Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/61336be6-bf50-329f-8398-7d3c69aaa3a2.roa
File: 61336be6-bf50-329f-8398-7d3c69aaa3a2.roa (raw, json)
Hash identifier: iwABN6Iz+U3fWbWcQQagbdWOniawIMjmt0jEUAK1nyg=
Subject key identifier: 7A:E8:26:72:77:CC:62:48:F2:B6:2B:6E:88:62:A5:81:03:9B:9C:4C
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848573AD68330555D0DACDE9380
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/61336be6-bf50-329f-8398-7d3c69aaa3a2.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 192.149.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d6:83:30:55:5d:0d:ac:de:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=a33171b2-78d3-4ff2-a08b-e212d7416834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:97:7e:38:bc:5e:57:20:36:b9:26:0c:b7:
f3:6b:0a:da:a5:3f:ef:e7:38:2b:af:33:c3:b9:ac:
fa:4a:ee:9b:00:37:c3:e8:62:75:ab:98:54:65:2d:
75:d8:57:33:cf:66:00:62:fc:37:f4:a2:dc:a7:22:
65:37:f9:09:c3:78:f5:8e:3a:86:ec:c7:56:f1:c5:
d7:ce:38:e7:f9:9a:2d:4f:b3:ec:3a:65:27:90:6c:
d2:d6:cb:27:9d:f7:99:39:83:bc:0d:5c:74:b7:e1:
04:ad:87:69:00:6e:fc:ed:5e:62:b9:cb:04:55:af:
ae:ba:b1:6e:00:ac:51:61:bd:d2:6b:6e:ae:55:8b:
18:8f:a4:7c:a6:1e:0d:e2:46:70:80:5d:8a:47:68:
7e:d2:1f:e5:10:8d:60:4a:aa:66:44:8d:b2:b7:b9:
13:b5:cb:cc:c4:4b:ee:b5:65:58:65:3a:29:67:75:
77:b3:3c:ce:bd:60:09:d0:70:b4:31:84:24:a0:e6:
1f:eb:0c:73:dd:9e:c4:a8:4e:e2:9f:3e:96:c9:45:
49:ae:01:dc:88:f4:65:7c:92:7b:82:c1:bc:70:d3:
b5:84:16:d8:8e:0b:81:3e:8c:ba:8e:b8:0e:d4:c6:
36:ec:fb:d1:46:a5:8f:a7:4d:b6:c0:70:e1:83:b8:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:26:72:77:CC:62:48:F2:B6:2B:6E:88:62:A5:81:03:9B:9C:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/61336be6-bf50-329f-8398-7d3c69aaa3a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.149.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:0b:50:ed:50:96:e1:0c:30:0d:d0:58:fc:0a:e7:d3:81:01:
29:74:a7:70:0c:60:ed:e1:77:ab:83:a0:de:00:67:5a:9c:2a:
a2:6b:d5:6e:13:de:8e:cd:5f:fa:61:96:5f:86:93:26:f0:81:
c3:56:f8:fd:72:d3:06:eb:29:b2:42:1c:7f:2d:f6:cc:5a:1c:
94:ce:7b:cb:56:c4:a1:5c:64:22:b1:e1:2e:ab:9e:64:0d:0a:
d2:65:3d:b8:c5:c0:a6:77:77:86:81:35:11:bb:b8:3c:65:18:
77:c5:2d:9a:62:0d:82:2e:eb:e7:99:89:6f:a3:6f:d6:74:cf:
8d:db:9d:2d:36:f2:20:18:74:81:27:bd:db:55:cb:2f:bd:da:
d6:0b:31:9f:57:27:ff:4a:a4:8d:9a:d9:8a:f3:a0:6b:86:c1:
c6:29:ba:0a:69:85:c7:8d:a6:48:9e:88:30:ed:bc:e6:8f:45:
1b:18:f5:50:14:cc:a1:ec:86:0b:98:1b:61:a6:15:f8:d4:9b:
65:6a:bb:c7:d5:ab:1d:cc:9b:79:4c:66:db:e0:45:d9:91:7f:
36:a2:a7:e4:b9:43:16:46:1a:c9:d2:f1:a9:af:6b:42:72:50:
99:da:87:10:c1:98:a0:b7:a6:37:10:04:69:00:24:90:14:68:
31:ba:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:33:10 2025 by rpki-client