Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b18ec3-ef76-3d32-984e-f4c7f6095da4.roa
File: b4b18ec3-ef76-3d32-984e-f4c7f6095da4.roa (raw, json)
Hash identifier: e/bDaL7am8uNO2IaR77ML9c/3/ag84pvV4V7oeLX/cY=
Subject key identifier: 1A:9D:1C:90:A9:3F:9D:BD:4C:70:63:75:F6:75:0F:F6:6B:5F:1F:94
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155048D8B7162208A1E8AE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b18ec3-ef76-3d32-984e-f4c7f6095da4.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 173.188.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:04:8d:8b:71:62:20:8a:1e:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=5b9b2277-72e9-4080-85c8-4631b6680e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:42:c4:05:bb:14:62:be:35:11:83:da:ff:
e8:63:f9:3c:f1:c7:78:6c:8b:1d:52:e9:e8:3d:81:
16:31:b5:00:6b:cd:6f:11:1a:12:c3:a4:32:87:20:
51:65:2c:ef:c2:c7:79:d0:a0:24:70:56:ae:ad:18:
12:2f:2f:ca:d3:ec:92:17:40:04:ff:b7:71:a9:27:
0f:1b:e5:31:73:af:ca:59:cf:35:7d:da:be:c8:f7:
b3:d5:13:f5:37:31:18:a7:8c:1d:f7:1f:26:a6:b6:
bd:b6:6c:f5:c8:ec:ee:b6:e0:25:90:72:49:04:39:
84:69:7b:78:b8:e4:35:84:06:f0:6a:68:4d:95:ea:
fe:57:6f:5c:c1:05:0f:0f:29:d8:1b:e1:2b:c1:3e:
83:79:1f:a0:cd:b8:6e:fc:5d:3c:40:22:a7:9c:c2:
c3:ee:35:b7:b3:d6:2e:a1:9c:c8:fb:ac:0e:0f:62:
2e:53:52:52:b3:d4:27:65:99:4d:1c:c0:fe:8d:38:
ef:30:bb:2f:a6:8a:1d:4f:b6:bf:be:43:e3:9a:b7:
93:5f:1f:96:38:cd:28:57:97:a0:22:98:f5:9f:7c:
5c:44:c3:68:d3:1c:0a:35:18:d1:fd:95:e5:9d:29:
88:1c:9c:3f:1a:d0:ef:b7:5b:69:a8:f3:ad:6e:5b:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9D:1C:90:A9:3F:9D:BD:4C:70:63:75:F6:75:0F:F6:6B:5F:1F:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b18ec3-ef76-3d32-984e-f4c7f6095da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:4d:bc:8c:68:7d:aa:82:3a:9c:5f:42:a5:31:c9:c0:6e:09:
a9:67:19:5a:d6:e5:b4:1f:30:62:c6:af:eb:cf:1e:44:90:fd:
3d:ae:75:c9:51:69:d9:7e:bc:0e:4c:1e:fc:05:8f:10:35:87:
e2:c9:b3:47:e8:c3:20:b7:f5:9c:df:88:09:e4:67:66:81:c5:
06:23:f5:1c:d0:80:cb:06:50:46:b2:14:97:df:75:37:74:1b:
7b:d7:50:c0:7a:54:50:48:dd:34:b7:5a:bb:aa:de:2c:f0:35:
3b:75:ac:99:f9:66:2f:55:ec:3b:5f:1f:07:40:68:48:1f:f9:
2b:26:06:4c:23:56:2f:cd:e6:ab:f4:08:f9:67:70:13:76:f1:
f9:d1:22:0e:5f:81:08:d6:fe:f8:d1:5b:68:ea:e8:c7:43:33:
82:33:2c:0d:1d:96:7a:fe:5b:8c:e1:d5:54:92:0c:4b:97:a2:
63:fb:11:b5:3a:52:c1:53:dd:8c:94:36:dd:c4:20:ea:77:9b:
ac:c4:41:08:d9:e4:f0:72:a4:16:a2:cd:fe:f8:5f:13:1c:4c:
ea:64:ca:ea:14:2f:78:a0:90:4d:98:74:da:67:5a:02:3b:62:
57:4e:55:35:9b:87:4c:c8:98:95:9e:52:62:55:d4:0a:2c:12:
42:64:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:19 2025 by rpki-client