Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/10137ed7-1fe9-344b-a4f1-201ef5144bff.roa
File: 10137ed7-1fe9-344b-a4f1-201ef5144bff.roa (raw, json)
Hash identifier: Q9oXzIr1PT676F0mSBnH4vvrzm8vxejt1MsSVMGkO0w=
Subject key identifier: 5B:DD:E3:F3:C4:58:50:9E:96:F3:7D:24:CC:1F:42:8E:3B:D1:F0:0A
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F432858488011638657E325D15AEF4B80
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/10137ed7-1fe9-344b-a4f1-201ef5144bff.roa
Signing time: Fri 10 Jan 2025 17:05:24 +0000
ROA not before: Fri 10 Jan 2025 17:05:24 +0000
ROA not after: Thu 10 Apr 2025 16:05:24 +0000
asID: 400597
IP address blocks: 217.149.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:11:63:86:57:e3:25:d1:5a:ef:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Jan 10 17:05:24 2025 GMT
Not After : Apr 10 16:05:24 2025 GMT
Subject: CN=84ce2820-507a-4d85-9350-8e3c7db025a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6c:7f:7a:38:af:17:f9:c1:fb:db:27:05:39:
a2:70:74:a6:0e:3e:55:9e:c1:eb:b1:fd:1f:93:3b:
26:c1:3e:cf:11:7e:7f:3f:fb:e2:51:b1:2d:06:88:
7e:28:98:95:cb:a6:a4:60:ca:57:95:43:82:51:71:
1b:f3:f7:66:c7:18:f6:f1:ec:ba:28:02:43:8a:da:
ea:e4:a0:3d:5e:8b:25:20:a8:e9:66:70:fd:41:ce:
a2:01:9a:0f:74:01:a6:af:e5:0d:fa:a2:34:51:3e:
e0:c1:83:1b:40:f6:3c:b1:c8:d4:70:df:23:dc:78:
2c:58:e6:80:31:f7:17:79:18:87:e3:20:29:1d:d3:
03:96:bc:65:5f:b3:67:e5:61:da:0f:56:96:ab:22:
7b:e0:d1:27:c6:6f:1c:a8:46:53:c9:df:bd:79:de:
34:a4:e3:64:8e:2c:33:8f:ce:bf:e6:72:40:e3:ab:
a1:85:25:90:f4:e1:e3:a5:d7:cd:74:a6:70:03:93:
3d:a4:2e:8a:d3:86:47:0a:a8:22:61:96:29:9f:51:
50:4b:68:e1:fd:56:79:11:10:60:92:d8:c8:8a:89:
0c:0d:56:f9:15:f9:ad:29:f1:ce:a5:2a:91:ea:62:
a3:b1:2c:b5:0d:52:b3:25:37:16:c1:8a:02:e8:3e:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DD:E3:F3:C4:58:50:9E:96:F3:7D:24:CC:1F:42:8E:3B:D1:F0:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/10137ed7-1fe9-344b-a4f1-201ef5144bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv4:
217.149.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:f5:63:20:d4:b3:ab:06:6c:c3:b1:2a:41:f4:ad:69:71:6f:
fd:8e:3f:ab:58:15:f5:b4:9a:11:17:03:06:a0:93:ed:e2:3f:
e5:6e:41:5c:94:4f:ee:4a:f0:84:64:68:3c:67:58:52:f6:0f:
90:df:a2:f6:d4:f0:f0:01:09:5f:c0:32:eb:92:c2:5c:35:bb:
92:a8:07:41:e2:d3:fe:ec:36:b5:75:2e:e6:11:d6:15:a0:0b:
42:4d:64:a4:ba:59:41:ca:ef:f8:86:d6:24:10:f9:43:61:4a:
f8:5c:6a:9f:48:95:2f:7c:26:f2:04:8d:44:b6:50:15:91:b0:
4d:86:a8:b7:28:99:83:e6:4f:bd:6e:b1:14:be:3b:98:f3:8d:
bc:1b:07:39:d0:6b:d6:73:5c:36:98:b1:3e:a5:a1:fd:57:e8:
e9:30:a0:01:5e:4a:2d:17:ff:72:9b:bc:f5:44:21:16:30:f1:
72:43:f7:90:c5:ef:46:ae:1f:31:45:eb:b2:48:03:4a:a0:71:
63:82:6b:39:32:f7:c8:96:78:3d:1a:05:82:db:28:3c:be:93:
87:62:69:a6:ba:b2:24:27:6d:6d:14:f7:05:c0:d1:e6:72:a2:
f8:4b:c1:61:de:8a:3b:d1:5a:26:7b:a3:de:00:ad:b3:22:8f:
cc:78:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:09 2025 by rpki-client