Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/81bfd777-7352-367b-9ba7-9d05155ea0d9.roa
File: 81bfd777-7352-367b-9ba7-9d05155ea0d9.roa (raw, json)
Hash identifier: u+apxeLi0rTm4eFmVLngpyto5tpsFbmljhTvGhZZEU0=
Subject key identifier: 56:E6:83:E6:92:77:80:F0:23:EF:E5:58:A4:80:8D:97:69:D7:D8:A3
Certificate issuer: /CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Certificate serial: 010D0C9F432858488B4708B5212CC760EB357F80
Authority key identifier: F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/81bfd777-7352-367b-9ba7-9d05155ea0d9.roa
Signing time: Tue 14 Jan 2025 17:27:22 +0000
ROA not before: Tue 14 Jan 2025 17:27:22 +0000
ROA not after: Mon 14 Apr 2025 16:27:22 +0000
asID: 27501
IP address blocks: 64.72.96.0/20 maxlen: 24
64.250.224.0/19 maxlen: 24
69.38.208.0/20 maxlen: 24
74.113.216.0/21 maxlen: 24
74.212.128.0/21 maxlen: 24
74.212.140.0/22 maxlen: 24
103.25.144.0/22 maxlen: 24
103.78.160.0/22 maxlen: 24
103.85.232.0/22 maxlen: 24
148.170.64.0/19 maxlen: 24
199.88.32.0/20 maxlen: 24
199.88.48.0/22 maxlen: 24
199.127.116.0/22 maxlen: 24
208.95.72.0/21 maxlen: 24
208.95.108.0/22 maxlen: 24
209.51.40.0/21 maxlen: 24
216.127.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:47:08:b5:21:2c:c7:60:eb:35:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Validity
Not Before: Jan 14 17:27:22 2025 GMT
Not After : Apr 14 16:27:22 2025 GMT
Subject: CN=cca8f993-f19b-4624-9980-ecfcfe17e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:67:2f:38:48:e7:73:74:19:9a:88:73:c1:11:
ed:a7:e5:52:c5:34:c8:ec:21:ee:1e:9f:32:b1:6e:
7f:b1:f6:07:27:38:99:48:90:a3:8d:ac:90:36:70:
bf:80:10:fe:d0:b7:6b:0e:c5:aa:97:3c:ae:92:83:
8c:0c:bf:74:b5:4a:5c:a0:76:8c:06:8c:6b:0f:5a:
ee:d2:13:75:55:fe:ed:de:b8:54:e9:3a:60:03:24:
00:d7:64:02:a3:21:02:26:bc:24:8c:6f:44:27:4a:
ee:e4:da:2f:16:ca:27:4a:5d:e0:c3:dd:b8:77:11:
ed:1a:2c:bd:c5:1a:f9:44:d3:7a:21:53:ff:36:0c:
51:29:85:43:40:dc:9c:40:ff:66:bc:0d:f2:d1:fe:
5c:79:5e:4d:ae:5b:2b:2f:94:77:fc:73:7e:f4:e8:
ff:db:80:d6:69:9a:2a:fa:99:fe:d4:8e:fe:d3:24:
d0:4d:04:d9:1e:47:0a:d0:f9:38:3e:d3:2f:8b:9e:
aa:5b:61:0b:f8:32:e9:75:0b:0c:3d:2d:83:e2:0e:
cc:19:b5:ab:b8:4c:3a:c5:97:5f:de:fd:5d:c0:2c:
8d:4c:45:7f:31:9a:ca:ff:33:55:1d:b0:9c:f7:48:
35:6a:a2:ae:53:d4:9d:4f:2d:18:b1:af:2a:24:81:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E6:83:E6:92:77:80:F0:23:EF:E5:58:A4:80:8D:97:69:D7:D8:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/81bfd777-7352-367b-9ba7-9d05155ea0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl
X509v3 Authority Key Identifier:
keyid:F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.72.96.0/20
64.250.224.0/19
69.38.208.0/20
74.113.216.0/21
74.212.128.0/21
74.212.140.0/22
103.25.144.0/22
103.78.160.0/22
103.85.232.0/22
148.170.64.0/19
199.88.32.0-199.88.51.255
199.127.116.0/22
208.95.72.0/21
208.95.108.0/22
209.51.40.0/21
216.127.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ac:c8:2d:0a:b9:49:88:39:78:0a:67:51:0f:ae:0e:64:65:
7e:a2:1d:d0:e8:0c:f8:6b:32:b3:1d:e2:23:48:8a:55:b3:96:
91:1d:50:1c:50:97:f0:af:eb:2d:b2:d6:9d:b0:24:d6:31:ab:
ef:d3:5c:77:66:3f:f7:6b:da:de:de:32:88:3e:c3:9e:9e:1d:
02:65:93:d3:0b:59:5c:9d:a7:39:99:f4:74:b2:a0:a3:02:c0:
bc:56:d9:39:41:26:9d:21:e0:19:c2:44:6e:81:62:13:b7:4a:
d9:b9:4e:88:13:41:be:92:e9:58:6f:11:73:9c:bd:c5:2f:fc:
ab:6a:37:32:cb:9a:71:fc:a5:4c:72:e7:17:cf:35:31:7a:9e:
2b:86:b1:e2:ce:d5:5f:6b:f2:37:f8:40:24:9c:c0:2f:24:1f:
7f:9e:19:95:5c:2d:35:48:49:19:88:4f:11:76:03:01:32:a6:
67:87:e1:3c:7a:9d:c3:5e:f4:6a:41:76:b4:63:d1:5c:8b:21:
5a:46:bc:37:96:50:06:5b:48:12:ca:56:34:a4:eb:e8:39:4c:
83:52:7c:3f:a4:4d:fc:1f:c8:32:0b:4c:5d:8b:89:57:9b:e8:
0c:82:a8:e6:33:74:46:13:5d:d0:20:f0:b5:f9:d8:04:7c:54:
cf:b1:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:24:55 2025 by rpki-client