Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/8588dd05-14e8-33b4-a6f8-816574d0424a.roa
File: 8588dd05-14e8-33b4-a6f8-816574d0424a.roa (raw, json)
Hash identifier: Ct+7sxN6JIRmdDRWdPPGqR/S3Vo+n7AGVA/IumUSemk=
Subject key identifier: 47:9A:8A:E7:BC:21:BD:0F:40:46:E1:76:E0:BF:BD:AB:C4:89:41:56
Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial: 010D0C9F43285848748B1B497BDC95D059B45DF0
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/8588dd05-14e8-33b4-a6f8-816574d0424a.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 394081
IP address blocks: 45.62.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1b:49:7b:dc:95:d0:59:b4:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=0044b984-4d1d-4dc6-b547-b82022ee9e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:3f:f1:fe:e4:c7:85:db:83:45:7a:8e:5a:
e1:b1:47:fa:fd:e9:52:5c:4c:ff:cc:56:08:c5:a7:
64:ba:69:02:e9:39:66:29:d0:6b:9f:7d:e5:21:0f:
fe:be:e4:0e:c6:fc:7a:71:f0:9a:cc:66:13:d4:20:
7e:c0:2d:f8:50:24:43:d3:50:d2:32:a8:4c:af:19:
cb:ee:a6:b9:70:e8:ce:62:9e:9d:a4:f3:8f:84:f3:
c9:d5:73:ad:c8:64:f9:38:f5:15:26:4a:1f:65:53:
9f:83:5f:d3:41:f9:b5:9b:cb:b8:6b:d4:cf:75:f9:
99:c4:aa:e4:aa:de:a4:38:b3:61:6b:da:19:0d:46:
7e:3f:fb:49:9a:bf:49:19:83:3b:07:13:a9:d6:2f:
f0:5a:05:a9:59:e2:7e:90:43:83:2f:08:4a:bc:b9:
07:0d:84:a8:81:01:f9:67:22:82:64:0f:8b:c9:81:
11:6c:96:cd:6b:6b:47:78:11:2c:c0:5c:fa:17:6e:
1d:33:ef:55:c6:54:10:78:bf:d1:50:d3:16:78:66:
d2:f7:46:e8:1e:41:05:d6:3d:a1:97:5d:95:13:42:
1e:70:32:08:a0:63:19:d9:9b:56:c5:12:14:0a:2f:
c6:de:27:80:01:97:c8:67:ed:38:30:e5:aa:83:1b:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9A:8A:E7:BC:21:BD:0F:40:46:E1:76:E0:BF:BD:AB:C4:89:41:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/8588dd05-14e8-33b4-a6f8-816574d0424a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
X509v3 Authority Key Identifier:
keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.62.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:e1:6c:49:37:84:e2:de:eb:f1:0b:b5:6f:df:46:a9:d1:4c:
39:98:2d:7c:4a:60:1a:55:4d:87:50:ce:40:c0:35:e0:f3:60:
bc:eb:a9:e0:df:e7:4d:c9:6b:63:04:d3:ca:f6:5f:fb:fd:df:
b8:b8:7d:6d:63:b8:24:77:d5:1e:5f:be:4c:70:66:63:18:90:
ab:5f:4b:5a:cf:62:34:f8:97:54:6a:ee:66:b7:70:a3:e0:26:
03:84:e6:0c:64:6f:8b:b3:0a:7e:c0:59:8e:54:c3:0f:52:cb:
a4:75:dd:7c:0e:b2:5d:93:dc:9c:ee:64:ed:63:ae:b4:1b:81:
d6:b0:42:5b:3e:b2:66:18:f4:4f:4b:9f:ec:13:ce:74:6f:5f:
09:50:94:19:19:8b:ff:a3:a3:51:65:ac:da:ea:ae:f1:41:9b:
78:36:c0:17:14:24:84:c0:09:86:69:c4:3d:a8:35:96:45:19:
05:ff:b1:4b:1e:b1:9a:db:51:9e:54:fc:83:d3:f5:25:cb:22:
b9:bc:f9:aa:f3:26:eb:22:81:34:b6:b4:c0:f4:87:dc:ea:61:
78:2a:6f:32:39:92:46:92:fe:af:81:9e:9d:11:34:c4:39:8d:
59:ea:0b:c3:05:1a:bc:9c:af:5c:25:eb:38:4d:a3:d1:f8:53:
42:37:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:25 2025 by rpki-client