Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8a1c32df-3b89-33bb-8ba3-aa1282914609.roa
File: 8a1c32df-3b89-33bb-8ba3-aa1282914609.roa (raw, json)
Hash identifier: MljT1r9vTZUtMspC5OaZyj6NYxpA9Gwiqpi4h7C3bbM=
Subject key identifier: 27:4E:5D:70:81:46:7E:2C:C1:C4:89:BF:55:4E:E0:8E:69:DC:46:1E
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F4328584819745A991A563BEA9074B9E0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8a1c32df-3b89-33bb-8ba3-aa1282914609.roa
Signing time: Wed 04 Dec 2024 22:56:32 +0000
ROA not before: Wed 04 Dec 2024 22:56:32 +0000
ROA not after: Tue 04 Mar 2025 22:56:32 +0000
asID: 834
IP address blocks: 162.33.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:74:5a:99:1a:56:3b:ea:90:74:b9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Dec 4 22:56:32 2024 GMT
Not After : Mar 4 22:56:32 2025 GMT
Subject: CN=539639df-cdec-42e3-90f7-3aca57788e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:13:6d:29:94:70:1f:35:0b:85:4c:f5:21:
2f:34:73:0b:b5:87:35:80:49:3c:b8:44:7d:b0:6a:
81:27:5c:95:80:1c:9f:01:93:f4:db:1e:82:a0:69:
a6:d7:ea:71:29:56:06:a5:16:85:4d:c0:58:03:21:
d8:d3:79:16:46:44:7c:c2:1f:2d:bf:01:f4:e1:83:
58:ee:ba:00:7e:cf:cc:f4:c3:f4:1a:3a:84:84:7e:
28:38:20:bd:08:7d:b1:f7:98:0f:e4:79:ca:7a:09:
01:fa:9d:8d:2f:81:e4:f7:34:66:d1:11:e9:fa:64:
9a:ad:cd:b3:95:e4:01:09:b4:96:e2:45:18:b5:42:
15:48:50:13:e2:0c:54:c5:26:c1:ca:25:a3:70:ba:
7f:c2:2b:65:10:49:68:26:e2:f0:41:bf:f5:57:0f:
16:2b:46:c0:3b:30:f0:02:dd:d0:76:44:62:45:f7:
ca:ec:0f:7a:4a:56:94:0a:64:b1:bc:34:6a:03:dc:
ee:d6:e7:f7:b4:8e:19:32:22:9e:d0:1b:46:c7:38:
38:ed:c4:79:43:80:46:23:2a:3f:0d:90:ec:0d:5d:
5f:38:7c:36:22:d3:58:c8:49:f7:a6:26:5a:ec:59:
50:e3:be:9a:55:79:fc:f2:34:92:52:10:01:5b:a6:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4E:5D:70:81:46:7E:2C:C1:C4:89:BF:55:4E:E0:8E:69:DC:46:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8a1c32df-3b89-33bb-8ba3-aa1282914609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.33.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:59:61:30:e2:54:98:6e:ee:8d:cc:32:e6:6c:64:59:4c:89:
81:07:db:84:f1:f1:44:b2:92:4b:14:76:24:ed:f3:8b:bc:98:
4c:c9:7a:92:d1:c7:38:3e:73:05:59:b7:38:9d:cb:3f:7b:91:
0d:3a:53:ba:cf:93:ae:1f:fe:6a:e1:9a:d8:a5:3d:87:e5:6c:
b5:c2:18:eb:ff:ef:74:95:79:bb:45:29:d5:ea:8c:39:ae:96:
fc:3c:9c:2c:c8:29:9e:b0:ca:f5:e7:21:d9:e4:3a:1c:a2:a3:
80:87:d1:d2:af:3a:70:58:82:3f:a3:c7:5e:b4:56:1f:83:90:
55:f5:87:e4:5e:91:c4:43:f3:9d:fc:99:1f:75:5d:df:ab:94:
4a:b5:af:ef:78:d5:80:5d:bd:32:7a:b5:da:9a:3b:39:c1:81:
0b:f4:d9:76:3f:6a:e6:ed:8a:60:b5:5d:ab:c4:bb:46:c6:79:
06:0a:fa:47:bb:bf:34:5b:50:7a:b4:67:cf:1c:72:3d:ad:4d:
44:ae:d3:3f:e8:d8:80:4c:39:da:81:28:2d:6c:96:2e:9f:6f:
6a:fd:ab:6d:72:1b:31:97:89:01:f3:a7:93:c1:69:4c:3d:3e:
9d:b8:35:f0:64:a3:85:17:c0:14:8f:df:d0:8b:df:a9:3d:a4:
4d:55:b1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:57 2025 by rpki-client