Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/bbd4072d-8e02-3d55-8104-1b54f13bf877.roa
File: bbd4072d-8e02-3d55-8104-1b54f13bf877.roa (raw, json)
Hash identifier: GZWGxpOler3GW6Ehn2/T2fBCeFS21CdFhhKkVuwhZzo=
Subject key identifier: E9:15:C6:A9:8F:6F:91:A3:95:19:6B:9D:11:B1:E1:40:C9:02:73:AD
Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial: 010D0C9F432858477EC1151AAB073CE9CFFEF9C0
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/bbd4072d-8e02-3d55-8104-1b54f13bf877.roa
Signing time: Thu 10 Oct 2024 13:00:41 +0000
ROA not before: Thu 10 Oct 2024 13:00:41 +0000
ROA not after: Wed 08 Jan 2025 14:00:41 +0000
asID: 13555
IP address blocks: 129.19.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:7e:c1:15:1a:ab:07:3c:e9:cf:fe:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Validity
Not Before: Oct 10 13:00:41 2024 GMT
Not After : Jan 8 14:00:41 2025 GMT
Subject: CN=70c4bf9c-7c2d-4264-bb5a-f876faa456d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:2f:69:a8:16:82:96:3e:b4:10:a8:88:c8:
8c:fc:10:6a:00:b9:4d:31:16:c0:b8:87:93:1a:98:
41:44:91:34:da:e6:ec:90:dc:57:d1:d0:72:4c:13:
75:23:49:f6:43:21:38:e9:b2:a1:3e:19:c6:08:24:
40:c7:83:33:92:dc:85:ea:82:22:10:6c:e8:9c:d3:
fb:0a:4c:84:d2:36:e2:c5:73:96:3d:5e:7e:ae:51:
7c:78:fc:de:dd:d7:e1:78:8f:83:09:f2:eb:c1:c2:
55:d9:99:87:0b:07:2a:18:ac:3b:8a:29:b8:bf:f5:
a0:be:9e:f3:8b:ec:57:89:40:48:d8:f1:c0:85:95:
9f:c6:23:7c:de:42:17:ae:54:ef:00:f8:c4:54:52:
1e:38:87:e5:cd:b7:b5:1e:0e:88:85:59:87:7a:58:
3e:86:96:e9:71:ec:76:2f:2e:9c:24:8e:55:f4:d5:
cd:7f:d0:75:06:db:8f:40:74:f3:e1:d0:ab:42:41:
ca:f5:13:f5:84:42:f3:80:b6:93:8d:d3:f4:38:25:
ae:a3:fe:2e:8d:ba:54:89:c4:83:db:1a:77:69:e2:
5c:92:b6:51:d1:5d:a6:28:d6:1f:ec:93:3e:6e:85:
c6:1e:34:c2:99:78:21:d9:59:f1:4a:f2:35:fe:be:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:15:C6:A9:8F:6F:91:A3:95:19:6B:9D:11:B1:E1:40:C9:02:73:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/bbd4072d-8e02-3d55-8104-1b54f13bf877.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
X509v3 Authority Key Identifier:
keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
sbgp-ipAddrBlock: critical
IPv4:
129.19.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:de:e9:81:fd:7d:54:23:31:15:69:b9:da:c5:7c:6d:d6:2b:
34:ff:88:32:50:d4:4f:9a:11:04:4f:7a:91:d5:1d:ea:4d:6c:
5c:b8:ba:79:b8:a9:a8:85:ee:48:fe:a5:02:b1:f4:cd:97:73:
4c:2c:01:ef:7b:c9:e3:86:c8:cb:0b:89:f3:8d:db:e0:3b:bb:
dc:9b:20:91:f1:6a:7e:52:6b:99:fa:dd:5d:57:d5:58:51:ee:
fc:8a:c3:e2:3e:23:6e:b3:2e:df:0c:79:b4:ef:fc:59:6f:9b:
9d:61:0f:fa:bc:c8:0d:9e:82:43:ba:5a:d8:68:7d:eb:df:00:
65:58:7b:06:63:97:57:64:4a:68:15:8d:fe:00:bb:02:e4:8c:
b7:0b:b6:5d:9f:a4:9b:ca:9c:23:70:a0:a3:35:fd:1f:87:4f:
69:42:14:37:38:ba:c2:01:5a:fc:0b:27:3e:67:71:30:04:1f:
72:e6:cc:be:8d:69:e9:2f:02:6a:69:ff:c4:40:73:c7:fd:e7:
71:90:f4:ed:71:9d:b5:24:d9:8b:d7:90:99:0e:56:a4:aa:6b:
1b:6a:64:e8:9b:58:3c:b3:ec:fa:8d:dc:16:d3:bb:71:98:f5:
cd:46:ab:8b:1b:b1:09:09:09:95:ed:8f:43:3b:dc:4d:1d:f2:
c0:6d:12:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:37 2025 by rpki-client