Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd9e3642-58db-34e8-8477-4ecd4eb2a284.roa
File: bd9e3642-58db-34e8-8477-4ecd4eb2a284.roa (raw, json)
Hash identifier: lFUGPCqCmHmQ5yeUALqjfmT667QU13KEGmFa4IYUmys=
Subject key identifier: 76:02:16:3B:9E:9A:96:68:1A:97:73:AC:94:7C:49:BC:2C:75:4B:57
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584824FA8AB5369BDCA5BAB10C40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd9e3642-58db-34e8-8477-4ecd4eb2a284.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 59329
IP address blocks: 45.38.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8a:b5:36:9b:dc:a5:ba:b1:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=dd573934-f62e-4e00-8a54-cb095aec8a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:8b:3a:22:b6:d9:7a:ba:19:9e:9f:8b:e8:
d6:e8:65:6d:d2:05:3a:77:75:f1:02:d2:89:ac:22:
8f:9d:0b:27:fd:9f:26:ab:96:27:77:ce:14:50:eb:
4b:a6:58:19:c9:70:99:fb:bd:ab:90:e8:69:9e:85:
14:46:ae:8c:08:33:cb:48:0d:f4:d3:a9:de:0f:78:
9c:14:19:3b:e7:bf:68:f4:9b:b8:14:98:c6:5d:b1:
49:3d:e7:68:9d:89:c9:82:08:1c:08:69:6c:a2:59:
70:b0:b7:38:ed:cd:4e:2f:fa:14:5a:83:89:b5:da:
8b:d4:97:9c:23:52:a8:94:16:bd:1c:a7:b0:a1:04:
26:68:bf:36:e3:68:48:6f:c7:76:89:ea:b5:5e:16:
ee:3d:25:d1:97:2a:2a:37:bd:f7:46:3c:32:15:fb:
6c:bd:34:db:65:29:7a:d3:c7:57:da:3b:9f:86:42:
7e:ca:29:6f:bf:6f:4a:a6:c8:34:33:19:89:d9:31:
54:70:c6:30:ae:b9:3b:e8:14:c0:81:e9:d1:93:df:
20:ff:d2:e2:25:83:21:bc:39:9e:fd:e4:88:cd:95:
0a:d4:35:86:35:0c:24:92:18:1b:c4:e7:6d:02:c0:
fd:76:b7:02:24:7d:aa:e8:72:72:91:5a:e8:3b:85:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:02:16:3B:9E:9A:96:68:1A:97:73:AC:94:7C:49:BC:2C:75:4B:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd9e3642-58db-34e8-8477-4ecd4eb2a284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:9b:70:70:b3:c7:4d:a0:97:f8:a9:54:4b:05:79:3d:50:53:
41:5a:bc:fd:a9:71:37:ca:54:53:27:3f:f6:97:e3:7d:cc:aa:
47:53:59:3e:21:ac:02:2c:60:0a:2f:3e:30:36:82:2f:e4:2e:
ff:91:19:e2:67:1c:70:8a:2f:32:5b:c9:b7:83:07:97:56:5c:
e8:55:5c:5a:72:3c:0b:28:7e:3c:a7:a3:cf:41:df:d9:46:a0:
a7:e2:1a:d6:02:35:35:48:f5:25:ca:07:31:80:dd:3e:d6:5c:
7b:f6:5b:de:50:6c:c4:fb:fb:b2:ff:de:2f:7e:30:43:65:b1:
8e:3f:2e:45:9e:9f:a0:27:b4:05:0c:2e:7b:30:12:38:0d:b3:
17:1a:26:7a:f1:fc:7a:dd:b5:6a:4e:0f:0d:a0:f6:ff:8a:a1:
4b:ac:30:62:86:c4:d0:18:34:69:10:1f:1c:e6:d0:83:4a:d5:
8e:96:e6:9f:c3:9a:8f:c5:7a:a0:d9:bb:a5:cc:42:59:4e:e3:
42:ef:86:ea:ca:00:85:13:25:83:7a:3d:76:5c:80:ac:7b:8e:
84:1e:92:be:85:a3:87:68:7a:5a:9c:ce:ac:20:1a:25:17:5d:
03:68:24:41:e4:36:6d:a7:70:5b:b3:56:ad:f5:aa:f4:ad:48:
f1:21:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:32 2025 by rpki-client