Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/c38f936c-fe31-3359-8b3b-d2085afcd3cb.roa
File: c38f936c-fe31-3359-8b3b-d2085afcd3cb.roa (raw, json)
Hash identifier: ME1f44TnSmzu7LuJrJpdrJFN/KMxQMk4qSr21CewmBM=
Subject key identifier: 4D:23:F8:D1:DE:C6:AB:11:18:5D:C0:47:F3:B9:6C:6D:DE:D3:7F:30
Certificate issuer: /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial: 010D0C9F4328584630FCD16CA065184DAC6F54A0
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/c38f936c-fe31-3359-8b3b-d2085afcd3cb.roa
Signing time: Wed 12 Jun 2024 23:41:13 +0000
ROA not before: Wed 12 Jun 2024 23:41:13 +0000
ROA not after: Tue 10 Sep 2024 23:41:13 +0000
asID: 27370
IP address blocks: 140.241.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:30:fc:d1:6c:a0:65:18:4d:ac:6f:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Validity
Not Before: Jun 12 23:41:13 2024 GMT
Not After : Sep 10 23:41:13 2024 GMT
Subject: CN=f3900666-88b2-4feb-aff6-abe8e1598d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:5f:53:95:c3:5a:e4:f4:ed:04:87:5a:5b:
68:25:b6:5e:ef:06:21:d2:8c:54:c9:89:31:15:f7:
db:0f:9c:0e:4a:1c:41:6c:04:d2:45:91:2f:45:a0:
b5:a6:07:3f:f3:cd:70:83:99:bf:f6:8f:6e:c7:c2:
c2:6e:50:bf:51:9f:59:17:31:92:60:b2:a8:20:e8:
16:4a:fd:f7:4e:e7:e1:f3:64:23:5e:d8:74:43:16:
85:9f:61:f2:2a:2b:b8:9f:f0:22:af:da:67:39:8e:
ea:51:24:7b:38:3e:5b:fe:ac:65:84:00:9f:a4:f7:
1d:a7:c3:7e:b1:13:b9:d0:8b:14:c1:a2:c5:2b:40:
6f:03:d7:d1:ad:8f:b0:d8:66:17:6a:b6:ca:5d:7d:
f3:0d:b6:86:a0:cc:0d:45:cb:d0:7b:02:93:66:d2:
1d:ff:ca:5b:f7:7b:ee:fb:d3:75:92:75:b2:73:0a:
c0:9a:44:86:9c:55:7c:08:92:a0:25:1b:c7:10:a0:
38:06:ce:fb:71:5a:3c:62:e7:47:5a:ca:5b:fe:a4:
98:f6:93:a2:47:5a:3f:ed:d6:1f:95:34:02:0b:91:
a8:3d:72:eb:5e:22:a8:e7:e7:e0:28:0f:1b:4e:00:
52:b0:7c:37:da:27:e6:5f:8e:c3:0c:10:14:32:c8:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:F8:D1:DE:C6:AB:11:18:5D:C0:47:F3:B9:6C:6D:DE:D3:7F:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/c38f936c-fe31-3359-8b3b-d2085afcd3cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
X509v3 Authority Key Identifier:
keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
sbgp-ipAddrBlock: critical
IPv4:
140.241.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:40:94:fe:ac:d6:8e:f0:eb:da:78:8f:15:52:56:91:9a:a5:
b9:7a:e6:1a:a2:50:e6:e6:12:6c:0d:f7:51:31:b4:a7:49:81:
22:de:d6:4a:f7:b5:65:46:29:90:f3:61:95:de:94:ae:e3:93:
72:1b:91:49:5b:1a:2d:23:ab:1b:d0:2b:08:4b:7b:0b:bd:69:
e4:19:72:2c:a8:fa:57:3c:31:1e:cc:f7:eb:6c:06:16:e4:97:
2a:d2:da:92:7b:0c:9c:33:9e:21:d1:d0:cc:84:73:17:1b:cd:
13:e8:a6:a4:cc:5d:76:a7:0b:98:58:b1:bc:d7:57:1d:62:a3:
1c:58:84:3d:06:c9:4c:3e:2e:68:e7:a0:2f:95:68:dc:a6:75:
2e:41:b0:23:8d:c1:99:00:97:fb:af:66:89:5e:3f:e3:37:bd:
bb:d5:e8:04:7d:12:bf:57:51:10:2d:71:37:2d:45:20:87:9f:
61:98:da:09:03:31:0f:b7:a9:59:dd:3f:8d:0a:68:90:39:32:
87:8a:d4:11:b9:e4:ee:f3:4a:71:90:17:04:83:35:aa:72:3f:
f8:2b:cd:12:94:76:23:41:ad:4a:49:d0:63:ae:76:c5:7d:29:
0d:5e:e7:4d:b5:7b:95:93:17:38:ec:06:2f:96:6e:fd:b4:ff:
e8:a8:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:16 2025 by rpki-client