Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5d441ee6-7512-37b0-b57a-9ca8e84da6bf.roa
File: 5d441ee6-7512-37b0-b57a-9ca8e84da6bf.roa (raw, json)
Hash identifier: ZKm1/vbFFnci9oP25fNp2wyKFylvbv5mVg7azUSqoE8=
Subject key identifier: 7D:11:FF:9D:0D:89:61:51:40:4A:3B:A6:F3:9B:88:6D:3A:7F:BE:DB
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F432858487CEB22F8F3E30CE9F7FC5E00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5d441ee6-7512-37b0-b57a-9ca8e84da6bf.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 130.41.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:22:f8:f3:e3:0c:e9:f7:fc:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=7071b2b4-065e-4979-abeb-32f79968fe5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:40:ea:a6:8f:17:16:82:63:43:04:c9:b3:
46:be:4a:2e:d3:28:f0:53:e8:d4:14:b7:7f:36:8e:
c6:75:2c:55:c9:3c:11:25:3c:46:01:94:99:27:cc:
50:7e:85:8d:85:46:4d:90:e8:ff:61:2e:69:47:23:
98:68:e0:25:6f:0c:65:42:7e:c4:17:52:22:7f:90:
51:c1:8a:f3:c9:a0:ea:45:c9:a6:d1:d8:07:f2:9a:
a4:b3:f8:12:fb:fe:4a:a4:ab:a9:b0:f1:4d:35:f4:
e7:01:b4:01:b3:21:a0:7d:05:b1:11:ad:f6:1e:d8:
23:fe:69:8f:3c:dc:c0:da:a6:a5:47:e1:c2:af:d7:
b0:61:8a:8a:99:a0:ed:f4:b1:15:15:e7:3b:61:ac:
01:81:ad:09:ac:65:ad:20:41:73:1f:e1:fd:c1:16:
37:d1:bf:56:ae:f1:35:6a:4c:e1:b8:42:44:62:97:
92:06:58:0c:34:31:8f:f6:8e:8e:91:ed:ec:f2:20:
fb:86:63:82:ce:cd:bd:4d:9a:6b:28:09:56:8f:08:
3f:ee:61:ce:eb:27:b3:02:f9:aa:e6:1c:f7:7b:aa:
7d:10:08:27:de:bb:fc:0d:14:22:a3:59:61:f2:50:
56:08:56:a2:ba:a6:1a:04:e0:96:c2:be:5b:d2:94:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:11:FF:9D:0D:89:61:51:40:4A:3B:A6:F3:9B:88:6D:3A:7F:BE:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5d441ee6-7512-37b0-b57a-9ca8e84da6bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
130.41.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d4:d1:fa:16:bf:c8:89:43:c1:f6:8a:9b:5d:8c:8a:e6:47:
46:34:d6:58:2c:98:f8:0f:b7:12:1e:f6:90:28:93:24:cb:19:
df:61:df:53:7f:d4:a7:4d:38:14:08:08:6b:f7:7a:85:fa:5b:
08:ba:4b:fc:ab:32:35:18:74:ae:01:70:bb:8c:fa:81:99:4c:
19:06:f9:e6:c7:01:a3:eb:0f:3c:56:44:50:c3:0b:e1:a8:18:
0e:45:74:4f:03:83:2b:9c:7e:9d:e3:16:3e:f5:93:01:0a:85:
f8:60:64:13:dd:d3:27:f2:26:53:45:db:f9:eb:d7:61:68:b3:
d1:c7:eb:c0:9b:e6:d1:2a:d1:df:2e:53:9d:02:83:5a:ea:6e:
b6:c5:5b:09:6f:9d:49:e8:6f:8b:05:ae:d1:52:b7:b8:de:b5:
03:5a:b6:b8:cd:bb:62:4d:a9:51:cd:80:ac:9a:df:b0:34:2a:
ab:39:d1:16:29:21:38:70:4f:1f:a1:3d:2c:18:4a:05:74:9d:
16:3e:56:82:0c:9d:0f:d4:e6:42:14:07:14:5b:ad:5b:40:80:
6f:0a:c6:2c:e0:d8:0c:15:3c:77:c4:b4:50:00:30:db:fd:0b:
37:4a:d3:f9:99:dd:7d:38:bf:73:c1:a1:34:1d:76:77:eb:af:
34:09:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:26 2025 by rpki-client