce:60:36:3f:59:38:59:4b:25:a4:f8:45:3e:87:
58:ea:7f:7e:43:7a:5d:21:78:2a:3d:a8:fe:9b:f3:e5:1a:ca:
d0:31:de:96:25:92:d1:b7:73:23:2b:5b:55:6f:82:85:7d:70:
ca:a5:11:5d:87:7a:79:d3:f9:05:22:a7:97:1a:7f:61:e5:6c:
8b:ae:ee:b9:13:68:52:d6:07:1b:2c:d7:bd:d7:22:a2:90:d1:
61:03:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:51:51 2025 by rpki-client