Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/787be853-7221-3641-8e8a-e8f10231ba72.roa
File: 787be853-7221-3641-8e8a-e8f10231ba72.roa (raw, json)
Hash identifier: CegLTr/sUxHMagejdXcVxu592lta3Kjk6rTt60V9NV4=
Subject key identifier: 39:D5:DC:C9:3D:34:CC:DB:E3:2C:EF:C6:93:85:AA:F3:CA:28:A6:A4
Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial: 010D0C9F43285841E167B3F5DD3D8E0847243D00
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/787be853-7221-3641-8e8a-e8f10231ba72.roa
Signing time: Sun 14 May 2023 16:24:09 +0000
ROA not before: Sun 14 May 2023 16:24:09 +0000
ROA not after: Sat 12 Aug 2023 16:24:09 +0000
asID: 33139
IP address blocks: 66.49.206.0/24 maxlen: 24
66.49.207.0/24 maxlen: 24
69.57.208.0/22 maxlen: 22
69.57.212.0/23 maxlen: 23
69.57.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e1:67:b3:f5:dd:3d:8e:08:47:24:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
Validity
Not Before: May 14 16:24:09 2023 GMT
Not After : Aug 12 16:24:09 2023 GMT
Subject: CN=36ad0189-7068-40f8-a8df-7f689e022110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:75:d4:17:75:9d:25:8b:70:dd:18:ca:cf:
bc:c5:4e:a9:70:73:1b:d1:51:31:dc:f5:b9:1b:96:
4b:60:ab:99:f8:28:b4:c3:ca:44:21:f1:8a:06:e0:
9e:2c:c9:88:ab:49:13:35:6a:9c:20:2a:69:3d:c3:
04:92:44:08:9f:67:1f:ca:b1:5b:52:0d:96:c6:29:
43:0f:6f:d3:29:1d:fc:49:51:a2:6b:c2:18:81:07:
a5:ca:82:6d:1e:ec:cc:a8:22:93:46:24:ed:39:ce:
4c:d0:6d:43:8f:fb:c6:b4:eb:c6:3c:8c:58:69:85:
27:49:f8:44:ff:5b:c3:b2:7a:22:d0:0a:bb:24:c1:
bd:63:17:c1:30:77:6d:36:d9:f1:50:9c:ec:b2:1b:
d2:4e:b7:b6:a4:e2:69:e6:a0:67:93:8f:2c:8a:5e:
1a:71:96:51:1b:bd:bb:c5:a7:f3:01:0a:1e:ed:de:
cf:b4:10:d1:66:95:cb:41:a9:05:83:88:c6:4a:0b:
83:c2:1f:07:e5:db:69:b4:a7:b4:64:9e:54:88:ed:
b2:99:94:d8:9a:10:77:8d:26:da:0c:49:43:8a:b8:
43:02:e0:6a:60:ad:02:d1:9e:db:2e:db:ed:17:a9:
b8:ac:8c:32:98:2c:df:e9:2f:9d:a9:ed:c9:40:18:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D5:DC:C9:3D:34:CC:DB:E3:2C:EF:C6:93:85:AA:F3:CA:28:A6:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/787be853-7221-3641-8e8a-e8f10231ba72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
X509v3 Authority Key Identifier:
keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
sbgp-ipAddrBlock: critical
IPv4:
66.49.206.0/23
69.57.208.0-69.57.214.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:fc:7c:f5:51:b2:d8:20:66:58:87:66:4f:62:8b:59:6f:64:
a1:51:38:a2:5a:55:36:42:af:5a:16:39:21:2f:08:48:4b:cf:
1f:4c:46:5b:d4:31:ec:d3:a9:e7:22:29:eb:12:b6:1e:a1:93:
53:86:2d:77:38:81:81:a6:16:19:bf:f2:51:b5:3a:30:f5:ce:
8e:a2:bf:46:2c:75:cc:84:f6:60:04:cd:3c:fa:a2:b9:a3:9d:
7f:ef:0d:78:6a:d2:00:70:6d:b8:ce:22:90:d6:f1:cf:d8:41:
ec:c2:98:7b:8d:67:1c:bc:66:84:ad:b7:21:cb:a2:e9:35:cd:
3f:ad:1a:28:41:a0:28:a4:35:96:8d:01:0d:f9:e5:31:2c:4b:
4b:d6:f8:c7:a5:72:63:fd:1d:23:e1:81:31:55:e9:4e:10:2c:
96:1a:ed:9a:ba:66:d0:6e:99:ab:a8:d9:f7:48:cb:f0:22:a5:
c0:db:61:66:6c:7a:35:23:f4:54:84:31:9b:57:87:99:82:83:
9d:17:93:cb:ba:2e:dc:03:5f:69:4d:92:b4:71:a8:f8:02:ff:
83:45:f7:7a:3b:a4:e8:d7:7a:56:06:b4:06:91:ce:4c:33:07:
44:b0:42:94:b1:96:51:13:d9:7c:4f:9d:02:49:4b:d5:2a:52:
c4:36:dd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:16:01 2025 by rpki-client