Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a0b10bd6-8e95-38f5-9879-114a39fd0c6b.roa
File: a0b10bd6-8e95-38f5-9879-114a39fd0c6b.roa (raw, json)
Hash identifier: TZbRqj6Z40l5dUDa7M5OJmYP2ZUeAuF8M73ehF2YqI4=
Subject key identifier: 17:AB:EE:7F:10:DC:1C:52:25:E2:85:30:3B:8F:9D:82:69:BF:6D:D5
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848547031E3FB9A484BFF4AAD80
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a0b10bd6-8e95-38f5-9879-114a39fd0c6b.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 33392
IP address blocks: 142.202.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:31:e3:fb:9a:48:4b:ff:4a:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=0c004660-45e3-4aa3-90ec-3ac5e57b550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:98:86:8c:ae:ca:bd:1d:35:ea:71:2e:a0:
5e:c0:5a:90:d9:50:6a:03:d1:d6:3d:05:65:12:ce:
91:b0:43:00:69:85:7f:35:50:a0:4a:e3:c8:a4:4c:
1b:f2:da:4a:1e:d4:61:b3:3c:dc:02:8b:66:50:38:
73:9d:fe:8e:63:da:0a:c7:5f:8f:10:ad:2d:27:0e:
9e:9f:84:b7:02:0f:a0:d7:19:5b:6e:fe:5f:cc:cd:
3f:ff:28:db:08:94:b4:5f:36:dc:88:d0:db:e3:d9:
95:28:bc:74:26:b5:a4:90:36:57:b1:cd:b8:09:35:
5b:66:ef:18:4a:4e:7d:2c:1f:40:48:27:26:ca:c5:
44:c3:e2:6e:4b:f0:55:de:1e:27:d8:f6:42:6c:4c:
c9:58:54:a6:18:c6:e1:d6:61:98:fe:fa:c8:d3:30:
6e:5d:1d:9e:6c:e4:08:59:ba:a7:32:11:87:03:c9:
f3:a0:1f:fc:31:4f:6a:14:e3:4d:79:88:e8:e1:88:
df:d2:4a:4b:bf:95:94:c9:81:71:0b:20:d1:92:1a:
c5:f5:e6:16:7b:1b:9d:d9:bd:6d:06:ee:85:e5:76:
6d:d0:84:ef:28:30:d4:eb:07:a4:b0:51:05:1a:3c:
82:05:98:85:0e:ce:75:99:50:0d:70:e5:41:79:6e:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:EE:7F:10:DC:1C:52:25:E2:85:30:3B:8F:9D:82:69:BF:6D:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a0b10bd6-8e95-38f5-9879-114a39fd0c6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:8d:a5:eb:af:14:af:a9:3d:f7:f8:84:5d:4c:ab:e4:6d:4f:
fa:a2:29:46:97:c8:21:23:8e:ac:ca:23:27:53:a9:93:8b:0e:
9e:48:af:54:33:e2:15:2f:6f:ba:23:d2:0e:57:63:8d:fb:5f:
a1:ca:df:76:bd:6f:bb:cc:8d:e9:89:91:22:14:13:af:33:35:
85:0b:a7:15:1b:5b:56:80:60:05:39:31:b1:0b:0d:59:58:c8:
06:d4:6b:70:27:89:af:0f:d2:e4:8f:76:aa:31:d2:70:d4:d3:
cb:8b:b9:c4:2e:2e:04:22:8b:18:16:0a:26:f9:10:c8:b9:a6:
62:5d:56:27:37:55:cb:9b:12:fe:4b:ed:70:1e:c8:81:c1:b1:
76:1a:4e:43:41:e6:7d:d3:10:e9:02:3e:7b:49:7a:8b:47:38:
29:af:fd:d6:3d:d6:22:42:c6:ae:75:6d:f8:e3:71:4b:3c:8e:
bf:a9:20:f8:ee:d7:b7:a5:d5:ec:0b:08:24:77:b1:6a:0d:b0:
3d:1b:84:a4:a3:c4:c6:db:8c:e1:bc:1d:43:a7:b5:8f:e0:55:
ef:2e:27:70:5a:d5:e7:0b:69:96:29:74:ef:ea:93:09:7d:fa:
c8:64:93:ac:98:6b:81:10:7f:bd:bc:09:76:88:2f:2b:79:48:
93:26:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:43 2025 by rpki-client