Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/718bf198-078c-351c-bd31-c25e174819a1.roa
File: 718bf198-078c-351c-bd31-c25e174819a1.roa (raw, json)
Hash identifier: 5rU3NHIsy6b0xUcVJz85qf1Mk6rL+ha/smu8/sZ/los=
Subject key identifier: 0B:9A:92:1C:03:CE:27:F4:F6:85:E9:33:A6:17:B6:40:12:BE:D3:8C
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F432858482C2B4ADA7EC3D4CB9A1011C0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/718bf198-078c-351c-bd31-c25e174819a1.roa
Signing time: Wed 11 Dec 2024 15:49:41 +0000
ROA not before: Wed 11 Dec 2024 15:49:41 +0000
ROA not after: Tue 11 Mar 2025 14:49:41 +0000
asID: 136796
IP address blocks: 141.140.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:2b:4a:da:7e:c3:d4:cb:9a:10:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Dec 11 15:49:41 2024 GMT
Not After : Mar 11 14:49:41 2025 GMT
Subject: CN=de91c2b2-431c-4f5e-9d43-34f812d16874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:b1:e5:64:b9:7c:75:4a:a5:fe:83:7f:f8:
d1:43:2e:1f:b1:ad:3d:ea:99:29:4f:7a:f8:bb:69:
35:7a:b8:61:c2:f2:d0:e0:42:b5:a3:14:90:65:e3:
bc:72:93:94:6f:91:ef:e7:46:c9:9f:82:a6:06:d3:
ac:eb:32:1e:90:14:c0:b5:29:a4:c6:df:4c:6b:4e:
76:3d:23:c7:65:c3:e4:2a:7c:2e:e9:bc:a9:42:b8:
a8:e1:30:89:d2:01:e2:52:57:36:aa:b4:28:5d:aa:
10:fb:1c:6d:57:4c:e1:dc:95:57:62:bc:3d:49:1c:
86:d1:46:5c:be:1f:86:fa:93:db:a2:b8:f0:ba:d7:
1c:53:a7:01:40:d9:f5:1b:fb:9d:c9:49:d8:cb:e2:
23:69:a1:30:bc:c3:80:6a:8b:59:d2:4b:d7:5d:1f:
77:d4:8a:d6:51:7a:b7:c3:d9:47:82:e0:e7:e4:7d:
d1:41:8c:86:66:64:5d:25:f9:2e:ac:e1:5f:d8:9b:
65:e6:a8:35:18:12:d9:eb:29:ec:28:f5:db:40:a6:
10:f4:a9:91:c7:67:18:0d:9f:f3:61:00:6c:dc:10:
63:6d:6c:2f:1f:80:a8:bf:d9:4b:91:c2:53:4f:99:
55:71:2e:5e:ff:58:84:90:56:e5:37:6b:de:02:d1:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9A:92:1C:03:CE:27:F4:F6:85:E9:33:A6:17:B6:40:12:BE:D3:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/718bf198-078c-351c-bd31-c25e174819a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:df:85:b3:b5:2b:e4:fe:87:b5:d6:aa:41:54:ed:55:7c:ac:
23:91:54:49:ec:49:92:ff:42:c5:77:4e:11:c6:e3:0b:e9:24:
0d:f3:13:59:ef:c2:b8:12:e7:76:e9:be:a9:87:d8:ca:a6:19:
bd:2a:26:6b:1e:1f:1c:5a:11:47:cf:43:68:84:bc:a5:a1:c7:
1a:68:1d:bb:d1:9d:d6:23:0a:15:14:1b:f4:fa:fa:31:97:f8:
82:2a:9d:48:d0:48:ef:2b:b1:33:04:70:ad:50:45:4a:44:a3:
2b:1f:28:e3:b7:c6:34:e7:eb:17:e5:de:90:3d:43:a1:63:55:
db:8d:f1:02:1d:dd:55:79:6e:7e:3c:9b:5e:f0:f9:c8:d0:83:
56:60:5b:f8:85:fc:2c:d5:f6:a2:0b:47:81:ea:fc:3f:4b:a6:
1d:b0:25:92:a4:55:7a:5d:9e:e1:c6:84:c5:d4:80:6c:31:cb:
bf:d1:95:db:35:85:a2:ff:ed:9f:29:9c:96:2b:4c:ea:8f:0d:
82:11:4a:a2:8a:1b:5d:72:89:7d:2c:5e:26:2d:0b:a2:79:db:
84:15:15:4e:fd:a0:0d:86:62:79:d0:64:5c:ad:d2:0f:0e:2b:
29:e3:1c:96:b8:84:89:25:1e:37:67:3d:aa:fd:16:03:7f:34:
a8:93:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:13 2025 by rpki-client