Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/5ca0e4e8-1450-303a-98c4-fe4b9575d573.roa
File: 5ca0e4e8-1450-303a-98c4-fe4b9575d573.roa (raw, json)
Hash identifier: tLXGNGlPut2gSo66kxG8cLJea6Dli0jeH15mQyJIbCY=
Subject key identifier: 42:EF:7F:F6:7B:5D:C0:60:D1:0D:27:37:B9:9B:A1:4F:5A:62:A2:3D
Certificate issuer: /CN=9becea05-974b-43e4-a04f-198402715647
Certificate serial: 010D0C9F432858478E1BBFE9014E433134C925B0
Authority key identifier: CB:0C:CF:2F:01:59:5E:BE:15:54:B8:D3:88:5E:C6:E3:E5:BF:A2:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/5ca0e4e8-1450-303a-98c4-fe4b9575d573.roa
Signing time: Wed 16 Oct 2024 01:00:31 +0000
ROA not before: Wed 16 Oct 2024 01:00:31 +0000
ROA not after: Tue 14 Jan 2025 02:00:31 +0000
asID: 32080
IP address blocks: 165.140.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8e:1b:bf:e9:01:4e:43:31:34:c9:25:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9becea05-974b-43e4-a04f-198402715647
Validity
Not Before: Oct 16 01:00:31 2024 GMT
Not After : Jan 14 02:00:31 2025 GMT
Subject: CN=7dd79b54-70b5-441f-ba48-6a343392908a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:35:18:c8:8d:52:af:48:72:d4:1d:e6:82:
d3:a7:ae:f8:64:4d:41:21:7b:01:43:7d:a0:7e:bc:
4b:0d:75:4f:90:3d:dd:b1:15:12:f0:44:ce:99:65:
39:d3:c8:9d:64:6c:14:65:f8:fd:61:da:f5:ac:3b:
62:cf:23:38:75:b6:aa:a7:a2:5c:f0:73:4e:0b:b2:
2b:97:6a:e4:9c:c0:36:c4:eb:ee:48:91:87:5c:53:
a0:4b:18:20:4d:be:80:bc:eb:11:98:03:33:d9:71:
dc:69:86:52:27:0d:16:36:4a:c0:6d:b8:5f:e7:8e:
4f:ea:74:2d:d0:39:0a:fe:67:2b:03:cf:7d:c5:de:
1a:96:39:a9:38:7e:17:86:64:ba:ba:5a:de:2f:97:
78:57:6c:60:74:2f:88:73:c3:c0:01:58:6f:b1:67:
df:6c:d2:dc:b5:5b:37:d0:21:86:8c:44:43:9b:5c:
70:7c:0e:c6:66:24:e5:19:f6:7c:89:5f:9a:de:d4:
2e:e0:ad:56:0e:a2:98:d7:e6:26:1e:08:5a:8b:f1:
bd:59:e7:e2:9c:f4:9c:d9:86:fb:8c:88:82:24:a3:
b3:f3:65:05:99:d9:a3:a0:62:56:b5:bd:10:06:bc:
1f:47:dc:fe:b8:f0:67:ec:ed:6d:14:58:02:9e:81:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:7F:F6:7B:5D:C0:60:D1:0D:27:37:B9:9B:A1:4F:5A:62:A2:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/5ca0e4e8-1450-303a-98c4-fe4b9575d573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.crl
X509v3 Authority Key Identifier:
keyid:CB:0C:CF:2F:01:59:5E:BE:15:54:B8:D3:88:5E:C6:E3:E5:BF:A2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:9f:b5:b3:85:e4:83:ce:e8:59:84:3e:d5:ad:7a:99:08:f3:
09:0d:30:19:3d:c6:ae:00:bc:9d:43:b0:d5:9f:f0:63:99:f2:
10:f2:e8:ec:e8:e5:59:da:5c:ab:6d:6c:d8:71:4b:2e:2f:d0:
18:b4:35:26:b0:78:50:36:54:42:eb:a8:37:9d:d9:47:bd:d5:
b4:17:cc:49:66:36:54:6f:92:6d:ac:57:c5:af:52:0b:47:b3:
4f:ff:0f:ac:76:99:cb:f5:fe:51:33:07:d7:73:25:ad:4f:b2:
07:db:ed:09:24:25:9c:e7:1f:3e:33:d8:57:85:34:89:c0:88:
df:14:c0:1d:53:b0:93:c2:55:3d:f3:79:f2:3c:b9:e6:05:6e:
67:7b:e8:a2:4f:dc:e7:c1:45:e1:75:05:6d:c5:9f:be:7f:3f:
34:4b:43:4a:ff:a8:24:24:24:03:c6:fb:df:96:6b:85:27:4c:
b9:d1:e9:31:8a:d3:b2:d6:58:17:f2:31:2f:54:d9:4b:ae:d4:
94:d0:32:59:f6:db:5b:2c:16:a3:5e:5c:9b:66:e2:38:3b:fa:
69:b1:13:72:48:eb:49:b4:62:a0:40:db:96:90:76:65:da:0f:
e9:d5:c4:5f:19:c0:46:0c:70:a6:28:99:6c:22:f6:b3:a5:5b:
43:1a:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:25 2025 by rpki-client