Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0e74a49f-1e9c-3302-b5c6-bbe4da60f0a6.roa
File: 0e74a49f-1e9c-3302-b5c6-bbe4da60f0a6.roa (raw, json)
Hash identifier: 8Rms/fP7XawLCGbVvhFogAFfZhkSuiOVu4hy4yG1tZE=
Subject key identifier: D5:D8:16:C0:7B:5C:1F:7C:9C:15:9A:51:BB:81:81:13:0E:E3:9A:2E
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285842F4835FA0FF3690D2EE866540
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0e74a49f-1e9c-3302-b5c6-bbe4da60f0a6.roa
Signing time: Mon 21 Aug 2023 05:27:12 +0000
ROA not before: Mon 21 Aug 2023 05:27:12 +0000
ROA not after: Sun 19 Nov 2023 06:27:12 +0000
asID: 198064
IP address blocks: 140.228.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:f4:83:5f:a0:ff:36:90:d2:ee:86:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Aug 21 05:27:12 2023 GMT
Not After : Nov 19 06:27:12 2023 GMT
Subject: CN=6529fef1-d663-434d-968c-b162474b0393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fd:06:bc:6c:72:3c:7e:ec:d8:f2:0d:2f:b4:
46:db:62:46:34:ea:be:52:56:61:c3:38:df:ab:03:
1c:ab:84:47:02:8c:be:4e:51:c3:10:26:2f:d7:24:
17:2b:72:02:82:cf:cf:a2:c1:de:6a:a9:ed:46:5d:
c7:5c:cc:02:b4:0d:57:cb:65:83:76:2f:09:c8:63:
ed:7e:d9:21:63:59:f0:76:a6:16:4d:4a:93:56:e6:
36:af:e5:67:c7:1f:a4:3e:28:88:da:1e:62:e4:c0:
85:af:71:d8:42:e2:5d:4c:07:5c:8e:6f:64:f8:89:
63:29:ee:38:11:b3:64:55:49:47:4f:2c:a6:d1:e3:
19:71:b8:d2:d4:f4:3d:43:09:12:f5:2c:80:70:f9:
c3:65:50:c0:71:31:a5:2d:8e:e5:48:73:e6:ac:9a:
d1:02:54:19:f3:b8:ea:62:cc:34:55:96:4d:2a:f0:
2d:8c:75:35:bb:90:fa:e8:66:cd:12:b5:af:50:a6:
43:1e:0c:71:53:b6:f3:8a:1f:19:fd:06:1b:d8:67:
7e:b7:9b:31:09:ac:b6:19:05:de:7c:d8:fe:a9:49:
69:1a:b6:73:8f:6b:12:56:aa:76:fc:dc:63:dc:92:
fd:9c:cf:1a:a4:86:bb:af:a6:c1:cf:7b:91:30:48:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:16:C0:7B:5C:1F:7C:9C:15:9A:51:BB:81:81:13:0E:E3:9A:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0e74a49f-1e9c-3302-b5c6-bbe4da60f0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.228.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:fa:eb:0c:6a:55:5b:c0:b9:83:01:af:f1:9d:e5:cb:67:4e:
ce:eb:f0:dd:ae:77:4c:b4:16:a0:03:8c:9e:c9:c4:9b:c0:fb:
d1:99:99:2f:a6:1b:2b:53:d4:47:42:29:42:78:87:32:ea:aa:
51:0b:cc:1c:b2:22:58:c5:76:15:96:a6:97:9c:23:b5:d6:92:
87:36:75:b8:f1:48:5b:7d:85:8a:2c:60:dd:9b:f6:05:91:bb:
76:30:6b:35:b3:5b:a6:7a:b2:de:32:19:67:95:5b:30:cd:54:
98:c9:d3:8a:73:30:7c:93:36:15:c8:a1:b3:69:4c:49:51:71:
7a:18:dc:24:14:28:30:92:f7:11:00:ee:98:2c:dc:56:4e:52:
a7:20:74:55:9b:e4:89:ef:f1:d3:a9:da:5f:a0:56:2f:f4:26:
30:ce:1c:e0:0f:96:ee:3d:61:c3:34:be:0d:c9:c1:37:a1:47:
b8:70:ef:c5:9d:49:67:54:bf:84:f6:62:c3:8a:97:8c:af:2a:
32:f5:c7:5f:b7:e5:73:ea:1a:4e:fe:1d:1e:21:f6:f7:39:39:
41:75:6e:3a:71:a5:c4:ed:71:cc:9b:72:7b:be:9d:ed:67:b7:
fb:3f:fa:b1:93:df:ad:21:f7:d9:e4:54:c4:ef:a1:40:5c:f2:
fb:6e:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:23:22 2025 by rpki-client