Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96a86e73-464e-3a77-bc0b-136a4b61c6b5.roa
File: 96a86e73-464e-3a77-bc0b-136a4b61c6b5.roa (raw, json)
Hash identifier: H8eeCN5LYVgYwvGJ/Pa7AaSCGHYaU3ZIGL3p0k3ne2s=
Subject key identifier: 7E:F2:7E:DF:B9:46:95:8F:D6:1D:13:31:37:57:04:A3:BB:28:EE:C7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848C15F74A038B0D6AD10249000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96a86e73-464e-3a77-bc0b-136a4b61c6b5.roa
Signing time: Mon 03 Feb 2025 02:30:14 +0000
ROA not before: Mon 03 Feb 2025 02:30:14 +0000
ROA not after: Sun 04 May 2025 01:30:14 +0000
asID: 46208
IP address blocks: 184.104.238.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:5f:74:a0:38:b0:d6:ad:10:24:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 3 02:30:14 2025 GMT
Not After : May 4 01:30:14 2025 GMT
Subject: CN=038c7870-eea5-4797-bda3-fd3e57af923f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:3c:f1:40:ef:44:03:7e:f7:4c:4f:22:21:
94:43:ed:4f:d0:7e:4e:e4:f7:94:63:2a:7d:bd:e2:
ee:90:db:1e:38:47:83:64:a9:61:75:91:d9:d2:a2:
97:57:8e:a2:7f:da:dc:97:bf:4f:8b:98:6b:fa:25:
c8:9d:44:a3:84:34:7c:af:ab:bf:07:cf:1a:77:34:
46:45:3a:b5:e8:a9:86:89:19:1d:ba:0d:6f:d4:28:
77:8d:c6:68:74:be:b8:3e:5e:f3:6c:3b:04:fe:cc:
62:27:e4:c4:86:dd:89:82:5c:31:6b:e9:87:7e:99:
41:89:57:bd:10:46:c5:80:45:2d:1a:9c:47:f8:b8:
08:4e:d6:0d:2b:c8:e1:e5:17:aa:fd:82:07:c8:53:
a0:ef:1f:58:1b:d3:ce:35:2d:e6:12:e5:34:ea:f1:
1f:82:18:3c:eb:33:36:0d:09:fd:19:2e:56:e7:d7:
87:90:ad:ae:02:79:52:68:2a:45:2a:57:9f:76:8e:
fa:28:8e:fd:c7:ea:d7:7f:24:73:79:01:51:0c:6d:
a9:c1:0b:3f:03:de:c1:e3:00:89:f9:ab:8b:d5:09:
bc:30:f6:3d:ba:0a:fc:01:9c:b8:0e:79:8a:c8:82:
e7:a6:7a:d8:81:1d:34:0b:8d:29:6c:18:98:cb:37:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:7E:DF:B9:46:95:8F:D6:1D:13:31:37:57:04:A3:BB:28:EE:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96a86e73-464e-3a77-bc0b-136a4b61c6b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.104.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:a3:d2:1a:95:f7:f9:25:59:ac:db:da:78:c9:08:c2:cd:37:
52:88:98:aa:c6:9b:0b:1b:e7:de:b7:ea:97:b0:f5:93:d2:36:
68:07:b3:c9:55:49:5a:74:eb:5d:03:d6:c1:eb:d4:d6:3d:ab:
bd:f1:07:9b:dd:b2:92:f8:4e:9b:e3:ec:89:69:ed:ce:91:64:
33:7c:2c:79:b7:9e:4f:50:22:f5:bf:8c:6d:90:1e:4f:7c:a4:
0c:d2:fa:63:a4:64:af:e4:a5:43:ab:f3:df:9d:3a:03:ec:15:
0b:07:c9:cd:7c:a9:e1:04:67:63:a1:f1:97:d3:53:29:e3:fd:
97:aa:68:0b:92:7e:69:88:68:79:ba:ea:19:94:6f:de:3a:83:
4f:5b:b6:99:d1:a8:2b:dd:80:5d:3d:6f:c4:f0:af:cc:72:5b:
28:09:a1:ed:5a:a9:14:23:de:59:a1:d3:5b:fd:69:a5:e5:0d:
ea:a7:d1:fb:89:ae:26:e1:30:f2:a1:a8:27:92:24:fd:04:16:
e9:86:a5:22:f9:3a:d0:2e:47:05:75:04:9b:b7:8e:e6:c4:12:
aa:1c:ce:b2:f7:ee:8b:db:67:98:a6:4b:22:63:a7:21:80:ba:
fd:76:c5:0b:b7:04:7d:c2:78:ba:24:13:26:f1:af:e7:fe:80:
06:28:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:06:49 2025 by rpki-client