Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/c5289444-cba9-3230-818c-d6a45e65470d.roa
File: c5289444-cba9-3230-818c-d6a45e65470d.roa (raw, json)
Hash identifier: 7jGq6Rf3YVTfsbBZEn/Du8rn/Muj8SVSUmbJziE8Bd0=
Subject key identifier: CE:15:35:ED:97:C8:15:81:BE:AC:09:33:89:9E:09:F0:B5:CE:E2:C8
Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial: 010D0C9F4328584476C472FB5365FBE83857EE00
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/c5289444-cba9-3230-818c-d6a45e65470d.roa
Signing time: Sat 06 Jan 2024 14:00:20 +0000
ROA not before: Sat 06 Jan 2024 14:00:20 +0000
ROA not after: Fri 05 Apr 2024 13:00:20 +0000
asID: 48581
IP address blocks: 128.254.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:76:c4:72:fb:53:65:fb:e8:38:57:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Validity
Not Before: Jan 6 14:00:20 2024 GMT
Not After : Apr 5 13:00:20 2024 GMT
Subject: CN=4f06ad60-d1ff-4136-904e-b21296cc91e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:ed:e4:cf:f8:42:a8:27:00:8f:42:60:18:
9b:63:db:88:1d:cc:49:08:56:fb:a2:19:e9:6a:c6:
ed:b9:fa:4a:3c:5f:32:6c:38:d3:ab:aa:ff:58:90:
1f:50:ab:20:72:6b:24:e5:50:02:1b:e7:4c:ed:50:
25:85:97:2e:ba:3c:fe:d3:8b:6f:c5:65:1b:f2:2d:
bb:c7:b7:27:2b:e8:d8:06:30:e9:d8:26:61:8a:04:
30:16:36:33:45:dc:cd:46:43:c0:71:9f:b9:b6:ed:
ab:bd:57:03:72:94:14:54:e7:2a:d8:d7:bf:ec:6b:
4c:2c:07:df:0a:80:be:2c:c0:cf:c9:18:e7:0f:8f:
2a:dc:f0:d7:64:71:4b:76:3c:ac:94:70:4e:f0:08:
44:2b:4a:83:55:00:1a:ef:5d:fa:5e:46:7b:9b:cc:
82:d6:f9:53:4f:c6:97:4e:9c:84:58:80:b0:93:c3:
54:77:45:a0:f0:f2:62:2b:ca:03:82:0e:3d:97:e4:
c3:1a:97:1d:56:a1:a4:fa:70:8e:2d:7b:31:95:ef:
3a:64:a5:5a:e9:1c:f5:78:36:8e:80:bf:74:60:40:
86:54:4b:42:52:8f:5d:50:ec:74:63:ba:d6:e2:87:
99:17:38:6a:d9:11:bc:bf:8d:b3:5a:31:8d:4a:7c:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:35:ED:97:C8:15:81:BE:AC:09:33:89:9E:09:F0:B5:CE:E2:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/c5289444-cba9-3230-818c-d6a45e65470d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
X509v3 Authority Key Identifier:
keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:80:6e:ec:8b:6b:a8:39:4d:88:6d:2f:ee:72:40:fb:72:f9:
f1:91:0c:f8:7a:e9:0d:18:ee:1d:9a:13:a4:3e:d6:53:dc:ac:
71:80:41:e7:9f:79:b0:75:ea:52:76:9a:cf:77:72:9e:bb:bb:
44:31:f6:66:dc:89:a7:2b:67:ab:73:08:5d:ac:42:18:44:43:
95:dd:78:2b:91:63:6a:d5:44:4c:ae:fe:4c:39:06:f2:27:53:
02:6c:32:43:c0:13:52:f4:9c:e3:ea:4f:d8:4f:31:6d:24:e1:
f7:96:ba:f3:7b:c6:ea:49:47:bd:88:f8:08:54:1c:5a:87:e9:
a7:ce:43:fb:0c:32:24:83:23:e2:38:d7:28:78:9f:f6:5b:e1:
47:ad:a4:22:6a:78:d0:cb:1c:ff:4f:01:21:ea:0d:e8:aa:a4:
ed:1d:b1:0c:c7:0f:8f:ac:47:95:68:20:f1:c8:90:c6:e4:e0:
a1:c5:b5:99:9b:ba:62:b4:a8:e8:11:4a:52:09:5a:be:92:7c:
87:6c:f0:f6:1d:6c:b4:2e:28:04:d3:e1:fe:54:e5:a4:d6:5e:
cb:da:44:7d:c2:e4:75:17:9e:14:c5:c1:07:4e:ed:64:2c:37:
d3:1d:69:95:61:18:0c:10:0a:54:81:84:e4:40:65:6f:cd:de:
d3:84:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:02 2025 by rpki-client