Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/88c3d08c-384e-3b33-940c-ebc1368ff262.roa
File: 88c3d08c-384e-3b33-940c-ebc1368ff262.roa (raw, json)
Hash identifier: XIfJJtwVmN0O4h2xM47ETsbMgr9iIz1Udy85c6B8TOY=
Subject key identifier: 97:98:93:67:4F:41:24:A3:50:29:58:DB:94:D7:94:B7:10:4C:62:F6
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F43285846126EBC122989C17535567500
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/88c3d08c-384e-3b33-940c-ebc1368ff262.roa
Signing time: Sun 02 Jun 2024 01:00:26 +0000
ROA not before: Sun 02 Jun 2024 01:00:26 +0000
ROA not after: Sat 31 Aug 2024 01:00:26 +0000
asID: 400529
IP address blocks: 134.195.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:12:6e:bc:12:29:89:c1:75:35:56:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Jun 2 01:00:26 2024 GMT
Not After : Aug 31 01:00:26 2024 GMT
Subject: CN=0c59577e-5daf-4de0-b58b-be9721229316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:c5:4d:86:33:78:9c:d8:69:de:fc:44:85:
04:29:a0:e2:b6:f3:9d:ec:d4:9c:6f:cd:30:6f:5b:
98:bf:c5:0d:09:fb:98:fb:6e:f8:11:93:8f:ce:60:
12:7e:20:05:d2:b0:de:65:18:2a:80:9e:6d:f8:94:
11:c3:81:76:df:b6:b5:51:9a:17:cd:41:37:1f:b2:
68:12:d5:84:5b:74:56:dc:f1:8a:2c:89:92:28:e9:
8e:23:89:71:2c:f8:c9:41:d7:be:08:cd:12:84:84:
be:db:7f:57:e4:b9:4b:93:e0:35:8b:28:45:7d:45:
bb:29:56:03:24:05:6e:96:4d:cb:c1:aa:a4:9d:e8:
9d:21:a0:10:bf:6d:4b:c4:07:2c:dc:c3:47:02:82:
50:0d:35:29:c4:9a:f3:06:4b:7c:ca:7a:74:5b:b1:
4d:fa:17:75:4c:9d:49:ef:37:d2:eb:0f:83:de:81:
5b:82:9d:7c:96:1b:45:db:2b:93:d5:54:21:6f:ed:
23:4c:4b:30:51:bc:eb:9f:af:1e:24:49:16:50:d8:
b8:b5:37:56:cf:55:a5:df:de:93:3b:af:c6:65:a4:
2c:c2:61:36:8c:ab:5e:ce:66:bb:cf:fe:f5:3d:67:
7e:15:93:d2:52:a7:b3:dc:ec:9d:3f:08:ce:3b:10:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:93:67:4F:41:24:A3:50:29:58:DB:94:D7:94:B7:10:4C:62:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/88c3d08c-384e-3b33-940c-ebc1368ff262.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:21:de:3d:54:d2:f8:54:39:3b:c2:6c:93:1a:20:27:a9:4b:
2b:35:5d:40:f6:df:68:bc:6e:1b:8f:c5:ff:aa:a7:76:ae:7f:
a6:23:89:b0:f4:ae:34:ff:ea:4a:c4:6a:69:73:67:2a:be:8c:
23:a4:56:dd:9e:93:4c:bc:7a:50:77:51:37:b6:8e:1b:85:86:
9d:a9:e9:1d:3c:d7:14:42:e3:dc:02:85:bb:d6:76:a3:e1:ce:
02:09:82:90:c2:8a:12:c7:38:d7:6b:4f:cd:29:d4:0b:cf:41:
b3:42:e5:37:b4:18:6f:36:c8:ae:d8:4e:b8:f7:47:26:8c:c4:
63:d8:2e:d4:67:f7:7d:b0:b5:94:07:78:60:0d:ae:c0:1d:c4:
07:5b:ef:5f:a3:03:d4:35:b7:25:a6:66:e6:c3:e5:85:a3:99:
41:f5:a1:57:08:1f:a1:24:b8:f2:e1:c1:47:95:98:f6:46:6b:
70:a9:ad:a9:45:82:e2:d8:28:2a:eb:e1:b7:c8:80:06:1e:f5:
c0:76:d2:d0:af:0e:06:d4:87:7a:98:5d:cf:0b:a5:1f:08:a0:
37:d6:71:60:e0:50:c8:6f:8a:1d:60:16:d3:b6:7c:d3:f3:a9:
2f:3b:b2:54:a8:f2:41:1e:91:b2:8d:4a:61:04:48:73:9c:26:
c1:4f:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:43 2025 by rpki-client