Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/31daf05e-9a1a-325a-8442-ca2d89dc5db3.roa
File: 31daf05e-9a1a-325a-8442-ca2d89dc5db3.roa (raw, json)
Hash identifier: dABCt082C/fb8YpJ2eBWn+yrQiNIJ+16IMt3vKCL1cQ=
Subject key identifier: 66:57:1B:84:5D:32:EA:9E:FB:CC:19:7C:3F:C5:EE:8A:51:B3:A3:56
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328583CB631FC89AF04DCCF66EC39D8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/31daf05e-9a1a-325a-8442-ca2d89dc5db3.roa
Signing time: Tue 10 Apr 2018 04:00:00 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Mon 29 Apr 2024 04:00:00 +0000
asID: 1225
IP address blocks: 129.250.38.192/27 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b6:31:fc:89:af:04:dc:cf:66:ec:39:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Apr 29 04:00:00 2024 GMT
Subject: CN=48d73fd7-1b6b-45f8-882d-74aa1a205ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:af:d7:08:e2:ea:61:34:46:85:d5:d0:ad:
b8:f4:92:b8:26:fd:c5:22:b8:53:ab:fd:c5:d4:d2:
e7:88:d1:ec:da:66:ac:e7:3b:eb:37:78:c1:eb:ab:
fa:e1:e7:43:fd:57:3c:36:59:c0:bf:58:0c:c8:b4:
13:0a:1b:bb:75:d1:f0:44:72:44:84:52:3c:32:45:
93:54:b8:2c:7a:f6:0c:51:1d:b9:65:61:a7:51:8c:
a8:62:13:a2:bb:77:0e:8c:c7:9c:9a:6c:2e:7f:eb:
54:eb:5d:9b:e5:4f:ea:74:01:7a:48:a7:5c:a0:09:
d5:16:77:54:78:ba:af:69:00:93:79:59:5e:4e:30:
25:2b:c3:76:d9:2e:e3:77:b5:43:ba:57:85:88:de:
7e:f5:8f:b3:6a:0d:5f:6e:5c:0e:0b:69:b9:5e:1a:
9d:b9:a2:00:cd:a2:36:f7:ad:8f:0d:df:46:c2:c9:
f8:70:fd:5e:41:7e:8f:a0:d7:b3:bc:b6:fa:ad:6d:
be:80:9a:0e:0a:5e:15:da:9b:f8:bd:9a:dd:5c:ef:
3a:fe:db:6d:66:f6:de:ce:ef:c6:fc:ce:ca:d3:cf:
b1:d6:65:72:60:0b:fc:b7:04:00:06:33:bc:b9:de:
e9:39:51:0d:0c:24:c0:0d:0d:8d:68:9c:6c:34:d6:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:57:1B:84:5D:32:EA:9E:FB:CC:19:7C:3F:C5:EE:8A:51:B3:A3:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/31daf05e-9a1a-325a-8442-ca2d89dc5db3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
129.250.38.192/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:48:91:8c:6f:6c:e1:fc:d8:ca:2d:3a:4e:f2:8e:ff:c5:98:
05:fc:ae:24:a5:ae:62:ae:25:1d:72:7f:ac:35:a7:33:69:00:
cc:7d:c2:cf:de:a2:ae:ec:32:a6:d1:34:0f:7c:b1:43:0b:8e:
87:29:2c:c9:40:a1:65:0e:eb:85:89:a3:8a:a7:ec:82:aa:e8:
2b:9e:a1:4a:c7:6e:16:47:92:f0:bc:16:7b:70:a2:a6:d5:2e:
f0:45:9b:66:32:00:80:15:b2:18:72:82:25:0c:1c:17:2a:46:
8d:0a:6e:c1:f1:ad:e5:c5:8b:df:61:7b:8e:d2:ea:d8:ab:7c:
8f:35:51:84:93:5b:6d:6a:dd:91:e4:9f:e2:f6:36:73:dd:0e:
25:aa:80:96:7c:f1:04:a6:c3:a9:ad:80:c7:24:7c:c5:59:7b:
4f:3e:42:4d:bc:ae:b1:b9:f5:aa:98:8a:0d:2b:77:ef:35:46:
e0:dc:e9:7d:ba:26:14:39:2e:62:23:e1:33:35:f1:d7:88:23:
c0:93:02:39:75:bd:2e:17:3a:cf:fc:fd:3a:da:e6:22:a0:dd:
5c:aa:bb:1e:ff:8b:22:25:74:da:1c:34:d3:0b:79:55:de:f2:
41:3e:80:c1:d2:de:53:b6:79:68:ae:96:44:36:51:77:1c:de:
95:4b:21:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:58 2025 by rpki-client