Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d9b5ca93-b2fc-33d1-9580-8fbf19017e2c.roa
File: d9b5ca93-b2fc-33d1-9580-8fbf19017e2c.roa (raw, json)
Hash identifier: wTN50f1iAV+ntYD55siPWN1002hdBqOpD4E/0YvYKd8=
Subject key identifier: 9D:22:AE:11:9D:59:4A:18:B4:B1:53:DB:F1:CE:B6:82:49:BC:B8:53
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285846778ADDE795A3AB6538AEDE00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d9b5ca93-b2fc-33d1-9580-8fbf19017e2c.roa
Signing time: Mon 08 Jul 2024 06:14:00 +0000
ROA not before: Mon 08 Jul 2024 06:14:00 +0000
ROA not after: Sun 06 Oct 2024 06:14:00 +0000
asID: 834
IP address blocks: 185.194.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:77:8a:dd:e7:95:a3:ab:65:38:ae:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jul 8 06:14:00 2024 GMT
Not After : Oct 6 06:14:00 2024 GMT
Subject: CN=dc940368-7d24-4c38-98bd-46ce459bae68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:2c:88:54:d9:d6:90:d4:8a:cb:a5:91:9d:
80:97:93:6b:30:0d:08:41:18:95:67:b4:f5:7e:b4:
63:dc:3c:98:6b:7c:9d:65:d3:22:3c:67:1e:c6:68:
1d:c2:01:7e:cc:76:45:ee:69:88:c6:ac:3c:85:ba:
51:a3:7d:4c:ca:95:1b:5a:9a:91:6f:fa:90:76:fc:
32:1a:68:b1:26:b3:2e:bf:6e:3b:f3:8c:b9:80:58:
93:8f:b0:57:5c:c2:62:33:6b:12:7c:04:c5:6a:b4:
00:d0:e4:5d:92:df:40:51:2b:68:9e:5e:61:22:1b:
c2:d7:c7:06:92:c7:da:33:5d:cb:78:89:9d:8f:56:
6b:a6:40:79:fe:4b:e6:58:99:b4:24:b2:f4:4c:5a:
d6:bc:1b:bc:b9:3b:a9:b2:16:42:00:5b:de:59:de:
33:18:50:a7:22:30:db:2a:19:f4:a0:01:ca:b5:89:
0d:4e:3f:7e:3f:09:4c:8f:0e:d8:64:fe:34:e0:1c:
69:74:97:fc:ba:78:9e:c8:b4:6e:ac:5f:b5:a7:4e:
b7:d3:7f:0b:eb:41:9a:ee:f4:33:74:85:47:81:a7:
3e:1a:6f:22:68:9b:5b:13:81:7a:a8:d0:ff:c3:aa:
e5:f8:bd:b0:fa:54:fd:7f:c0:9e:e7:19:48:78:75:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:AE:11:9D:59:4A:18:B4:B1:53:DB:F1:CE:B6:82:49:BC:B8:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d9b5ca93-b2fc-33d1-9580-8fbf19017e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
185.194.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:4f:7e:8a:27:b1:33:43:89:6e:f5:84:ab:c6:c6:33:57:9c:
76:1b:55:a0:a1:25:7f:5b:52:b4:7b:26:d4:17:1c:fb:69:25:
3e:b2:e2:4f:84:d3:aa:a5:22:8f:04:57:b5:c9:77:7c:8a:7a:
9d:9a:34:4b:0e:be:6b:d9:7f:7a:e2:9f:af:4b:a7:83:e9:ac:
51:85:34:a9:4a:b1:80:af:5f:e2:bb:be:b9:62:33:9a:94:16:
ae:99:8a:b0:42:10:7c:9f:81:d5:bf:db:70:59:cc:c4:18:62:
b9:fd:09:d4:44:a1:0f:bf:ab:3f:96:e1:8a:71:5e:9c:11:36:
66:a8:76:f2:ad:b0:95:e5:11:d4:10:0d:d2:06:48:83:28:d7:
82:75:69:a3:c9:8d:c0:74:da:c2:df:cf:2a:bd:9b:52:bd:77:
e5:ea:f5:7c:1d:c4:0d:4d:40:03:fb:9f:d5:a4:5d:93:e3:f5:
5d:36:e1:22:b0:7f:2e:a5:f0:15:28:48:f2:b2:21:6f:25:47:
e3:ba:c0:bb:9d:b8:e4:90:cb:59:6c:e3:8b:52:f9:c8:24:54:
3f:52:22:ad:fe:b1:f8:a4:26:d8:98:38:37:57:99:cf:90:0c:
ee:8b:70:b9:7d:52:c0:c1:50:a1:86:67:7c:38:0f:22:eb:81:
72:a0:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:37:53 2025 by rpki-client