Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/89c750b8-358b-315c-b0ea-c18e6faf62f1.roa
File: 89c750b8-358b-315c-b0ea-c18e6faf62f1.roa (raw, json)
Hash identifier: DzMWZDjR4coKWpn08XfWpQ0MmpZ9ge6Mq8QIg+xGJUI=
Subject key identifier: 30:04:10:8E:11:EC:DD:89:6C:8C:33:AE:63:2F:F5:B7:6C:48:84:E4
Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial: 010D0C9F4328583D8EC43D26C1975C2EB887AF10
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/89c750b8-358b-315c-b0ea-c18e6faf62f1.roa
Signing time: Thu 08 Oct 2020 04:00:00 +0000
ROA not before: Thu 08 Oct 2020 04:00:00 +0000
ROA not after: Tue 16 Jul 2024 04:00:00 +0000
asID: 1239
IP address blocks: 163.123.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8e:c4:3d:26:c1:97:5c:2e:b8:87:af:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Validity
Not Before: Oct 8 04:00:00 2020 GMT
Not After : Jul 16 04:00:00 2024 GMT
Subject: CN=d682d911-fe8b-4cec-a551-10c8323c89de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:4e:c5:13:52:19:8c:09:d7:32:88:82:7e:
3d:e9:68:ae:27:47:ab:1a:1b:0b:2e:95:cd:94:35:
1f:79:b4:c2:b4:72:e8:07:7f:6f:97:bd:39:41:19:
08:f5:96:fd:83:47:08:db:24:fc:76:93:2f:40:51:
52:ba:b6:86:85:af:a7:b1:87:f5:ff:55:c7:19:04:
6c:d5:ca:fa:3d:ff:45:39:58:42:b7:d3:c3:5a:82:
fd:ea:33:de:ac:e4:b4:11:80:79:5a:23:0d:15:1e:
05:35:bf:d4:64:6a:b1:67:02:42:06:e3:4f:d2:be:
6e:27:8b:81:a6:96:a5:e2:f1:b7:49:df:42:ba:80:
db:71:90:90:43:e8:fe:d4:de:29:f4:79:d2:79:b9:
82:cc:ce:d0:c8:4c:dd:ad:61:2d:55:db:4f:b6:a4:
0c:d4:19:b8:05:95:9c:bb:70:ef:25:ce:cd:d2:c6:
c9:98:7f:d8:0b:41:5d:19:7c:62:df:8f:ea:a7:ca:
79:0e:0f:04:ec:1d:df:b1:6d:89:a1:64:97:45:2f:
ae:e4:b8:9d:58:a3:bf:d7:07:c2:1b:6f:e4:f7:c2:
99:3b:4a:f6:52:04:13:bd:bb:1a:3c:3c:99:ad:92:
40:00:ea:f2:9f:2b:d3:9f:85:89:74:a1:18:a1:17:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:04:10:8E:11:EC:DD:89:6C:8C:33:AE:63:2F:F5:B7:6C:48:84:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/89c750b8-358b-315c-b0ea-c18e6faf62f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
X509v3 Authority Key Identifier:
keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:16:48:dd:d1:24:1a:ea:fd:29:a5:4b:f0:a1:dd:f1:c8:f9:
a2:34:46:db:eb:89:de:75:68:13:bd:ec:c3:00:0b:9a:54:54:
ba:d4:0a:31:e4:c3:77:7d:39:62:34:86:be:70:6e:ed:c1:80:
c5:ec:5e:16:8a:45:1c:4f:12:a3:23:ce:38:f8:bc:f3:42:e8:
ba:68:29:6e:aa:e0:5f:24:ad:8a:eb:c9:63:39:31:d4:6a:3b:
99:2e:ca:de:8a:30:75:3b:18:fa:66:1a:52:51:d5:ad:1a:7a:
f0:a8:61:46:e7:e9:8b:4e:b5:94:f9:7f:30:7c:38:db:19:71:
60:fe:24:b5:0f:b9:eb:02:4c:4b:5b:a3:da:83:4a:c3:ad:74:
3e:68:6c:01:6c:48:73:4b:24:21:d0:f2:a7:d4:0d:9c:1f:f8:
57:f1:98:27:73:de:cd:55:ff:e2:a2:f0:a8:ed:cc:03:9e:e1:
42:eb:fd:73:08:27:b7:e9:60:9a:96:ba:d6:66:02:46:3d:89:
a5:c5:4c:cf:09:a0:71:49:8c:3c:5f:cc:73:c1:ff:96:62:6e:
a8:16:4b:59:a0:0e:1e:11:d7:a7:19:a3:c4:4e:23:67:a0:fa:
64:e6:7e:57:e4:5e:07:ba:81:dd:5f:b9:0b:a0:cb:59:e2:79:
ee:56:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:31:21 2025 by rpki-client