Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/85b901b2-21f8-3706-93a8-7e3ae78c2db5.roa
File: 85b901b2-21f8-3706-93a8-7e3ae78c2db5.roa (raw, json)
Hash identifier: BTVvoOABSt2BoGWpY4rcsp1qkOZmoH/yunGuR23+lgg=
Subject key identifier: F3:DE:FA:8C:60:94:F0:EC:FB:E9:C8:39:4D:EF:E9:60:6F:FE:50:C5
Certificate issuer: /CN=618659a6-e7a9-4c1f-9818-42770f2b224e
Certificate serial: 010D0C9F43285847A65AEE448C9A3AE4671BC12A
Authority key identifier: A7:82:87:80:EB:D8:74:26:32:E3:C2:22:C8:6C:D4:DD:4D:E4:B3:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/85b901b2-21f8-3706-93a8-7e3ae78c2db5.roa
Signing time: Thu 24 Oct 2024 17:27:21 +0000
ROA not before: Thu 24 Oct 2024 17:27:21 +0000
ROA not after: Wed 22 Jan 2025 18:27:21 +0000
asID: 33622
IP address blocks: 140.235.24.0/22 maxlen: 22
140.235.24.0/23 maxlen: 23
140.235.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a6:5a:ee:44:8c:9a:3a:e4:67:1b:c1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618659a6-e7a9-4c1f-9818-42770f2b224e
Validity
Not Before: Oct 24 17:27:21 2024 GMT
Not After : Jan 22 18:27:21 2025 GMT
Subject: CN=2864b89e-5c44-4824-bdb3-3e99bf58333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:19:a1:9b:1a:73:b1:01:3b:80:2a:b2:1b:
e0:3c:82:4b:db:94:2a:8c:eb:b7:a0:81:3c:0e:3e:
c6:35:96:4e:d7:f7:b0:ed:e5:60:69:87:5f:4c:a9:
1d:d5:9e:61:40:6a:77:50:91:8a:85:bd:87:ce:5f:
13:f8:56:6e:df:0b:b4:89:d5:da:5c:5f:4e:a9:53:
17:27:8f:bf:d4:b3:21:bb:72:38:e1:d8:b7:dc:c5:
bf:a7:c3:5a:08:dc:97:ee:67:85:f8:bb:bd:d3:fb:
96:e8:c8:f6:e4:0a:83:45:b8:56:08:c7:6f:41:ae:
28:89:ca:60:cc:21:ab:25:40:0f:72:38:0e:09:8f:
c8:16:7b:a3:36:34:14:e8:d1:5d:b3:e6:ad:79:79:
64:58:95:61:e2:19:6f:83:d3:e5:0d:75:5d:d0:fe:
eb:28:35:e7:b2:2b:8b:ce:3a:ae:9e:12:a7:d8:48:
46:31:3f:d5:89:40:d5:94:2f:5f:1f:25:36:d2:b6:
a3:94:a4:77:22:5d:ef:1a:9e:98:8f:3d:04:8d:39:
fa:e5:a3:f6:13:63:f3:ca:20:20:be:38:0b:e8:06:
c3:0b:97:a7:2f:9a:91:e3:71:a3:a7:af:a6:3f:9c:
e4:ec:95:ed:c1:6b:ae:fc:ab:4d:2d:9b:cf:98:41:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:FA:8C:60:94:F0:EC:FB:E9:C8:39:4D:EF:E9:60:6F:FE:50:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/85b901b2-21f8-3706-93a8-7e3ae78c2db5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/618659a6-e7a9-4c1f-9818-42770f2b224e.crl
X509v3 Authority Key Identifier:
keyid:A7:82:87:80:EB:D8:74:26:32:E3:C2:22:C8:6C:D4:DD:4D:E4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:a9:58:5b:51:1a:28:85:1e:52:48:3c:38:d8:ad:58:04:2c:
9c:8c:60:9d:6a:47:fc:4c:6a:55:e6:d1:40:8f:af:a7:53:dc:
d3:06:6b:7d:bb:e7:4f:e5:4a:43:0e:ed:d6:43:ac:88:52:60:
b4:15:78:72:f9:70:00:a1:f8:5a:40:15:06:64:27:11:5a:87:
57:71:a8:b3:c4:07:56:6b:34:d9:e0:fe:12:b9:c4:6a:cf:83:
0e:e9:a7:e5:e4:a2:b9:fd:e0:6b:7c:90:64:90:6b:ef:b7:4f:
1c:46:f1:ba:c8:06:0c:a7:1e:f0:51:3e:3c:89:fe:f6:a9:eb:
ce:f4:af:3d:2c:fa:45:a7:a4:73:54:4a:f2:17:db:cd:67:de:
75:78:38:38:60:ff:6f:49:44:75:ad:0f:14:de:b9:7d:92:1e:
69:30:f2:65:37:e0:d3:82:fe:72:4a:9e:85:ae:8e:be:82:bc:
f4:82:ce:13:05:65:f4:51:f3:17:ec:25:45:21:6f:22:26:98:
51:35:c9:20:93:d8:47:c8:90:9e:1e:53:91:c7:5b:a0:c5:01:
8c:ca:aa:81:d1:0f:82:7a:e0:9c:15:c7:e3:27:05:6b:15:54:
e6:ea:45:9e:d3:93:ad:9c:15:f1:67:34:0d:71:12:1c:77:9b:
2a:7e:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:50:06 2025 by rpki-client