Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/3cce375d-4d0d-3874-b624-e1ebc81ca74c.roa
File: 3cce375d-4d0d-3874-b624-e1ebc81ca74c.roa (raw, json)
Hash identifier: +BFIbbZR7Od0FfT5/Lw5UlSqphLZK0VzYllIwT7EZQU=
Subject key identifier: 72:18:B2:8B:15:42:2E:5E:DD:3A:BA:56:0C:28:A0:F0:B1:DF:33:EB
Certificate issuer: /CN=b794e507-3ed1-4151-855d-6305696fcb0c
Certificate serial: 010D0C9F43285847C4F82E2C349D251FD6B06F80
Authority key identifier: D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/3cce375d-4d0d-3874-b624-e1ebc81ca74c.roa
Signing time: Mon 04 Nov 2024 16:38:26 +0000
ROA not before: Mon 04 Nov 2024 16:38:26 +0000
ROA not after: Sun 02 Feb 2025 16:38:26 +0000
asID: 26464
IP address blocks: 165.225.128.0/24 maxlen: 24
165.225.129.0/24 maxlen: 24
165.225.130.0/24 maxlen: 24
165.225.131.0/24 maxlen: 24
165.225.132.0/24 maxlen: 24
165.225.133.0/24 maxlen: 24
165.225.134.0/24 maxlen: 24
165.225.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c4:f8:2e:2c:34:9d:25:1f:d6:b0:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b794e507-3ed1-4151-855d-6305696fcb0c
Validity
Not Before: Nov 4 16:38:26 2024 GMT
Not After : Feb 2 16:38:26 2025 GMT
Subject: CN=ead79be8-4c42-46a4-a80b-fb4ae7401fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:37:fa:30:96:7e:91:95:11:43:ce:3f:bf:
34:f2:0f:98:c2:eb:d7:6f:d8:88:86:81:ad:d3:d0:
f3:ae:54:ca:c0:b0:95:67:3d:7d:7a:8b:df:92:af:
9b:dd:38:de:98:97:b7:3f:3b:4b:66:20:ce:58:84:
0c:dc:42:fd:bf:37:b3:50:12:16:44:bf:0b:71:aa:
ed:b5:bb:9e:ae:de:5d:fc:5d:45:2d:bc:16:e8:8f:
21:55:4b:55:ef:d6:a1:53:be:bd:cd:6b:bb:dd:1d:
94:30:3a:c3:eb:45:1d:93:d4:02:79:93:12:97:2f:
04:52:a4:25:0c:c2:c5:dd:66:c7:8a:2e:9b:12:ec:
5a:b0:ea:ac:0d:34:22:31:1a:df:d1:d9:95:d0:94:
c0:e4:43:f1:fb:a1:13:ec:94:42:66:1f:1b:b9:94:
2c:06:ff:71:95:c1:cd:85:1d:06:01:12:d9:37:45:
54:3b:24:41:83:2d:50:5b:62:57:34:d6:89:19:08:
5d:fc:3a:78:c7:2e:8d:bb:19:80:10:fb:78:cb:07:
0e:da:5d:a3:e7:3f:4e:dc:b6:79:ed:b5:a0:f9:62:
5c:b9:a8:c6:e7:41:d6:91:dc:02:74:dc:03:0f:e0:
40:d5:22:d0:bb:a7:37:de:ed:52:f8:00:c9:90:9c:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:B2:8B:15:42:2E:5E:DD:3A:BA:56:0C:28:A0:F0:B1:DF:33:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/3cce375d-4d0d-3874-b624-e1ebc81ca74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl
X509v3 Authority Key Identifier:
keyid:D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
sbgp-ipAddrBlock: critical
IPv4:
165.225.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ed:8c:fb:17:f7:4b:2b:54:b2:16:f6:28:0b:45:f1:70:76:
eb:9a:3b:3d:9d:17:c9:4e:b6:84:69:bf:81:66:71:44:c6:83:
89:47:55:de:63:fd:f8:db:1a:1a:4a:5b:0d:0f:ef:6c:0b:51:
28:e7:ae:39:e6:35:95:df:dc:95:ca:a7:8a:fc:2d:fb:4c:3c:
1d:e4:89:e5:72:b5:21:6c:4a:3c:2e:64:2e:b5:e1:cf:d2:5e:
9b:61:80:15:a9:45:02:7c:3f:dd:2c:92:b2:61:7f:51:bd:5a:
c0:1f:09:77:a8:e0:02:74:ac:f6:19:1a:fc:15:26:35:c5:78:
cf:e0:5f:fb:92:4e:e4:17:69:0b:79:c1:b6:97:36:a7:79:3a:
88:28:9f:29:be:bc:f6:67:f9:62:a7:cd:d3:06:62:d9:d3:40:
91:76:15:af:d0:8b:e2:aa:04:bc:12:f5:22:3b:34:73:46:53:
42:f0:64:b5:76:91:e4:4b:90:db:52:27:c9:61:25:dd:e9:72:
b3:04:5b:6e:79:98:cc:d2:dc:20:ab:0c:a6:6c:dd:e3:b7:43:
e5:e0:0d:51:ad:a8:97:d6:ee:71:23:4b:a9:f1:bd:fa:0e:6a:
4e:df:46:44:60:39:b7:dc:0b:6a:6d:b5:06:ca:3f:7e:01:83:
af:af:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:38 2025 by rpki-client