Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24373f3c-5ad0-3271-b115-88303940a3fb.roa
File: 24373f3c-5ad0-3271-b115-88303940a3fb.roa (raw, json)
Hash identifier: xFy82erjpVgKt3vLbas1Q0mpCoaLdVh0wGk7jEOW6Sg=
Subject key identifier: 07:95:77:D0:A5:E7:66:FF:19:74:2C:78:D5:91:2F:C8:46:00:DD:66
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328583B67F004F329D66E65FE225AC0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24373f3c-5ad0-3271-b115-88303940a3fb.roa
Signing time: Wed 30 Sep 2020 04:00:00 +0000
ROA not before: Wed 30 Sep 2020 04:00:00 +0000
ROA not after: Sat 31 Dec 2022 05:00:00 +0000
asID: 40065
IP address blocks: 107.148.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:67:f0:04:f3:29:d6:6e:65:fe:22:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Sep 30 04:00:00 2020 GMT
Not After : Dec 31 05:00:00 2022 GMT
Subject: CN=8c3c2bc2-af56-4015-a6ad-a021594d69f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:aa:64:53:0c:f3:be:b6:c9:8e:21:b9:78:
12:f3:df:70:dc:51:50:19:80:98:d5:de:2a:51:79:
e0:83:b2:89:86:9f:8c:19:50:c5:f7:4b:39:4a:20:
5b:d9:74:c5:d2:b9:7a:07:68:ac:ba:a0:9b:f2:b8:
ce:cc:12:76:d9:19:55:48:ca:d6:28:28:ce:49:ce:
c3:fb:d3:d3:3d:72:2b:5d:a0:3e:41:60:b7:79:b8:
94:2e:bd:63:0c:76:b3:fd:a6:95:c3:00:04:21:b6:
b6:06:6b:3a:55:64:ff:52:3b:a1:c8:f1:32:c7:bf:
db:27:4a:57:3d:8e:34:9a:9a:d1:c9:28:ff:2d:6d:
ed:e3:86:83:e2:4a:a8:98:f4:46:52:91:66:bb:27:
d5:3a:bc:1b:ee:58:e0:02:4a:e3:94:c3:78:ea:4f:
d1:11:27:dc:6b:e3:0d:ca:6d:42:a0:9a:5c:9f:7d:
e4:cc:5d:a5:3f:0d:e6:01:58:f4:4e:09:a6:89:80:
d8:6b:e0:a6:a8:a4:3c:40:6e:8e:bf:71:a5:7d:25:
c4:db:38:21:24:c5:e1:ff:fa:9e:fa:7e:0b:31:c9:
c1:e9:b6:82:c8:fd:4e:4f:17:23:75:ef:9a:19:60:
77:0f:ff:91:e2:18:c4:ab:bd:37:9b:98:8a:71:09:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:77:D0:A5:E7:66:FF:19:74:2C:78:D5:91:2F:C8:46:00:DD:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24373f3c-5ad0-3271-b115-88303940a3fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:3c:25:70:77:2f:32:6e:d2:e0:8a:ad:21:be:13:e0:db:cf:
13:c9:60:7b:45:ae:62:4d:fa:9b:fb:7d:35:f9:f8:b7:ff:ca:
8a:33:c2:49:b2:e3:37:97:a1:20:6a:a9:32:78:22:3d:28:6f:
26:c3:f5:29:25:31:9e:7b:2d:75:8c:58:b8:8c:7d:54:09:df:
25:39:5b:da:ad:fb:a7:31:40:c2:a1:a6:b5:5c:4d:33:0b:65:
38:65:0e:28:04:7d:61:37:a3:9f:c4:9b:d5:ee:1e:40:e3:eb:
29:9f:c4:55:44:48:04:20:4b:e5:32:78:fb:51:cd:ef:10:d7:
09:7d:96:90:6d:3a:bf:a5:41:e7:b2:e9:70:3c:7c:94:62:11:
b6:e4:bd:52:cc:a4:22:ed:db:01:59:27:9b:cb:b0:f4:4f:a0:
3e:22:f0:fc:f1:09:9c:3a:4c:a9:72:c3:3d:b9:49:d1:2f:bc:
02:48:8a:bc:d3:22:0e:48:e7:cb:a9:98:d0:f6:36:2f:75:85:
d9:10:47:05:f4:5d:17:77:db:88:4f:8c:fb:a7:4c:1a:69:0d:
27:00:97:41:2b:f2:75:a2:64:2f:eb:f6:d3:80:88:fc:a2:c4:
09:34:4d:d8:5b:6e:b6:be:78:86:8d:7a:d8:a0:07:21:27:1c:
3e:5d:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:57:30 2025 by rpki-client