Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/358761a1-9e5c-32b4-ad8b-fc5ab21fdda6.roa
File: 358761a1-9e5c-32b4-ad8b-fc5ab21fdda6.roa (raw, json)
Hash identifier: gkWX7xqs4eLQV0xKGvVKx0QiqCUeFMv/jqnGzWUrSOc=
Subject key identifier: 32:64:64:AF:1B:67:AD:85:3B:20:10:B3:D2:56:8C:43:98:F9:58:DB
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858486C95A211279425D571219570
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/358761a1-9e5c-32b4-ad8b-fc5ab21fdda6.roa
Signing time: Fri 03 Jan 2025 17:35:41 +0000
ROA not before: Fri 03 Jan 2025 17:35:41 +0000
ROA not after: Thu 03 Apr 2025 16:35:41 +0000
asID: 49367
IP address blocks: 45.38.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:95:a2:11:27:94:25:d5:71:21:95:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 3 17:35:41 2025 GMT
Not After : Apr 3 16:35:41 2025 GMT
Subject: CN=93a738d8-5776-47a2-b40d-e295e7cd180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:27:22:51:1d:15:82:60:e9:a2:8e:55:75:
7b:c1:c5:50:25:34:6f:ca:56:29:b4:57:c9:9f:65:
cf:9b:1b:44:c7:75:a5:12:4c:6a:9d:cf:09:7d:49:
74:d5:3e:a2:7f:76:9d:8e:5a:4e:f5:4c:3c:f6:61:
53:23:c1:35:00:e6:26:52:81:23:24:6e:e8:e8:cb:
90:ea:e6:fc:9a:96:5b:18:b3:ac:07:15:96:3d:37:
5b:7e:15:a9:3e:70:4c:c3:04:76:12:44:59:20:fc:
e6:49:7d:57:8e:9a:70:ae:9a:e9:4e:91:2f:d5:5e:
94:1a:7d:9a:af:cd:01:97:3b:c9:5b:04:90:83:1b:
fc:d0:73:66:50:68:40:2f:2f:c9:2c:d9:31:08:da:
86:f7:c3:9e:c1:9a:38:4b:7b:29:b4:4f:ee:be:92:
dd:2f:eb:f1:9b:06:d2:7c:72:d7:60:ae:bd:b0:4e:
9f:d4:20:55:3a:50:fc:c9:7c:d1:a2:d2:b7:a3:fc:
be:5b:b8:79:c8:d8:33:0e:12:d8:9a:a3:77:7b:2e:
5e:bb:5a:85:51:68:f9:4a:72:2e:1e:31:b3:7b:c1:
e6:b5:3d:de:fc:7b:77:9b:14:64:d3:58:65:b4:cf:
7e:ec:59:68:e0:0d:93:46:16:e1:61:b5:41:63:ee:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:64:64:AF:1B:67:AD:85:3B:20:10:B3:D2:56:8C:43:98:F9:58:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/358761a1-9e5c-32b4-ad8b-fc5ab21fdda6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:86:f0:e3:6e:5e:5a:e3:58:a0:fd:ff:5a:ed:0f:1c:a7:5d:
a2:c9:a7:62:f9:ad:c3:57:fd:77:33:df:ca:99:2e:fc:a9:e6:
27:39:19:8e:e6:41:e5:b2:fa:45:a5:92:2f:d5:0f:3c:aa:6c:
05:9e:23:34:02:10:f1:76:e7:f6:65:c7:d3:8c:7b:76:e9:08:
b9:dd:9c:e1:37:42:22:81:c8:be:a1:3b:af:e1:84:65:4c:db:
5e:c5:11:eb:5a:86:c6:3c:eb:45:c9:ba:50:24:db:7d:68:93:
22:3f:71:3e:47:5c:c5:b4:10:d6:b5:0a:1f:97:17:de:e4:a9:
43:0b:1c:d4:35:cb:e7:b1:b1:c2:19:d6:07:26:a1:6c:9a:cf:
ac:b2:86:dd:32:4f:48:c3:09:9b:a7:4a:e6:ef:5c:ce:59:ac:
d5:3f:71:c3:e1:28:cb:d0:db:f3:aa:b1:1c:45:5f:17:d0:2f:
c3:f2:a3:43:0f:12:d4:b8:37:ab:7c:3f:4e:64:bd:0a:e6:72:
90:94:fc:7f:f6:3d:13:d5:2f:8d:70:c8:88:73:03:4b:38:e5:
b5:ac:77:e1:38:ca:11:73:47:fe:1f:6b:9f:b5:75:ca:07:c4:
c8:9b:2e:84:c3:9e:ec:c6:e7:cd:97:b9:6d:27:95:fb:9d:5b:
d2:2a:63:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:19 2025 by rpki-client