Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5733dc19-69a3-33fa-b3d6-32f5acdbac5b.roa
File: 5733dc19-69a3-33fa-b3d6-32f5acdbac5b.roa (raw, json)
Hash identifier: b8zTXIHBWCsONirntzCRv13wCSNr8p4KiYVXKI/W7rg=
Subject key identifier: 09:FC:C8:96:0D:96:64:6E:29:B0:1B:2D:2B:61:59:7B:48:4F:40:AB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E094EBE166F15DCA345E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5733dc19-69a3-33fa-b3d6-32f5acdbac5b.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 40.142.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:94:eb:e1:66:f1:5d:ca:34:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=1897bcb1-9475-413a-aae3-63654ac232ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:f6:6a:d4:58:66:90:dc:33:bf:ea:7b:f0:
1b:f4:d2:1a:8f:fa:e7:59:c9:64:0e:c8:50:d5:c5:
62:c6:1c:48:cb:a3:64:5c:1c:d6:39:7a:13:f8:b6:
bf:63:34:a1:cf:86:95:22:ed:75:aa:bb:68:b1:9f:
27:9d:74:38:2b:4a:98:de:43:74:a6:23:b9:54:be:
32:af:11:e7:0d:d9:c0:3b:95:97:80:30:90:11:36:
11:6a:22:ce:f5:3c:63:4c:71:9a:0d:8a:92:59:94:
ce:9b:0f:f0:9f:a4:62:f6:d4:92:ab:57:05:0f:23:
b2:b7:30:cd:4e:a4:0f:40:14:31:31:56:13:05:9d:
ff:45:ef:69:1f:e8:b6:94:a6:a7:cb:61:e2:11:23:
20:9c:bf:03:29:6c:7b:35:59:3c:5f:bf:f4:ba:5c:
dd:ac:d2:76:a2:d6:76:57:37:d5:06:86:f4:3e:f3:
f0:e1:4a:cf:23:12:bd:24:38:04:f3:a7:8b:ad:79:
f1:b6:85:df:46:c3:5a:fd:c8:ad:0d:8b:b6:f6:b6:
01:6a:99:5a:34:48:08:af:f2:e4:94:9c:39:99:51:
f1:62:ae:94:b3:c2:44:5d:e5:ce:19:e2:fd:1a:78:
2a:6a:14:36:a9:73:82:6d:76:09:71:40:d8:c3:02:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:C8:96:0D:96:64:6E:29:B0:1B:2D:2B:61:59:7B:48:4F:40:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5733dc19-69a3-33fa-b3d6-32f5acdbac5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:f6:37:55:8f:a9:84:5e:5c:92:64:89:da:f7:1a:4f:7b:3a:
60:29:89:65:78:00:b7:94:66:6d:50:f3:e1:07:d4:35:e4:31:
8a:d0:5b:96:2d:59:c8:bc:e5:97:03:56:e8:64:47:ba:dc:35:
21:69:db:ab:86:76:3a:09:d9:b7:aa:e6:87:22:85:ee:07:ff:
9f:ab:8b:b6:a2:03:27:14:5d:32:f5:bb:f1:86:b4:c6:05:2e:
0e:41:7a:bf:21:0d:b9:ec:65:f1:dc:1c:cc:1d:3a:c6:3b:55:
65:20:21:92:a7:d3:27:20:1e:9b:21:8d:a9:b2:b1:d1:f6:51:
5a:91:a4:1e:37:80:a7:5e:71:59:e3:f5:02:b5:5d:c4:40:57:
79:57:36:18:1d:6b:d5:ab:73:c0:82:b4:6f:df:44:c3:80:29:
cc:bd:5e:e8:9f:19:56:fe:4e:13:43:28:57:65:73:2e:fe:b0:
59:91:cf:dd:c3:5c:aa:1f:a1:bc:96:ef:2f:4b:40:96:ec:2e:
f0:af:b0:8c:bc:f8:95:b9:8e:2a:72:1c:f0:1b:e3:e0:e6:bd:
e5:c8:a9:5b:c7:fb:39:84:5f:dc:82:f2:7a:a6:4c:42:37:38:
15:94:9b:77:31:ae:58:b3:a4:cd:57:77:16:5f:92:a8:b8:4f:
25:23:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:12 2025 by rpki-client