Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/e2fd618e-ef3e-30a3-8734-611a44347993.roa
File: e2fd618e-ef3e-30a3-8734-611a44347993.roa (raw, json)
Hash identifier: d1BRTuq5W/VBydbxPXN4dmrtugCrV7yGcDne1GNfwhE=
Subject key identifier: 0E:D3:72:5C:BA:F0:E9:20:AF:97:D2:42:68:D5:BB:06:B6:68:E9:1D
Certificate issuer: /CN=d9f752bf-5611-40d8-90f2-7c7c59c005f9
Certificate serial: 010D0C9F432858483A868AEADBB10EE8BCC97680
Authority key identifier: E4:F6:44:14:85:F4:F3:BF:C9:05:75:AF:CA:C3:D0:7D:40:67:EF:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/e2fd618e-ef3e-30a3-8734-611a44347993.roa
Signing time: Mon 16 Dec 2024 19:14:51 +0000
ROA not before: Mon 16 Dec 2024 19:14:51 +0000
ROA not after: Sun 16 Mar 2025 18:14:51 +0000
asID: 53271
IP address blocks: 24.38.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3a:86:8a:ea:db:b1:0e:e8:bc:c9:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f752bf-5611-40d8-90f2-7c7c59c005f9
Validity
Not Before: Dec 16 19:14:51 2024 GMT
Not After : Mar 16 18:14:51 2025 GMT
Subject: CN=2ed6dfb5-cff1-4174-bbbc-c31060fa0a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:87:a6:1e:ba:09:45:f8:8d:ba:01:b4:f5:c5:
82:6d:68:09:45:e5:cc:11:78:53:c2:fb:69:31:ef:
1c:20:26:38:62:e2:21:05:4a:39:e2:0b:b5:4c:38:
56:09:2f:20:c7:ba:09:10:05:c5:6a:1a:61:52:c7:
bf:81:32:dc:a9:60:b7:14:d6:52:a6:8c:f0:52:69:
64:4e:bb:a9:b6:c5:2f:1e:be:d4:f1:2d:83:49:7e:
62:b3:89:e6:84:ff:6e:b5:fc:fc:d4:c3:5b:e2:b9:
fb:97:39:f7:73:9b:21:b8:02:55:57:c5:0d:9b:9f:
71:20:33:47:12:80:3b:33:5d:06:26:48:5c:90:cf:
29:00:de:71:31:fd:66:6a:16:7b:ff:27:a1:4a:5b:
af:af:95:07:d5:2e:c4:87:91:44:d4:57:16:58:50:
07:0c:2f:8d:64:ea:74:7f:8e:24:1f:0e:12:4b:31:
0b:46:21:a2:04:e4:29:7c:ad:ee:f7:ed:dd:71:82:
0b:60:d4:4b:f2:89:32:11:66:5d:02:7d:bf:25:3e:
e2:19:3e:5b:56:70:e0:84:42:44:5a:18:10:eb:25:
24:06:2b:ad:b5:fe:23:d7:09:01:7e:6c:90:b4:5d:
0a:bc:2d:b2:d2:9d:16:71:d2:af:ad:25:43:59:36:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:72:5C:BA:F0:E9:20:AF:97:D2:42:68:D5:BB:06:B6:68:E9:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/e2fd618e-ef3e-30a3-8734-611a44347993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/d9f752bf-5611-40d8-90f2-7c7c59c005f9.crl
X509v3 Authority Key Identifier:
keyid:E4:F6:44:14:85:F4:F3:BF:C9:05:75:AF:CA:C3:D0:7D:40:67:EF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:04:d5:e0:6a:11:a6:82:93:44:b8:58:a9:4e:4c:86:06:87:
80:13:c1:e1:01:6c:6a:fb:d5:f6:d8:18:e3:63:97:2e:cb:ca:
71:47:30:f9:62:1e:1c:07:a5:fb:62:3a:ca:99:1b:8a:e9:f7:
59:de:93:67:aa:65:2c:44:b3:d0:90:02:46:e2:33:4a:a4:67:
d0:37:ad:24:c0:90:73:3f:e9:9a:e4:47:73:04:69:0a:8d:3a:
2f:7d:11:1a:cf:55:bf:71:6c:6c:59:32:b5:59:00:99:45:45:
17:35:b1:f6:f2:03:65:df:a9:27:9c:66:09:fc:93:35:29:ac:
1f:f8:b1:89:8f:72:90:03:03:30:8f:40:49:b7:98:e9:d9:61:
6a:83:12:d1:16:1d:e8:89:cb:b1:6a:3a:88:3b:b3:c3:ea:6f:
fb:79:98:02:99:6a:e8:4b:52:3e:6c:1c:97:91:16:b4:ec:6e:
8e:02:04:1c:d2:4e:ef:e0:a2:ae:d6:5f:81:19:c5:91:de:2a:
52:93:62:d6:40:24:98:56:72:99:57:4b:36:bf:bf:4f:18:a1:
d5:ab:43:a5:da:b5:fd:ef:6a:11:fc:e0:bf:c2:60:8b:6a:50:
91:68:ec:2d:c4:4d:f0:c6:41:f2:62:81:15:ab:24:44:20:da:
0d:66:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:29:07 2025 by rpki-client