Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/9ca0149f-3043-3d63-94d6-745fc7bbc38b.roa
File: 9ca0149f-3043-3d63-94d6-745fc7bbc38b.roa (raw, json)
Hash identifier: gQYg/G33DVeInuGR1lqtAGEBGSsJLLqh8Wfko0jIplg=
Subject key identifier: 2F:99:55:1C:FC:78:8B:A4:20:74:C6:CF:F2:7B:C6:85:0B:26:8C:BA
Certificate issuer: /CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
Certificate serial: 010D0C9F432858483A491C1DAF0FED5E7F573200
Authority key identifier: D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/9ca0149f-3043-3d63-94d6-745fc7bbc38b.roa
Signing time: Mon 16 Dec 2024 17:11:05 +0000
ROA not before: Mon 16 Dec 2024 17:11:05 +0000
ROA not after: Sun 16 Mar 2025 16:11:05 +0000
asID: 137897
IP address blocks: 165.140.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3a:49:1c:1d:af:0f:ed:5e:7f:57:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
Validity
Not Before: Dec 16 17:11:05 2024 GMT
Not After : Mar 16 16:11:05 2025 GMT
Subject: CN=010fee89-8280-4601-8b5c-6bb94152c0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:2a:19:be:fb:6c:e2:3c:49:e9:e1:82:e2:
fe:dd:49:1c:b5:28:8b:8a:3e:72:8f:06:ce:19:be:
ac:a8:9a:61:a1:ab:30:d4:8f:74:c8:d4:c2:5a:c5:
fe:63:ae:4e:9f:2f:73:fb:b9:fd:28:cd:ee:43:fe:
2b:c9:da:8c:10:ef:f8:e4:d2:1b:8c:63:f2:c3:1b:
a7:8c:ac:ea:46:8f:df:d4:b7:eb:94:d2:39:17:39:
88:16:81:ae:7f:f0:7a:a4:d4:d5:dd:85:86:7c:f8:
d3:54:1a:2f:2f:9e:ac:07:ec:87:c2:0d:53:ac:dd:
39:d4:12:12:e7:35:94:19:a3:e2:7e:c1:d4:ad:6b:
24:ab:92:ab:1a:1d:4c:1c:4b:c8:7e:9c:fa:a9:fd:
56:fe:bb:3a:0f:9b:e4:a0:a6:f5:b3:3e:7f:47:14:
a6:8f:5b:ca:87:2e:98:c6:cb:17:7c:50:65:32:35:
7e:be:b8:8f:53:e3:50:86:1d:60:13:d5:20:82:c6:
c5:8d:5c:44:5d:a2:fe:10:37:c9:15:3e:f1:1e:f9:
a7:ba:17:20:fd:2b:20:74:87:de:81:d1:07:7a:44:
c5:99:51:4b:51:a9:41:21:b3:c5:51:f8:af:67:40:
fb:0d:2e:90:6f:24:16:dc:c8:6b:af:3f:c7:49:5d:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:55:1C:FC:78:8B:A4:20:74:C6:CF:F2:7B:C6:85:0B:26:8C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/9ca0149f-3043-3d63-94d6-745fc7bbc38b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl
X509v3 Authority Key Identifier:
keyid:D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ff:43:89:b7:f8:dd:77:9f:1a:28:77:98:b1:99:48:55:80:
f6:73:72:df:b4:cb:78:6e:a6:9b:7b:6f:f8:3c:03:8d:a8:85:
37:6b:ff:01:9c:40:ba:4b:f3:2b:5f:be:d1:a1:58:90:b2:17:
be:cd:c3:cf:7d:2f:79:9b:9a:a5:89:07:52:c1:d9:f6:c4:59:
e5:41:7b:d9:13:35:bb:a2:5c:4a:e2:07:35:9e:49:30:ac:cb:
83:86:0a:33:8d:f5:da:5c:66:00:a5:c2:24:38:b8:a1:84:5b:
59:cd:15:14:7a:ee:06:c0:35:f5:4c:92:ec:1b:ed:98:6e:45:
e6:62:e6:98:75:2f:f0:d3:af:4b:36:3f:1b:42:18:f1:65:91:
e8:25:57:a4:7f:37:9c:be:bf:6b:e5:8a:29:f2:11:d5:86:83:
8b:97:6c:9c:73:5f:f2:1b:1c:15:f8:af:f4:12:8a:b9:1b:c4:
3c:ff:5a:68:68:bb:98:e8:c4:ae:2b:b9:c6:09:af:80:01:9e:
41:30:b1:a6:78:88:a4:df:5e:13:53:77:d6:e0:e8:ee:0f:66:
e1:ca:44:2c:dd:10:60:59:a9:84:7e:e1:41:cc:d0:24:ee:4b:
6f:28:ab:95:2a:5a:7c:96:ed:99:ab:6d:c2:8e:58:e0:34:a3:
cd:4f:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:29 2025 by rpki-client