Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aff44c68-642e-3718-97bc-775306b03604.roa
File: aff44c68-642e-3718-97bc-775306b03604.roa (raw, json)
Hash identifier: SvMxJmPMecaG/WpSADDZxTOYbv54t6pcZFcwF6K6EJ4=
Subject key identifier: 03:07:60:3D:1A:A1:8A:9A:AA:7F:6F:41:77:01:82:74:79:F8:7E:35
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E06F17411B006138FA69C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aff44c68-642e-3718-97bc-775306b03604.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 40.142.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:6f:17:41:1b:00:61:38:fa:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=eafa4921-19c8-4970-8554-4350de3e4012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:b6:3e:c9:cd:79:2d:7a:7b:40:1e:d6:ec:
05:f1:61:91:c7:d3:db:5d:b5:a8:fd:1b:1c:01:bb:
8a:0f:69:a9:98:2a:a8:20:70:b3:cf:b2:59:ac:0a:
57:e8:cf:14:b0:16:d1:9b:91:c6:45:87:b2:8f:5f:
37:26:b8:04:49:0d:be:81:16:78:76:e7:db:14:60:
d7:20:d6:a8:42:31:2e:04:ec:cf:24:f0:78:f8:d6:
0b:0d:34:0f:b2:b7:6b:6f:bc:bc:68:a6:40:29:80:
b7:42:3b:c0:ac:6d:2e:d9:87:79:91:26:b0:10:df:
27:59:99:e1:67:4d:a8:8d:61:ce:92:f7:ff:67:32:
3f:5c:d4:a8:63:fe:c3:46:48:3f:cf:13:7d:90:bf:
03:34:96:36:4b:36:20:1a:4d:c4:81:c7:74:09:49:
49:02:e3:d7:75:4d:64:d4:11:6d:7a:ef:30:7b:5c:
78:0d:53:c2:d9:2a:50:df:74:af:8e:dd:32:43:1d:
5c:93:93:ce:cf:d4:c3:de:d0:c2:3c:47:89:82:6d:
9d:f1:d9:66:71:08:c6:74:ed:df:dd:78:22:a9:df:
50:e8:f0:e7:0a:b9:dd:1e:5c:f7:04:db:ec:42:3c:
5d:8f:e8:54:95:94:73:43:e7:cb:29:63:3f:fd:5d:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:07:60:3D:1A:A1:8A:9A:AA:7F:6F:41:77:01:82:74:79:F8:7E:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aff44c68-642e-3718-97bc-775306b03604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b3:63:7f:8b:c5:8a:25:c9:ab:25:d7:fe:96:e8:ca:b1:04:
a7:65:60:11:9f:e8:00:ad:ea:68:29:b9:a0:07:fd:5b:f4:10:
8a:d8:4e:48:92:7d:f9:bc:50:80:46:e6:21:f2:56:7c:93:f6:
db:ea:8b:7d:69:f2:77:52:64:fd:1d:66:83:29:bc:b3:f0:fa:
e5:0f:1c:10:ff:c7:3d:d9:9e:0c:bd:90:56:21:65:14:5f:3b:
83:a2:b2:0f:c0:7c:2f:a1:9a:76:7d:3a:b3:87:af:e4:1c:ea:
c8:b0:bf:49:c4:5d:e3:86:6d:6f:03:0d:09:95:82:53:ef:34:
43:65:a9:6a:b6:a4:bf:71:31:0a:61:e8:c3:40:c7:38:86:8d:
86:b3:28:3a:ff:e6:32:67:67:c9:a7:b5:4a:f4:b4:9d:5f:9f:
4d:94:71:4a:f8:08:7f:58:f3:21:59:a5:70:ee:47:a8:d2:92:
42:93:58:fe:11:f1:7a:6f:2d:69:c1:2d:cf:62:df:b4:23:81:
c4:e3:67:2e:af:b8:27:08:f3:cd:02:77:48:7f:cb:2b:7a:7b:
42:82:3c:d8:e8:e0:d7:6a:5a:08:3e:30:20:9b:8a:17:b7:58:
79:f3:b8:c9:4f:f7:bc:af:b0:e9:af:16:52:39:f1:d3:8f:83:
e3:bc:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:06 2025 by rpki-client