Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d760404-01b8-3781-8e1a-f204b628e7e0.roa
File: 5d760404-01b8-3781-8e1a-f204b628e7e0.roa (raw, json)
Hash identifier: B7ZKxxhbPDe+qM2dto16DlnCNjghq7GUT0Zhz0Ggst0=
Subject key identifier: BF:ED:6A:06:7C:42:6F:80:0E:3C:9F:57:B6:12:5F:73:ED:21:95:D7
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285847BCB0E0E8A917C95864DFAF00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d760404-01b8-3781-8e1a-f204b628e7e0.roa
Signing time: Fri 01 Nov 2024 17:28:18 +0000
ROA not before: Fri 01 Nov 2024 17:28:18 +0000
ROA not after: Thu 30 Jan 2025 18:28:18 +0000
asID: 11798
IP address blocks: 136.0.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:bc:b0:e0:e8:a9:17:c9:58:64:df:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Nov 1 17:28:18 2024 GMT
Not After : Jan 30 18:28:18 2025 GMT
Subject: CN=2ef7260f-68ba-4635-93e7-d111a8f9c3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:87:91:42:9e:b3:b3:97:24:5a:82:1f:4d:
88:50:27:ac:5e:8d:d2:11:a1:df:78:88:4a:6b:74:
57:21:00:41:27:83:fb:31:4b:f6:42:55:ce:19:29:
64:43:58:c3:d2:49:0b:35:7c:cf:b7:f3:7a:b8:fa:
6c:b1:a2:6a:97:5f:e3:55:06:3a:93:e0:91:fa:c2:
d5:f8:fa:8c:da:b2:b0:9d:6f:7d:6b:48:5c:ed:49:
7b:36:99:1a:cb:c6:90:67:9a:ed:6f:cc:34:16:ad:
f9:70:e7:d9:39:d9:37:3d:36:58:64:47:e5:0b:c7:
2b:9d:85:a2:45:eb:d4:9b:e9:89:6a:e3:0c:5d:cc:
b8:a3:38:28:f2:8e:f7:9a:31:c0:62:7f:e2:25:fc:
04:94:7c:c3:21:45:7a:29:7c:4d:d3:89:7c:0c:37:
05:fb:67:94:de:4b:9b:1d:81:9c:af:0e:c2:28:b8:
31:2a:ac:93:b7:4f:bf:08:5e:ea:99:f9:ef:d0:25:
9e:99:ab:3e:a9:90:83:e5:a6:26:22:d5:5f:35:1a:
68:43:ac:80:9f:60:c5:f5:a0:ab:ea:0b:d7:4f:44:
f8:27:dc:f4:f4:7b:25:6a:1d:c7:e5:85:90:9e:71:
3c:62:5b:4f:6d:4b:22:fc:01:48:28:b1:ee:43:bf:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:ED:6A:06:7C:42:6F:80:0E:3C:9F:57:B6:12:5F:73:ED:21:95:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d760404-01b8-3781-8e1a-f204b628e7e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:4a:3e:98:40:bd:3d:26:99:71:61:2b:c5:49:b7:59:2f:1c:
56:0c:88:b5:46:20:c0:fb:fa:a3:e7:f6:e3:88:c8:11:74:f0:
f9:e5:fa:7f:26:b0:5b:ff:ef:e9:88:d6:0b:ae:c0:85:17:bd:
cf:f0:c4:7f:6b:a6:36:ef:45:98:33:c1:ae:2a:d6:85:60:79:
aa:b7:21:97:b6:77:bd:1a:94:b6:d8:6d:3e:98:d8:42:6b:f5:
d0:67:c3:d4:fb:b7:1f:a3:03:49:f3:ba:18:8b:28:14:08:f2:
70:80:73:dd:6f:de:64:c9:e7:01:a5:e9:7b:5c:3f:de:37:e9:
2f:b6:22:9f:9e:a5:f3:12:d8:ae:02:6c:8d:a5:a8:cc:47:07:
74:da:5f:3e:c1:54:e4:1e:59:7d:98:68:14:1b:3d:2f:62:67:
1a:c4:05:a0:05:e9:26:4e:48:2d:cf:c1:60:7c:f3:9b:f4:0c:
cf:d5:80:ad:87:88:27:b9:0c:ad:c6:bb:19:8a:17:3d:05:02:
18:e2:fc:93:f8:b3:c2:a5:1a:8d:65:96:dc:e7:bb:bd:07:78:
fc:b7:3e:76:fb:81:c2:f8:19:53:eb:03:e6:76:35:df:e2:74:
1b:99:29:38:1e:9b:53:fc:c3:01:82:c8:f9:92:2f:91:05:ed:
2b:b0:2c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:19 2025 by rpki-client