Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/4c9283d1-6000-3203-8efd-a144aeec350d.roa
File: 4c9283d1-6000-3203-8efd-a144aeec350d.roa (raw, json)
Hash identifier: gvKoM+oWu/6hN4OgVaNEMelhWPSrQH91YbHQrJ4qfYg=
Subject key identifier: B5:C6:77:7C:FB:55:09:4B:6D:05:F1:3D:F6:BC:0D:09:4B:4F:6F:6C
Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial: 010D0C9F432858480EA5037DF38315562CCE9980
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/4c9283d1-6000-3203-8efd-a144aeec350d.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 19318
IP address blocks: 161.129.64.0/24 maxlen: 24
161.129.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:03:7d:f3:83:15:56:2c:ce:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=966e8455-87ba-42f7-a600-9bd87a53d902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:00:62:ae:c3:bf:9b:4b:97:c5:5e:21:1e:
88:f0:50:8a:7f:f2:d2:3b:ef:03:e8:ac:f9:af:60:
7d:fb:61:a4:48:78:f7:68:f3:54:71:cf:f9:a1:56:
96:c9:d8:31:e9:7e:39:9f:9f:a4:96:40:a6:31:ec:
9b:b7:e6:7a:99:ae:f6:05:ef:fe:18:be:03:4b:fb:
ac:a7:95:53:14:40:e5:6a:24:5a:3d:b4:ea:f4:35:
2d:fe:8d:2d:ae:4e:0d:c7:d2:5b:3e:8c:24:3a:5f:
35:be:b6:3f:ec:e2:4d:6f:c9:84:8f:c6:8e:12:25:
7c:39:30:a7:9b:f6:78:6f:e5:71:b0:f8:49:10:50:
78:01:64:13:4e:c2:29:85:ea:11:00:65:06:51:7d:
2b:1f:cf:e9:25:dc:84:d1:06:01:00:53:ae:78:ea:
c2:a4:e8:db:50:84:06:72:59:fc:19:51:77:cf:44:
eb:02:6e:d3:a4:58:e4:80:74:5b:dc:85:ca:ce:d9:
e7:e8:37:a2:7e:c9:9b:a6:bc:52:43:93:85:a2:fe:
76:b9:85:e0:9a:e1:e4:94:92:55:5f:a7:1d:69:40:
c8:26:27:a4:75:0e:cd:14:1e:05:f1:56:8f:da:ef:
16:2a:3f:04:94:84:95:03:35:6c:0b:6d:05:7a:34:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C6:77:7C:FB:55:09:4B:6D:05:F1:3D:F6:BC:0D:09:4B:4F:6F:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/4c9283d1-6000-3203-8efd-a144aeec350d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
X509v3 Authority Key Identifier:
keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.64.0/24
161.129.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:fa:0a:c0:01:f6:b1:92:8f:c9:8d:70:5a:56:64:cd:50:3c:
3b:75:fa:af:65:cd:98:05:4c:ab:cc:54:ac:96:8c:96:e8:54:
d8:69:51:d6:64:75:78:44:ac:3c:dc:00:3c:a2:5b:61:52:09:
08:6f:15:c4:43:2b:ef:d6:d9:1b:c3:92:74:46:b2:8f:75:b6:
0e:0d:7a:8f:51:03:be:b7:81:0d:26:7c:76:30:d4:10:7a:b6:
44:b1:3f:78:db:c0:ad:68:ca:26:71:73:6e:a4:ac:da:6f:9d:
b7:0e:08:40:9a:6d:c6:21:38:f4:03:ec:3e:e5:2e:9d:15:b1:
b9:6d:95:58:95:75:e6:6d:27:30:c8:8e:fe:4f:be:30:b0:35:
39:f8:f3:b3:ad:16:02:5b:1d:07:c2:de:5a:28:1f:45:20:63:
30:bf:87:fb:df:cb:ca:0d:07:28:4b:eb:ec:06:f9:af:87:dc:
a8:65:f2:94:60:62:54:26:c5:a1:7f:cd:b8:a3:14:1b:82:05:
70:67:7f:3a:41:df:ee:eb:91:c7:6f:31:be:67:a2:b4:c0:96:
7f:f2:21:c8:bc:37:7d:9a:4d:94:e7:77:9f:bd:35:a0:4b:cc:
1a:ed:6f:e0:a7:1b:1c:26:21:60:b1:1d:56:f7:f1:b0:c5:4b:
c2:ee:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:56:09 2025 by rpki-client