Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/dd6d36f2-1b0e-3032-b885-6c1e39e8a837.roa
File: dd6d36f2-1b0e-3032-b885-6c1e39e8a837.roa (raw, json)
Hash identifier: kYDNdgIgnAKjksvMnOROj8SA3Dw50RGRdhXLKFlnjB4=
Subject key identifier: 5C:CD:08:04:59:D2:71:2F:20:C1:8C:4B:AD:F7:BE:02:F7:F4:70:02
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F432858467DEA038BD6808C4733B4A779
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/dd6d36f2-1b0e-3032-b885-6c1e39e8a837.roa
Signing time: Wed 10 Jul 2024 13:00:34 +0000
ROA not before: Wed 10 Jul 2024 13:00:34 +0000
ROA not after: Tue 08 Oct 2024 13:00:34 +0000
asID: 199218
IP address blocks: 130.254.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:7d:ea:03:8b:d6:80:8c:47:33:b4:a7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Jul 10 13:00:34 2024 GMT
Not After : Oct 8 13:00:34 2024 GMT
Subject: CN=05e8725c-efe3-48d7-800f-5c96f844fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7d:60:ce:d2:f8:e7:19:bd:28:a1:2e:5a:eb:
45:d2:d2:ba:36:47:1d:c9:78:f4:06:63:3f:33:63:
82:9e:19:20:0f:89:35:af:c9:e2:bb:2b:77:3f:7e:
4b:ac:84:c5:fb:d8:71:eb:50:a5:2c:5d:db:0b:f5:
51:93:9e:39:d2:38:23:dd:75:a0:e8:61:57:3d:77:
85:e5:09:60:2d:28:ee:dd:e7:db:c8:e4:8a:7e:43:
1d:63:6b:86:cf:f9:fa:59:2d:a8:ce:92:4f:6a:e7:
18:37:00:16:33:32:76:d6:ff:eb:fb:47:57:01:d8:
d7:c1:df:2f:5a:f6:88:39:ed:18:d2:58:0e:27:34:
3a:25:f6:3c:b1:4a:b6:7d:1a:1e:0a:55:a4:da:c9:
11:96:34:15:fb:ae:38:66:1f:c9:d6:31:a5:e9:1a:
8f:b6:ea:54:56:45:eb:03:ff:4d:45:f7:ef:68:08:
a2:34:57:0d:82:0b:8d:1e:27:c6:b1:f5:16:16:b5:
eb:51:95:96:3c:0f:25:92:16:e2:27:5b:09:93:d7:
1b:07:80:44:65:a8:e1:b4:3a:18:0e:65:3d:1a:3d:
f9:c3:1b:3a:2c:81:10:77:64:4c:13:74:70:1d:0e:
e1:ab:db:a1:db:22:ef:29:9e:05:8f:f7:14:c7:68:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:08:04:59:D2:71:2F:20:C1:8C:4B:AD:F7:BE:02:F7:F4:70:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/dd6d36f2-1b0e-3032-b885-6c1e39e8a837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:1d:3d:09:5e:9b:c5:00:27:95:cd:48:fc:77:7f:09:51:0a:
2b:e3:83:26:04:75:af:76:a7:73:a6:b4:45:63:20:34:87:f9:
7f:65:da:a5:1b:78:55:7e:c1:b0:fa:85:ba:38:4a:17:a6:90:
71:28:bd:21:98:d1:a4:6c:6d:c8:b1:23:65:bb:81:dd:68:26:
d5:67:b5:99:a0:0d:21:4c:f7:cb:d7:1f:33:fa:1e:c0:65:46:
2d:35:ef:6f:88:6d:41:a0:31:b6:fd:d6:f6:89:30:3b:64:e5:
d7:c7:15:58:53:8d:f8:1d:04:2e:36:95:2a:a5:ab:e0:59:a3:
db:58:15:69:ba:55:e0:0f:e7:19:ea:4e:a9:09:b5:8c:09:0c:
7d:e6:be:c3:26:d6:ba:f9:2d:b1:fe:64:07:53:74:d8:99:8e:
17:8e:27:78:d7:49:ba:fc:79:42:17:65:b5:1b:3e:22:e7:f2:
d8:14:b3:0d:db:95:e1:3e:47:46:c7:5a:54:ed:a4:23:4b:60:
0a:c2:f4:23:93:5d:79:76:4c:d8:b6:12:0a:64:dd:7e:83:9d:
84:21:ee:84:7d:b9:09:7d:10:17:ee:b2:76:68:20:bd:e3:db:
f7:07:c6:51:42:50:a5:74:83:fd:b5:3b:96:3a:dc:c3:06:f4:
50:7d:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:38 2025 by rpki-client