Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b2c896c-84e1-37f3-b5be-56f2c0c9db67.roa
File: 1b2c896c-84e1-37f3-b5be-56f2c0c9db67.roa (raw, json)
Hash identifier: 0uckBXpI2k1maZQoHtFIkLFGiiY9mp99q6aUunfkW2U=
Subject key identifier: AC:19:9A:31:14:C6:7F:CF:E5:81:4A:C9:26:30:57:29:A5:07:53:A1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A17E907E9107732F7375D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b2c896c-84e1-37f3-b5be-56f2c0c9db67.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 199.36.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:e9:07:e9:10:77:32:f7:37:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=40be1f24-e437-4aee-9a4c-b87b94283dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:27:78:a0:b8:a3:f0:f7:ce:46:80:f6:4a:
07:61:27:2f:58:45:a1:09:7a:0c:14:e5:61:28:c0:
e0:60:49:01:e5:4e:fd:4a:cd:90:1c:04:ac:4c:51:
71:16:35:9b:d1:78:dc:ea:ca:cf:d6:e9:14:aa:b3:
74:73:49:00:19:4b:6e:f0:cc:21:9c:03:5b:1a:4d:
dc:0c:4a:5b:03:74:60:12:33:81:bf:9d:67:5e:16:
49:59:2c:e2:22:a3:84:e8:76:75:5b:8a:2f:69:72:
6b:92:86:2e:33:b5:56:2e:3d:53:48:93:24:a3:20:
8c:a5:fa:92:03:8e:a8:fc:d0:9c:c5:3d:1a:db:0e:
e8:18:a2:f8:fb:3a:54:3e:aa:a4:eb:3e:95:c5:c1:
77:01:f9:8d:bb:54:4e:f7:c5:46:aa:0d:a9:15:09:
8d:79:00:6f:b8:e1:ad:94:14:4e:b7:ac:76:98:51:
b0:85:63:ef:fa:cb:19:b0:c2:4c:39:84:3d:74:1b:
21:fc:81:2e:f3:b1:8f:49:fc:c3:90:f3:85:38:4e:
34:12:52:8d:3f:f3:8b:3e:81:9c:f7:52:3b:a2:e3:
d4:6c:ea:29:9e:7a:c3:32:56:4d:e8:7f:2e:bc:d8:
76:8e:7b:b7:d0:61:5c:44:38:fe:af:db:6c:86:a9:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:9A:31:14:C6:7F:CF:E5:81:4A:C9:26:30:57:29:A5:07:53:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b2c896c-84e1-37f3-b5be-56f2c0c9db67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.36.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:32:e9:3a:39:b1:0f:98:39:3b:cb:c3:05:21:ef:ec:47:1f:
94:e2:33:da:59:26:e4:e0:e5:5b:8f:d0:ec:f5:aa:e3:e3:77:
ad:37:0b:6a:21:5d:28:9d:1d:9d:15:cf:93:60:c4:ea:01:96:
77:51:92:6e:ec:f6:8c:d3:cf:fa:a5:35:b3:59:89:7d:10:aa:
e7:72:02:97:19:03:16:4c:67:d2:df:a5:73:4b:98:60:d2:bd:
a0:1c:01:6e:37:04:b9:ef:fe:70:bc:c0:d6:31:00:b2:77:ef:
55:7c:97:a4:ce:ae:e3:05:f1:fe:92:23:bf:c0:c3:e3:44:f8:
75:63:ab:38:cc:f9:a9:59:dc:75:58:d4:81:1e:4a:26:23:6e:
a3:cb:32:e9:4c:67:6f:4f:db:9a:9f:a2:d0:57:09:49:40:8f:
a1:75:7b:6b:71:61:58:4e:27:64:09:ed:79:cc:2b:48:87:fd:
f0:a3:c3:76:da:b0:6b:97:96:1e:fc:53:31:22:a2:38:54:88:
72:68:67:de:8f:c8:76:c0:60:50:b2:f4:22:69:0f:1b:83:98:
b8:8b:33:f9:0e:cd:ca:94:6a:a5:e5:0c:ec:08:1a:c8:de:95:
11:08:d4:fa:a9:dd:a1:90:90:b6:99:f4:b2:c1:40:be:a9:9c:
14:32:e4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:01:50 2025 by rpki-client