Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/450f767d-7295-3de2-b7c9-42d59cf71f78.roa
File: 450f767d-7295-3de2-b7c9-42d59cf71f78.roa (raw, json)
Hash identifier: pzFmL2Adga+/W4EA0i2g62rIMLYmoI7NEX6KaJrWfOU=
Subject key identifier: FE:D7:49:F0:27:6C:74:9D:E0:BE:6D:A1:02:04:B5:E3:0F:47:A9:73
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F43285846309EE74CEFCCA27184032880
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/450f767d-7295-3de2-b7c9-42d59cf71f78.roa
Signing time: Wed 12 Jun 2024 20:31:59 +0000
ROA not before: Wed 12 Jun 2024 20:31:59 +0000
ROA not after: Tue 10 Sep 2024 20:31:59 +0000
asID: 396982
IP address blocks: 152.38.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:30:9e:e7:4c:ef:cc:a2:71:84:03:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Jun 12 20:31:59 2024 GMT
Not After : Sep 10 20:31:59 2024 GMT
Subject: CN=36039d60-3e4f-4816-a4bf-38566e381be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ae:1c:57:72:8e:ae:ce:2c:34:de:79:52:f0:
38:4f:f2:f3:d7:7b:c1:c8:14:af:31:d0:a4:a9:33:
b4:c6:bf:dd:c5:51:ec:0e:10:de:b8:bd:19:47:49:
03:0b:17:43:4d:18:f2:80:73:c0:05:fa:ef:c7:8a:
aa:88:8b:8c:dd:8e:f6:5d:6b:4d:59:05:8c:19:a9:
88:d1:51:ad:9a:a6:43:e3:04:26:45:2a:e4:01:78:
7a:04:1c:3e:42:16:6a:0a:6d:8f:dd:9a:8c:4f:86:
eb:1b:5a:4d:08:ef:f3:49:99:51:38:48:0f:fc:e3:
80:d1:a2:11:7d:8e:df:ae:eb:3f:20:2a:43:20:d1:
b9:04:a3:43:66:73:5c:53:d6:0c:93:20:ff:d6:ba:
af:68:ff:b3:a9:e2:8a:6e:38:1b:ac:41:3e:8f:b2:
6c:fc:71:50:49:c0:ff:e1:c8:91:0a:8d:de:66:30:
65:e2:64:b2:34:ee:3f:f2:8b:ec:fb:42:92:68:38:
c4:1c:45:26:1b:91:41:08:14:78:41:6f:73:a1:7b:
10:ce:72:0e:79:27:73:a9:d1:60:43:4f:fb:ba:a0:
b5:d8:ac:c8:e7:e3:0a:ab:70:bb:69:00:c4:23:95:
25:3f:5d:4c:16:80:d1:7c:38:55:a2:f5:03:eb:3e:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:49:F0:27:6C:74:9D:E0:BE:6D:A1:02:04:B5:E3:0F:47:A9:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/450f767d-7295-3de2-b7c9-42d59cf71f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:43:63:da:c8:93:dd:5a:a8:39:b0:b9:dd:f3:f3:91:f1:f2:
cd:e3:b1:18:6f:e1:70:6f:90:b2:8e:a0:0b:42:ee:16:7d:10:
35:40:51:b1:88:01:23:4d:33:2e:68:df:bc:70:d1:b8:f4:01:
27:2b:7b:66:e2:e5:80:87:1a:1e:c1:a6:2d:7a:65:25:4b:61:
53:85:23:ec:b9:bc:cf:4d:02:8d:3e:e0:3a:78:2d:a0:f3:00:
fa:2e:7e:13:1d:86:e5:e0:fa:9a:64:1d:70:39:d5:ff:fb:1b:
db:3f:75:2d:20:04:9e:01:04:c1:94:f3:38:d4:50:af:bd:98:
96:57:ca:c4:92:bb:7f:e0:d8:61:34:20:73:b8:8f:48:51:5f:
db:7b:cb:dd:7f:06:83:ff:d3:72:0e:61:02:ae:c4:56:5e:78:
50:aa:ea:24:9f:ff:fa:1e:fd:bc:35:2a:b9:45:22:53:eb:74:
6b:6b:23:ae:36:97:3e:1b:fc:57:82:73:95:fe:26:35:51:ff:
00:d0:ac:2e:db:92:27:64:3e:a6:56:4a:f0:ca:c2:d6:89:a7:
ca:65:c2:2a:44:d0:af:16:c7:b3:cd:7b:b6:43:3e:f8:5f:3a:
57:eb:8b:d9:f7:2e:8c:35:19:f6:03:71:b7:8f:ec:47:89:7d:
25:1a:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:06:34 2025 by rpki-client