Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a512d71a-51f9-3543-9bec-031e3f680a37.roa
File: a512d71a-51f9-3543-9bec-031e3f680a37.roa (raw, json)
Hash identifier: 9h54JaVvZh24j7NFOlRc1wQBgBQkPNAT2c2Z4r03lzA=
Subject key identifier: 57:61:75:E0:E6:08:D7:58:5E:6D:18:DF:56:F6:CB:07:80:2C:8C:98
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285846D8CFFE5CA6EB1D00A2E69000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a512d71a-51f9-3543-9bec-031e3f680a37.roa
Signing time: Mon 12 Aug 2024 02:26:42 +0000
ROA not before: Mon 12 Aug 2024 02:26:42 +0000
ROA not after: Sun 10 Nov 2024 03:26:42 +0000
asID: 834
IP address blocks: 43.255.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d8:cf:fe:5c:a6:eb:1d:00:a2:e6:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Aug 12 02:26:42 2024 GMT
Not After : Nov 10 03:26:42 2024 GMT
Subject: CN=a95d467a-1a05-4bec-a170-70ff4f967d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:67:b2:94:3f:d7:43:1c:ad:12:57:49:9b:
b4:10:93:b8:b4:87:f0:5a:b8:2f:b0:ca:4c:aa:27:
f9:b1:a9:93:a7:26:8f:1a:4e:45:c4:10:76:56:05:
35:66:2e:1c:62:a5:0b:f6:11:31:6e:cf:85:e3:d1:
92:d4:c0:22:58:e1:08:cf:b2:99:d0:b0:08:a6:91:
29:c7:60:2a:a3:1e:b6:5a:7f:d8:67:97:7c:5f:84:
e8:c5:2d:0b:9d:cc:3e:5f:db:4c:7f:4d:77:be:4c:
0a:00:ae:64:d8:80:5d:84:0b:c6:e9:f9:a6:67:5b:
5c:0f:4a:82:f6:ea:5f:db:00:33:45:f2:b5:ab:09:
63:42:fc:51:bc:24:bf:d9:f4:ad:ca:b1:1d:00:aa:
18:28:86:30:3b:ae:c6:b2:bd:cb:fd:5d:05:f4:b0:
b6:a5:e3:2c:3c:9f:07:45:25:34:eb:70:dd:cb:49:
0a:59:6d:96:e4:79:2b:c4:96:86:c8:1d:28:41:2d:
6c:55:ed:e5:a9:6b:8f:54:9b:b8:99:43:3f:67:93:
97:4b:a6:3e:e6:a9:a7:80:73:d9:96:8a:85:61:31:
ce:df:c3:0b:af:38:fa:72:41:5f:51:02:ee:76:f3:
8e:ee:83:a3:5b:5f:ec:74:ec:79:c4:fb:fb:fd:1a:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:75:E0:E6:08:D7:58:5E:6D:18:DF:56:F6:CB:07:80:2C:8C:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a512d71a-51f9-3543-9bec-031e3f680a37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
43.255.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:4c:6b:cb:3e:94:65:c2:56:1f:7f:ca:ce:f4:89:23:b3:10:
f4:61:41:ac:1d:8f:c4:d7:2d:52:17:95:19:84:2a:14:06:b9:
31:c3:38:73:6e:5e:22:8c:25:8b:ac:80:8d:6a:2a:26:9e:b0:
39:78:9b:4d:c5:85:6c:27:3b:bd:5d:eb:7b:2c:ac:38:08:01:
bc:78:3c:ba:9e:e5:29:ab:07:05:cd:e2:dc:24:82:e1:dc:9a:
31:b2:ce:33:99:62:21:88:d9:c3:cb:1f:65:06:71:60:c0:d4:
65:fe:41:d0:af:eb:b0:89:38:3a:1c:85:09:8d:0b:b9:ab:5e:
45:93:23:03:33:f3:7f:d8:bd:07:d0:f2:db:42:7f:1e:b8:ed:
0f:5c:72:6e:bb:90:8d:3b:16:64:ba:c3:73:e7:f9:07:5a:e8:
39:ad:84:d0:93:c4:c1:e0:a0:1a:41:d5:87:27:11:4c:2e:ab:
4a:bd:3b:52:f0:6f:98:96:dd:55:f7:f0:40:09:44:98:ea:f1:
44:bc:0c:cb:05:dc:a7:12:f4:6e:3a:63:92:a9:06:1d:e1:9d:
27:15:74:27:89:f6:8b:90:59:20:bf:a1:2e:02:4d:8b:6b:11:
60:db:89:91:8d:37:7e:f5:74:d1:40:d9:17:d5:62:f8:7f:68:
a0:21:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:22 2025 by rpki-client