Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/823bb9a5-1564-39f3-a3bb-7ad4cd26a8d8.roa
File: 823bb9a5-1564-39f3-a3bb-7ad4cd26a8d8.roa (raw, json)
Hash identifier: aGmhgQ9l1naq9ldfgvK6NGcOJA6DVG2/ay3MiSDrthI=
Subject key identifier: 62:C9:E7:8F:EA:24:2A:3B:6F:5A:74:DE:EB:1B:70:D6:50:8A:59:0E
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285846E00E519F94FFE3D3D949B100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/823bb9a5-1564-39f3-a3bb-7ad4cd26a8d8.roa
Signing time: Wed 14 Aug 2024 16:42:56 +0000
ROA not before: Wed 14 Aug 2024 16:42:56 +0000
ROA not after: Tue 12 Nov 2024 17:42:56 +0000
asID: 7018
IP address blocks: 142.111.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e0:0e:51:9f:94:ff:e3:d3:d9:49:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Aug 14 16:42:56 2024 GMT
Not After : Nov 12 17:42:56 2024 GMT
Subject: CN=bee8877f-e085-4e6b-b953-03bcbdd0205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:35:d1:f4:b0:1b:0e:28:1b:99:ff:ce:e5:
71:bf:a2:e8:9a:fb:54:75:ab:98:36:6f:d3:64:59:
00:bd:c6:ac:5e:b9:7c:8a:70:44:5d:68:39:e0:b4:
23:b7:ad:5c:ba:fc:ef:5a:5b:40:ac:ff:47:02:92:
2c:99:ff:a9:65:e5:2f:96:b3:ad:9a:2e:8d:ac:2b:
e3:98:90:0f:a5:da:7f:09:f1:1d:dc:35:41:0b:88:
ac:3d:39:2d:d8:a2:69:07:f0:05:f7:eb:c5:a3:20:
b5:f4:11:d0:b3:71:e2:0e:58:bc:6b:f7:57:28:74:
85:e2:97:a9:fb:a9:02:3e:76:c8:ae:88:07:2d:82:
fb:e2:ed:f1:de:4a:01:cf:54:56:72:0b:5b:10:bd:
5e:3c:eb:fb:31:bd:b0:17:f9:4a:26:5e:61:d3:c2:
c3:df:ac:ea:77:f9:b5:6e:45:2c:68:61:d5:a6:71:
ed:99:f2:9d:1c:f3:5d:55:64:1c:dc:2a:ed:21:e0:
b5:47:3a:19:55:df:d7:b8:d1:ae:16:b3:ff:b6:65:
be:25:04:4f:f6:27:51:7e:99:15:17:e5:d1:2e:d0:
07:0f:c7:fe:50:48:fc:b2:23:95:e6:d7:0f:b1:ad:
21:3f:b8:b7:e5:a1:9e:9e:c1:3e:a5:32:f4:51:a1:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C9:E7:8F:EA:24:2A:3B:6F:5A:74:DE:EB:1B:70:D6:50:8A:59:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/823bb9a5-1564-39f3-a3bb-7ad4cd26a8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:01:23:67:13:41:0e:ed:3f:43:db:d7:5e:d2:a6:44:6d:63:
0b:51:81:a1:3b:71:4d:3b:61:ca:3a:57:5b:5d:38:7a:cb:07:
4c:40:77:65:4b:b2:75:ee:5c:13:18:9b:a8:20:ea:38:10:95:
50:3b:f7:15:d3:54:2f:e7:0c:cc:ce:9d:f5:1a:0f:60:ec:fa:
33:fc:de:dd:1c:91:35:be:9d:05:e2:ef:21:86:c6:56:c6:3d:
bc:c1:e8:fc:6e:0a:ed:6a:b9:6d:6f:08:96:8a:e0:4e:55:98:
1a:a2:63:d5:f1:d1:26:83:ad:59:69:f5:b5:ed:b7:d5:75:53:
78:7d:96:87:83:10:8c:fd:b3:37:7d:82:38:7e:32:23:30:71:
9b:af:e7:00:3b:07:9b:2c:6c:ae:9f:96:d3:b2:f6:7e:36:4c:
ed:aa:1b:6e:49:7d:45:fd:46:5a:3d:27:57:04:57:87:ef:1a:
09:f3:9d:e6:1b:3a:ca:43:ee:fa:e1:1c:a0:9a:a4:37:a7:ce:
09:49:ed:9b:57:06:8a:ef:ec:dc:59:fa:dd:f9:14:66:ad:35:
6c:d8:24:27:fd:08:d5:c2:a2:b6:bb:42:1d:ff:c3:1a:a9:8d:
ed:cd:40:74:79:9b:43:4c:bb:fa:20:87:5b:0b:12:e7:ea:38:
ea:3b:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:12 2025 by rpki-client