Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/a4f5fa37-8897-3816-b342-35470edfac9f.roa
File: a4f5fa37-8897-3816-b342-35470edfac9f.roa (raw, json)
Hash identifier: gK+c9NnmukdkQBgyzCOas0tgKXX2EJXziLgok93TLo0=
Subject key identifier: 9E:B7:02:11:7C:53:3C:7C:DF:9B:9B:71:9E:21:F1:AB:4B:6C:B7:83
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F43285844720AE6BB35945E71310F0900
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/a4f5fa37-8897-3816-b342-35470edfac9f.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 15169
IP address blocks: 207.126.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:e6:bb:35:94:5e:71:31:0f:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=53513a06-3ef4-471a-85fc-882210803b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:6d:01:fe:31:7b:27:aa:0e:5c:81:e3:2c:
17:7e:f7:35:d6:18:b2:c3:77:11:0a:02:d6:bc:e6:
68:f8:37:df:8b:9d:8d:64:07:8f:73:71:e2:a9:1d:
9d:2c:75:b1:e3:a1:42:ac:16:0d:85:4b:62:62:18:
63:26:bc:11:6d:3d:94:a4:e3:74:54:94:8a:8a:a8:
90:1d:ed:dd:49:94:41:0d:a3:98:8a:8f:14:b6:12:
64:17:ef:ef:5d:b0:96:97:25:93:85:7a:14:3d:e1:
3a:77:84:4f:b9:18:90:f4:12:1b:1a:86:a5:80:15:
5a:ec:73:e6:3f:ac:16:d8:73:8e:fc:f1:cb:e9:c8:
a5:6e:c7:7c:5f:d2:4b:a8:c7:94:10:3a:68:be:4d:
1e:e1:66:74:7e:cf:f5:1b:40:8e:e0:37:08:d2:0b:
41:89:9c:ed:70:3e:45:ba:d1:65:f5:4e:23:23:75:
07:06:60:63:13:f2:84:82:e5:56:74:51:03:62:70:
84:f7:b0:b3:93:6c:40:b7:10:bf:21:f1:5f:36:e9:
21:21:60:ec:55:75:72:07:eb:86:93:e0:6a:03:8c:
4d:11:1c:20:26:60:52:5d:70:a8:d7:16:56:ad:62:
ea:00:69:66:90:a4:4d:d7:8b:77:95:dc:8e:d4:f6:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B7:02:11:7C:53:3C:7C:DF:9B:9B:71:9E:21:F1:AB:4B:6C:B7:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/a4f5fa37-8897-3816-b342-35470edfac9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:54:57:95:95:59:30:f7:9b:fc:99:1d:2f:fa:86:66:57:3d:
38:02:40:a6:08:63:dd:4a:8b:b7:39:69:c7:e2:10:76:72:96:
aa:34:3b:6d:8e:19:7b:d2:87:b2:b3:c5:74:7c:66:45:6a:08:
c6:05:c4:45:8b:9c:db:9d:d4:5d:de:71:c1:6a:fe:a0:df:02:
6e:5b:75:ca:80:92:41:1d:ae:42:e1:c1:f0:d0:38:6a:97:ca:
ba:b4:b8:5d:d8:09:2b:60:be:eb:7a:65:88:3b:16:94:93:db:
18:3f:25:0f:f0:88:52:d5:a7:ab:ca:7d:d4:d8:de:56:42:ad:
52:50:c9:71:14:f1:55:1f:c1:ec:7d:d9:44:76:5f:3d:d9:a8:
8b:cd:88:06:14:ad:51:04:1a:9c:9d:7e:79:89:77:31:ea:09:
1e:49:9c:b6:b7:c4:e3:b9:4e:7d:5b:2c:15:1e:bc:09:09:fe:
73:4b:03:11:a1:69:57:10:a2:13:80:4f:c9:d0:f1:25:fb:7b:
4a:1c:95:b3:3e:43:78:ce:45:6f:d1:f4:d7:41:82:73:88:cb:
58:a9:25:e5:0e:ba:ef:06:cf:2f:5a:ef:98:e9:3b:76:78:0b:
73:5e:d1:f9:0b:9e:95:65:a0:93:da:40:19:a9:2a:32:36:71:
d5:ca:92:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:47 2025 by rpki-client