Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/aab09c36-d222-3e06-a02a-6c02ba7cbadb.roa
File: aab09c36-d222-3e06-a02a-6c02ba7cbadb.roa (raw, json)
Hash identifier: SP/uaouQv1x51qxDHVOmMRj9afwP4r8P8xGuz9Cs/Hc=
Subject key identifier: 57:CE:5E:83:3C:9B:F1:E3:34:06:F8:C3:B0:D3:AC:AE:2C:3E:E8:D5
Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial: 010D0C9F432858487A2084BB141BD44123FC5AA0
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/aab09c36-d222-3e06-a02a-6c02ba7cbadb.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 31898
IP address blocks: 168.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:84:bb:14:1b:d4:41:23:fc:5a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ca27b84f-bc61-4e03-92b1-049774721763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:18:c6:c9:83:f0:db:e0:24:42:e0:01:17:52:
7d:c7:7e:bf:81:59:50:46:46:2f:5c:91:f3:44:8b:
bd:b9:28:80:c2:d7:bc:c7:5a:27:d1:a1:6d:be:39:
42:0b:eb:8b:17:96:12:3c:05:86:01:6d:7a:f5:d3:
14:2d:bb:47:c5:10:12:f3:91:0e:1f:32:6f:a3:78:
dd:4d:a7:d2:e2:ed:fc:e6:35:ee:24:2a:98:1a:04:
ac:98:91:b4:19:b7:d5:cc:1c:bd:d2:0b:c5:37:d8:
03:f5:33:9d:af:e9:ed:a4:2d:39:98:45:2f:fe:e0:
be:b4:98:64:9b:b2:54:14:e1:11:81:37:86:b9:da:
26:3e:db:3f:aa:4c:e9:e2:6f:5b:89:d4:88:63:67:
98:07:8d:ee:40:f0:53:11:09:14:7a:e9:86:00:d9:
85:ad:2c:99:f4:b3:dd:6a:a0:36:f5:b4:24:3b:2b:
9a:2d:2d:7e:b2:49:b3:95:7e:6a:1c:85:fc:5b:d5:
fe:41:d5:11:0e:b4:1d:b7:6c:f4:56:34:fe:6d:9b:
24:eb:2a:69:07:da:38:fe:28:b6:97:f7:a9:63:aa:
b4:c1:4f:4e:d5:a1:09:6f:29:52:b0:3e:ff:50:fb:
db:f0:a9:95:40:24:71:22:73:ad:a1:a8:b1:02:f4:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:5E:83:3C:9B:F1:E3:34:06:F8:C3:B0:D3:AC:AE:2C:3E:E8:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/aab09c36-d222-3e06-a02a-6c02ba7cbadb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
X509v3 Authority Key Identifier:
keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
sbgp-ipAddrBlock: critical
IPv4:
168.225.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:6c:69:6f:99:02:69:fb:0f:41:f1:60:55:df:d3:8d:09:e3:
be:d8:10:a6:f8:7e:8d:1c:3b:dc:4e:35:5f:a8:3f:1b:b9:2e:
9e:b5:6e:78:32:f8:94:f2:3f:56:58:9d:90:d7:24:d3:3e:15:
ba:b1:b9:2c:76:04:b5:86:15:ab:22:a0:1d:10:94:d9:d7:61:
57:72:35:1c:7e:04:82:7e:d3:45:9a:81:93:9b:b2:42:e0:36:
cd:9a:1b:0f:0e:01:f1:70:9c:f4:f1:ad:c1:36:d1:fd:6a:ae:
aa:16:91:1e:31:b9:d3:4f:06:c2:4a:9f:47:da:fd:43:52:3c:
eb:51:7d:9f:14:c7:77:dc:5f:d5:dc:a0:db:22:92:e2:2f:21:
49:b5:b1:8b:3e:a8:c8:17:58:ef:50:e5:2a:3a:28:62:af:77:
a4:7e:1f:08:97:98:7e:14:79:4b:d2:c2:00:1d:e1:c2:62:e1:
31:06:46:b8:9b:30:6f:21:5b:46:12:a6:b8:90:44:93:6a:7f:
11:7f:30:0b:5b:f0:67:35:b6:98:c8:75:0f:c8:bd:0c:31:2d:
07:23:29:16:36:a3:5e:18:34:b3:49:d4:fc:a1:56:48:1c:89:
17:68:31:33:3f:02:40:da:3e:7b:7b:ee:3d:5d:75:86:dd:11:
61:02:d4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:54:16 2025 by rpki-client