Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00f6e24-a193-39e4-a155-7e85a57a071d.roa
File: d00f6e24-a193-39e4-a155-7e85a57a071d.roa (raw, json)
Hash identifier: rYiHl2rUO151w4ow8Vy/ftWQodLuSO6AQzkVjslU95E=
Subject key identifier: B6:2D:97:4B:A4:59:7E:08:46:67:FE:37:C4:1C:7B:C6:27:97:D4:3F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154F64FF1BFDE1E9BE39300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00f6e24-a193-39e4-a155-7e85a57a071d.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 40.142.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:f6:4f:f1:bf:de:1e:9b:e3:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=2e4675d7-2a4e-4d04-9f16-a3f929e8a0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:61:c4:75:63:06:0a:3e:2c:5a:bd:3f:47:
2d:dc:90:01:a6:cb:7f:0e:5a:3b:4e:6e:ce:ae:c0:
47:4f:59:f4:2a:32:16:cc:5c:d5:b8:59:8d:a9:61:
23:d6:04:ea:f5:64:b9:c5:d4:00:1e:8a:1b:bc:e5:
6e:d5:92:82:5c:b5:87:25:47:40:d3:d2:59:29:3e:
0f:a5:90:7f:13:3d:a5:46:54:74:41:7d:cd:52:5c:
37:4d:11:d4:d6:f4:a6:6c:6a:77:88:8d:1a:37:6c:
36:4d:28:55:fe:c6:d9:17:3d:27:25:f9:17:94:ad:
7b:80:84:0b:d0:e0:3a:86:0f:fb:fa:91:f6:19:12:
bd:95:c9:6d:e3:41:03:c6:f8:ec:79:d9:e1:c8:31:
73:6b:59:27:9d:e4:d1:31:25:11:27:93:7b:89:07:
9b:4f:7d:f9:b5:9d:47:3b:9b:b5:d2:af:68:82:1e:
eb:9e:cd:d0:c6:7e:bc:54:0b:7e:90:26:bc:c6:30:
4c:a3:04:11:9b:27:20:04:72:6d:ca:44:56:f8:4b:
29:22:1d:37:b7:3c:3a:e7:a7:d0:21:46:6b:4b:90:
f5:2a:6e:16:b3:18:d9:a3:b8:a7:65:55:6c:c8:a9:
66:b9:fc:74:8d:fa:f6:7b:46:2a:17:d2:0e:14:c6:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2D:97:4B:A4:59:7E:08:46:67:FE:37:C4:1C:7B:C6:27:97:D4:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d00f6e24-a193-39e4-a155-7e85a57a071d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.142.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:7a:f5:2b:56:72:1e:71:02:be:b3:ac:b3:3a:21:b3:0f:65:
fa:f9:22:07:37:8e:04:8e:48:fa:98:58:5e:8f:8b:a7:14:1c:
43:46:33:12:f6:28:e8:e1:55:5c:07:f4:e6:1d:42:46:e4:00:
fa:b0:ba:10:8f:0a:e4:5c:36:2c:c2:80:07:1a:f5:8d:5f:e4:
ba:0e:44:b8:79:12:44:80:e0:78:8b:51:8a:71:08:ac:0c:91:
94:8a:42:3f:cb:46:b3:a1:cf:d1:27:d2:41:85:1d:cf:43:60:
e0:e9:d7:27:79:6a:69:c4:72:82:3e:13:d9:36:52:30:0a:3c:
6c:81:75:12:09:a3:be:7f:d9:b3:f9:24:59:d6:63:32:39:d0:
7d:30:f7:f5:27:43:77:7e:7b:a9:fd:a5:4d:62:6f:3d:33:be:
89:c1:0c:51:7c:40:63:8a:bd:66:2b:59:cf:be:0c:31:74:45:
63:10:50:a5:30:c8:6c:64:09:a8:62:5b:7f:ce:2e:e6:a5:14:
58:3f:56:b1:08:97:87:b3:2b:e3:ba:f1:cf:c4:6c:02:9d:6e:
a8:c8:c5:74:b8:f8:0f:c6:f1:06:de:4b:47:3f:92:84:60:2d:
b6:63:36:7f:e3:e9:d2:ae:09:18:27:9f:58:5c:e8:d2:c0:03:
af:a6:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:47 2025 by rpki-client