Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4a9b0c50-7bca-3d81-94e0-2ea18a09fd4d.roa
File: 4a9b0c50-7bca-3d81-94e0-2ea18a09fd4d.roa (raw, json)
Hash identifier: r8ObEWBPZzzrvIcxPFW0b6YcNldT+MiH7AaytkpxTVU=
Subject key identifier: DE:FA:B6:E4:0D:59:C5:04:76:71:FE:F0:E5:D8:BF:27:59:CB:57:F1
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F432858482C241D5C8F9F8549A1D7CCC0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4a9b0c50-7bca-3d81-94e0-2ea18a09fd4d.roa
Signing time: Wed 11 Dec 2024 15:35:13 +0000
ROA not before: Wed 11 Dec 2024 15:35:13 +0000
ROA not after: Tue 11 Mar 2025 14:35:13 +0000
asID: 64315
IP address blocks: 141.140.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:24:1d:5c:8f:9f:85:49:a1:d7:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Dec 11 15:35:13 2024 GMT
Not After : Mar 11 14:35:13 2025 GMT
Subject: CN=1eee262b-0979-44b5-8d3f-32d8653f2de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:51:bf:c4:57:62:5f:bc:02:03:f5:f4:d8:
3c:a2:a5:7c:4d:ff:d8:11:ed:3a:8b:a6:fd:39:6a:
93:f4:74:6a:62:21:86:35:fc:38:6d:ab:39:94:4a:
bf:d8:a1:fe:34:14:12:12:65:8c:8c:fa:74:4a:c4:
2d:50:9f:cf:11:b8:85:bd:a5:70:d0:5c:b9:97:d4:
0d:dd:ed:2a:f5:af:63:20:be:af:23:72:63:1c:00:
a6:aa:86:70:9c:a3:c8:6a:b1:7b:9f:26:90:38:c8:
15:15:be:94:15:05:04:80:3f:7b:61:fa:04:83:fc:
1a:04:d7:71:71:e4:b2:a8:d9:a7:90:9e:cc:e3:bc:
e6:87:26:01:b7:0f:b8:85:50:a4:10:2e:07:dc:f1:
5d:11:3a:ee:88:42:93:22:b1:85:c9:11:71:59:01:
e7:8a:04:53:a4:77:64:01:de:5e:3a:16:28:28:ad:
29:fe:33:d7:a8:7d:b9:83:dc:b9:43:ad:fa:36:75:
52:28:15:e4:83:0a:19:05:6f:40:d9:6b:6b:be:43:
9f:c3:2f:2e:0a:50:ac:3a:1d:39:2a:fe:b9:0b:13:
16:51:ef:82:3f:84:5d:d8:f9:2a:59:51:e0:66:36:
91:d8:d1:2a:fc:9e:21:19:c3:79:24:cf:e7:b0:0a:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FA:B6:E4:0D:59:C5:04:76:71:FE:F0:E5:D8:BF:27:59:CB:57:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4a9b0c50-7bca-3d81-94e0-2ea18a09fd4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:0e:fa:80:82:2c:23:05:40:49:c5:56:86:7e:20:4f:da:bd:
6a:ec:ea:c6:4f:bd:67:60:37:a9:25:11:9c:15:da:27:2a:db:
b9:df:3a:e6:31:76:73:37:4b:08:a1:b4:3d:de:b7:95:6b:bf:
fc:8d:02:66:60:d6:c7:28:7f:10:38:7a:29:98:5e:be:d1:a9:
57:a1:1f:ee:c6:cd:26:17:9a:a6:e2:64:77:81:96:77:15:38:
7c:d8:05:0d:1b:c4:2c:40:36:4f:f4:10:32:73:bc:74:4b:49:
3e:17:57:de:50:e1:7a:b8:a3:fd:92:a9:6b:20:85:1e:c9:96:
16:c2:ef:71:f2:97:e2:18:be:5c:5a:93:6d:d3:53:83:54:03:
a7:64:f0:68:b5:79:1b:32:b2:cb:a2:12:7d:ba:20:18:bf:99:
52:00:09:be:94:16:0d:c9:c9:67:13:70:51:f5:0b:05:ec:08:
60:f1:fa:2e:0c:98:17:b1:1c:9b:94:2f:67:f8:fb:29:c2:ed:
01:46:1b:fd:0f:23:04:1f:d6:a2:3a:53:7b:76:5d:bb:01:65:
64:7e:a1:8f:0b:a3:25:52:e5:c2:86:2e:6d:52:f0:a3:95:ee:
59:b4:2a:b1:f3:f3:29:88:33:47:2c:66:c5:87:fe:71:43:4a:
96:4a:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:18 2025 by rpki-client