Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bd97484c-0e4d-3599-93cd-eb3f3cb18d33.roa
File: bd97484c-0e4d-3599-93cd-eb3f3cb18d33.roa (raw, json)
Hash identifier: 1DPjLLfLx/nixra5DxCg+P7/7iYsADD5cjh/9a3XWyk=
Subject key identifier: 31:9D:B8:3F:8B:64:D4:5C:D9:9A:8D:7F:0D:71:9B:1B:5F:00:F0:1D
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584855D5904F47ECA14DE9E1FFD8
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bd97484c-0e4d-3599-93cd-eb3f3cb18d33.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 0
IP address blocks: 157.133.16.0/23 maxlen: 24
157.133.19.0/24 maxlen: 24
157.133.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:90:4f:47:ec:a1:4d:e9:e1:ff:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=abe663b8-dad2-45cf-bc41-7afa1bbfae34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:6d:df:05:b9:f3:8d:6c:f6:01:6f:09:bd:
a3:48:0e:c6:92:29:25:f5:89:15:82:a7:4f:ff:5a:
9c:2a:fb:42:13:c5:d5:7c:17:1c:da:c1:8b:38:18:
bc:4b:43:c6:e5:b3:b3:7a:39:28:8c:24:ca:c3:34:
27:0b:fe:c0:a2:04:95:3e:b1:9d:93:47:dd:2e:c9:
4b:2b:db:a6:cf:3d:58:91:3c:16:72:50:5b:5c:c8:
44:af:48:61:9a:02:75:88:19:3d:f6:69:2a:91:25:
39:73:2a:8c:3c:ce:8f:ce:7d:1c:8a:e8:e0:7f:62:
7b:cc:66:a4:62:49:83:b7:57:d3:c6:84:1f:6b:ba:
57:fa:15:6f:cd:94:12:f2:a6:07:5a:55:cf:30:ad:
52:a5:28:bc:b7:50:58:45:5f:52:85:4f:21:47:1a:
7c:75:c4:e0:f8:21:a8:c6:b4:35:44:4c:47:7f:40:
8c:5f:e3:87:12:aa:35:75:73:71:df:ed:df:fc:30:
89:e7:b2:80:e6:1b:c2:af:c1:d3:2e:6e:d1:92:cf:
34:e7:ea:2d:f9:0a:81:4c:6c:5e:68:6d:0c:4f:e8:
be:09:3a:48:71:0f:96:25:c4:16:04:51:42:3a:79:
3e:dc:47:fc:e5:1b:1f:ce:f5:86:0d:6f:b7:28:52:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9D:B8:3F:8B:64:D4:5C:D9:9A:8D:7F:0D:71:9B:1B:5F:00:F0:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bd97484c-0e4d-3599-93cd-eb3f3cb18d33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.16.0/23
157.133.19.0-157.133.23.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:1b:24:c4:09:8c:5d:f9:31:4b:46:3b:46:30:e7:cf:d2:03:
ee:f5:9b:25:71:91:01:9f:ce:3a:a2:61:13:49:a4:ff:21:6b:
64:09:22:a5:a0:11:20:6a:34:1c:86:47:d0:07:2a:80:0c:fb:
4f:51:68:5d:e1:74:65:25:0e:71:a5:41:08:83:e5:9e:6b:6d:
5f:b8:ff:c0:10:8d:fe:b6:c3:c0:a5:95:63:b2:91:68:09:58:
de:34:29:fa:84:b7:00:a8:ed:2e:d7:f5:7c:87:86:4b:ba:9f:
93:9e:76:bf:3e:be:07:23:79:0c:a1:79:d9:bb:b6:a8:29:ce:
91:6d:33:ca:30:b0:82:be:d2:d6:fd:39:1f:31:61:4a:93:8f:
8f:15:94:ca:dc:6d:1c:8d:56:dd:5a:87:fa:98:b3:32:07:e6:
75:06:16:78:05:dd:b9:11:25:9e:f5:ab:05:13:c7:7f:7a:39:
34:62:96:ec:62:45:94:eb:2d:46:33:97:9f:19:d6:8d:4b:4e:
8e:1e:aa:ee:a5:7d:41:63:f3:c8:01:05:0c:d5:4a:8a:bc:8e:
aa:b5:53:ba:71:5d:73:89:d4:f3:d2:82:49:1f:10:58:3e:97:
a1:5a:4f:39:58:47:30:10:80:42:41:83:e7:f1:d6:9f:20:3b:
c5:7e:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:52 2025 by rpki-client