Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2495f416-d874-373a-af3e-03955190119f.roa
File: 2495f416-d874-373a-af3e-03955190119f.roa (raw, json)
Hash identifier: GxlmUUxhnLAMwgZmVrU6vyaTTCK6Br4HOaSBo2s9vKA=
Subject key identifier: D9:4E:89:6D:C3:E1:78:FD:F7:60:86:05:23:56:E0:A4:B9:0E:1E:E0
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F432858471AA36937CFDEA46DD31FC7E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2495f416-d874-373a-af3e-03955190119f.roa
Signing time: Wed 04 Sep 2024 16:20:13 +0000
ROA not before: Wed 04 Sep 2024 16:20:13 +0000
ROA not after: Tue 03 Dec 2024 17:20:13 +0000
asID: 11798
IP address blocks: 136.0.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1a:a3:69:37:cf:de:a4:6d:d3:1f:c7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Sep 4 16:20:13 2024 GMT
Not After : Dec 3 17:20:13 2024 GMT
Subject: CN=29742e9f-3476-4c62-abf7-8cabb1bdf170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:b5:7b:d0:f9:6f:12:34:17:8b:52:9f:28:
81:4a:72:8f:2f:88:8a:26:d4:f2:6e:e0:7d:0e:66:
dc:76:f8:16:a0:b1:75:e8:6c:37:78:96:44:d3:74:
8e:54:7d:33:cb:e4:c1:0a:64:3c:75:1b:a3:fa:89:
26:d1:94:df:07:33:ae:52:6e:34:1e:da:7b:4c:95:
49:3a:f8:c8:da:a7:55:5f:91:a2:ca:de:40:11:90:
12:b7:36:d0:41:08:bc:8d:9e:7d:5a:55:a5:34:3d:
cf:3b:07:d2:6a:9f:c1:e9:e9:ec:06:ec:c2:b2:b4:
46:6c:fd:f1:37:d7:86:68:96:18:3c:aa:9e:2a:c6:
ac:5f:d7:ee:87:9e:a1:ad:1d:80:78:b2:fc:0b:39:
4c:0a:36:fe:fa:91:0d:3e:12:d0:51:3e:20:34:da:
fe:5a:c2:4e:e7:0d:51:34:04:13:4a:40:15:a2:09:
13:a4:25:92:dd:4b:b7:1a:51:2b:87:c9:ec:29:b1:
7c:06:df:53:1c:e4:f7:87:af:35:ad:af:8e:c7:78:
d9:8a:2c:9b:4a:ce:48:a4:7b:67:c0:f7:0b:88:7b:
1f:3c:b4:fa:ac:ce:e7:69:33:fc:bc:d1:e3:eb:1f:
71:15:c9:77:44:08:86:c0:07:58:b7:ba:72:6a:4d:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:89:6D:C3:E1:78:FD:F7:60:86:05:23:56:E0:A4:B9:0E:1E:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2495f416-d874-373a-af3e-03955190119f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:12:4d:7b:ee:01:77:b8:aa:87:a4:4a:a3:34:a8:87:fb:c5:
b3:bd:93:cd:e3:c0:05:32:c3:8e:37:c3:83:1e:84:e9:dd:36:
42:af:68:f2:4d:61:9a:8b:1e:6f:15:ae:b5:4e:fa:71:5f:78:
9e:2f:28:01:5e:66:f8:66:27:f6:c9:53:07:6c:91:53:48:6d:
31:03:b8:fb:e1:02:d3:a7:60:a3:1f:15:5a:c8:65:10:6e:91:
ff:9f:5a:30:7c:87:68:f4:33:64:a5:a2:5a:e0:17:07:e7:34:
42:1a:9a:6c:cd:1a:cb:0d:2e:cc:44:ff:37:84:20:a2:39:00:
bb:00:1b:fd:a1:3a:a3:82:0d:4f:f2:39:00:62:63:9e:28:ee:
dd:56:d6:21:90:36:90:dc:98:c4:f5:9e:6f:20:03:0b:86:d5:
99:f1:20:cf:e5:05:ce:59:71:2a:a4:50:dd:16:b0:92:f1:96:
c3:69:8f:e4:f1:5d:de:26:fe:7c:02:b5:67:07:f0:d8:6f:4e:
2b:21:49:94:d2:40:5d:82:3d:b6:24:37:63:b1:13:e5:c8:c1:
00:83:d3:73:88:f8:2c:cd:81:3e:ef:07:a4:26:c9:89:3b:77:
1d:e9:7a:7e:ec:61:e0:c9:c7:86:d2:d7:c1:5a:a4:3f:40:ea:
80:f6:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:24 2025 by rpki-client