![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/bac22079-721e-34ac-9ca9-a64dad5856e8.roa
File: bac22079-721e-34ac-9ca9-a64dad5856e8.roa (raw, json)
Hash identifier: r9r052mK+3FWW/9Yde3ZJhxUTwk37E95yy2njO97hKI=
Subject key identifier: AB:34:7B:D8:71:65:4D:1C:D1:65:35:8E:D9:5D:4E:9A:67:46:C4:A3
Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial: 010D0C9F432858476E01042428B1663C1EE7B880
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/bac22079-721e-34ac-9ca9-a64dad5856e8.roa
Signing time: Fri 04 Oct 2024 13:00:42 +0000
ROA not before: Fri 04 Oct 2024 13:00:42 +0000
ROA not after: Thu 02 Jan 2025 14:00:42 +0000
asID: 211535
IP address blocks: 128.254.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6e:01:04:24:28:b1:66:3c:1e:e7:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Validity
Not Before: Oct 4 13:00:42 2024 GMT
Not After : Jan 2 14:00:42 2025 GMT
Subject: CN=7921a2df-abc4-4d43-866f-6eca2181f676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a7:09:38:7f:f3:36:64:f4:19:ed:4d:d3:18:
be:8b:d0:12:ab:c5:7b:e0:9a:e8:8a:98:a4:d2:81:
ea:58:75:97:2a:e8:45:37:74:47:d2:8a:d3:30:fc:
24:df:10:18:a5:61:81:6c:41:6e:a9:05:e4:96:03:
f2:1c:d6:4c:86:33:32:e7:59:cd:7e:ad:41:a8:6e:
fd:68:10:d7:8f:ea:a8:7c:b1:1d:d6:15:f6:0e:28:
32:3c:f7:ba:fd:11:eb:81:f3:5c:d0:98:5f:a8:4e:
46:bd:c5:4c:45:73:04:c1:19:a4:4a:e3:c3:2b:d8:
c0:a5:64:34:76:56:05:24:99:2f:94:05:2c:db:ce:
f7:5f:aa:af:18:c2:08:1b:da:4c:4d:38:76:d8:2f:
a0:b8:3e:c6:22:ce:ed:bc:9d:98:b0:c3:86:c8:b5:
d2:a7:e7:49:1f:31:8d:f5:1f:3e:ce:e0:81:01:e0:
2e:8e:06:8e:da:e4:9f:ac:82:fe:28:01:82:71:8a:
ae:84:ef:bf:c7:22:aa:70:f2:e1:d3:d0:b8:1c:07:
7e:c8:0b:0a:e0:fb:14:d6:b1:a8:73:3d:22:7d:02:
33:84:86:a9:1c:98:3d:66:01:91:0d:f6:08:89:67:
42:7c:0d:29:b3:3f:83:d5:93:0f:d1:22:81:eb:f5:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:7B:D8:71:65:4D:1C:D1:65:35:8E:D9:5D:4E:9A:67:46:C4:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/bac22079-721e-34ac-9ca9-a64dad5856e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
X509v3 Authority Key Identifier:
keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:4d:73:80:f6:c4:6e:00:49:12:f9:0a:44:79:89:83:a7:1c:
45:ef:76:e1:3a:5c:99:4e:dd:03:d4:77:27:f0:25:8b:a7:f4:
fb:0f:2d:15:42:da:d2:84:ae:ee:cf:01:d1:3c:92:37:73:c2:
14:a6:db:27:df:28:c2:c1:84:25:01:e7:c1:d3:f1:a8:de:48:
fe:27:b2:77:ee:c7:d5:3a:04:5f:1f:33:de:c6:ab:67:f1:c2:
4d:f7:f3:00:f8:fa:d4:4a:35:aa:75:56:86:0e:d3:bb:91:8d:
74:1c:38:b2:01:ce:74:2f:66:e6:a2:55:03:41:05:ef:58:ee:
3e:d9:2d:89:83:d5:17:0c:22:b1:a4:2e:f6:ea:5b:ca:25:ed:
9a:33:1c:29:7d:b0:a9:cc:43:a3:3c:2d:c0:cc:dc:3a:13:4f:
43:63:53:fd:ff:4f:69:cf:ac:67:46:05:7c:ee:82:b2:ce:13:
f0:25:86:ce:da:f7:ce:c7:d4:27:d9:9a:5d:d2:e8:ec:7f:aa:
8a:24:95:87:95:2c:78:e8:72:42:95:d7:c1:48:2e:4d:11:f1:
a8:99:8a:2b:12:b2:83:8d:ca:57:cf:48:f1:40:3c:dd:51:fc:
b5:52:f8:3f:5a:79:3c:50:67:05:55:11:18:e0:2d:94:77:ef:
bf:4c:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:43 2025 by rpki-client