Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/d86ddf63-bf1d-3e66-8201-cf1fc1cf0d4e.roa
File: d86ddf63-bf1d-3e66-8201-cf1fc1cf0d4e.roa (raw, json)
Hash identifier: HA/3W4rHk62TZip5oP7rHaClyknK5WoIDCLJJW0o/MU=
Subject key identifier: 46:C7:FA:98:23:E0:CA:4C:1B:A6:C6:61:C3:C0:09:17:FD:4A:DD:4F
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F432858454F02B9ADC4BF64EEE62BA340
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/d86ddf63-bf1d-3e66-8201-cf1fc1cf0d4e.roa
Signing time: Sun 24 Mar 2024 01:00:24 +0000
ROA not before: Sun 24 Mar 2024 01:00:24 +0000
ROA not after: Sat 22 Jun 2024 01:00:24 +0000
asID: 7862
IP address blocks: 146.23.24.0/22 maxlen: 24
146.23.60.0/23 maxlen: 24
146.23.4.0/22 maxlen: 24
146.23.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:4f:02:b9:ad:c4:bf:64:ee:e6:2b:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Mar 24 01:00:24 2024 GMT
Not After : Jun 22 01:00:24 2024 GMT
Subject: CN=bb30a598-740f-4f44-993d-b934f6c1723a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:30:84:15:cd:f2:a9:63:ad:f6:e5:77:b3:32:
b6:49:a0:c2:93:d6:71:3e:05:8d:93:e1:19:70:70:
6d:d1:60:00:8c:1d:37:be:cf:f5:3c:f2:3c:15:b4:
78:b6:9b:61:96:61:e7:42:9b:15:a6:a0:e2:46:6f:
db:f9:8e:94:bc:27:47:5d:3b:b3:84:5e:9c:d9:9b:
56:2e:b7:ab:cf:25:bc:ea:7b:79:82:86:80:58:3f:
2f:b6:50:48:96:c8:3f:d5:74:67:54:e6:8f:47:00:
f3:b5:a9:80:0a:f4:eb:d6:13:61:66:e6:ce:16:87:
ae:58:41:9e:2f:7a:52:a5:d2:c0:8b:67:a5:1b:ea:
34:c0:ae:a1:ed:56:30:1f:9f:28:08:70:c7:1e:ad:
f7:22:b9:02:0a:ea:1e:ea:6a:9c:86:16:ad:44:13:
1e:a7:f5:23:14:3e:8b:52:68:fb:1f:25:e5:69:92:
ba:10:f2:99:a8:79:e6:b3:15:41:9c:77:be:fa:dd:
c8:e6:6d:ea:89:97:3a:ad:b6:2e:c0:78:37:57:46:
36:75:78:74:e0:a3:c5:37:92:af:45:92:f4:c2:b2:
96:d4:53:89:15:92:11:5b:38:bf:3d:03:78:bd:ba:
80:23:94:9b:f5:21:76:0c:b0:86:20:27:fa:0e:43:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:FA:98:23:E0:CA:4C:1B:A6:C6:61:C3:C0:09:17:FD:4A:DD:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/d86ddf63-bf1d-3e66-8201-cf1fc1cf0d4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.4.0/22
146.23.12.0/22
146.23.24.0/22
146.23.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:8a:b5:d0:9b:da:94:4f:4f:e8:d1:31:6c:76:e6:b3:8c:be:
81:aa:23:55:7d:ad:93:7c:a1:72:fd:05:18:f6:ca:d8:94:06:
b8:b6:dd:71:c7:3c:23:85:b6:b4:fa:28:45:af:74:d3:e4:6a:
a9:bf:c7:f3:5f:b4:23:49:50:70:3e:ba:76:bf:92:a8:49:2f:
c0:16:06:a9:dd:5c:d5:b6:36:9a:ff:ad:fd:52:28:c0:d1:95:
f1:32:8a:ab:e6:6a:88:34:d6:5d:c2:fd:d8:da:07:1f:72:a9:
6f:36:da:15:a4:b2:d8:b1:ee:95:65:0c:92:57:4b:05:5b:84:
a3:a9:77:55:ab:46:46:98:cc:3c:c6:75:4c:5a:70:ac:c3:02:
33:eb:e7:b0:8f:7d:eb:a2:c0:a8:c4:b6:11:ca:1c:9e:cd:47:
20:1c:3a:64:b6:19:8d:fb:a0:e7:d5:e7:29:2b:d7:fa:86:f5:
cf:da:9f:9a:45:c1:93:2c:f5:b3:90:0d:6e:c4:3e:d5:56:43:
ab:dd:79:cb:2a:07:f3:55:35:1b:5d:d3:88:58:8a:5b:56:84:
e8:e1:0d:76:52:92:b0:b2:1f:ec:c2:8e:20:b3:77:4d:66:1f:
b3:d3:00:fa:81:61:55:63:9a:46:87:82:aa:04:43:7d:df:1f:
48:f1:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:23:52 2025 by rpki-client