Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/58fd0010-7493-3f59-a7b4-be24a3ea1242.roa
File: 58fd0010-7493-3f59-a7b4-be24a3ea1242.roa (raw, json)
Hash identifier: bjQo0rlAKGY9Btryk9OOG3u7FSsat0bptMGdMi8zMJk=
Subject key identifier: A3:37:77:B6:73:0C:CA:BC:F8:E7:00:97:27:AA:4C:0B:E0:4F:BF:FF
Certificate issuer: /CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
Certificate serial: 010D0C9F432858472B130A826CCE1DD1FAF02080
Authority key identifier: 2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/58fd0010-7493-3f59-a7b4-be24a3ea1242.roa
Signing time: Tue 10 Sep 2024 13:38:04 +0000
ROA not before: Tue 10 Sep 2024 13:38:04 +0000
ROA not after: Mon 09 Dec 2024 14:38:04 +0000
asID: 13376
IP address blocks: 150.228.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:13:0a:82:6c:ce:1d:d1:fa:f0:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
Validity
Not Before: Sep 10 13:38:04 2024 GMT
Not After : Dec 9 14:38:04 2024 GMT
Subject: CN=5f599178-bb76-4036-bc0f-1ef9acb014e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:83:2f:90:d6:d6:d5:40:20:d6:a7:2b:5a:
3d:e5:7f:33:f4:5a:de:1b:6b:74:9c:eb:d1:ec:4e:
f4:c1:97:4e:26:98:24:ef:fe:fb:b6:dd:9f:f9:7c:
c0:30:79:ef:b1:28:99:de:cd:08:12:0e:26:0c:ac:
ec:5d:34:e0:05:fd:7e:40:52:05:77:d4:7c:bc:8c:
fc:36:68:f4:1d:83:8c:b8:96:04:d7:de:d3:81:54:
f1:ac:ec:30:93:db:09:77:86:c0:91:3c:7b:41:06:
cd:3e:7c:02:47:57:ba:8a:1b:aa:80:f0:5f:3a:89:
34:ec:f1:d2:6a:61:c9:d8:ef:5c:17:3d:18:d4:a7:
25:c6:4c:6a:e6:1d:37:64:b2:bd:b9:e6:92:d2:60:
5e:cd:e4:17:87:38:33:de:66:e3:16:7d:7b:60:93:
9c:72:d4:fe:92:0c:71:be:1e:d2:ab:09:ff:3e:8e:
9d:47:8d:4f:26:66:68:74:b7:fe:53:bd:c8:16:0b:
ec:e9:07:6f:35:ea:c6:04:94:e1:74:3c:0d:d1:e6:
d5:dd:0b:31:35:8e:a5:06:5c:a0:e0:cf:b3:6a:a1:
80:99:f2:bd:9e:e0:42:52:6c:c3:cb:9b:ab:cd:b3:
32:39:5f:6f:44:d2:78:86:21:9c:19:f1:96:28:50:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:77:B6:73:0C:CA:BC:F8:E7:00:97:27:AA:4C:0B:E0:4F:BF:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/58fd0010-7493-3f59-a7b4-be24a3ea1242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.crl
X509v3 Authority Key Identifier:
keyid:2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
sbgp-ipAddrBlock: critical
IPv4:
150.228.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:e6:85:3b:4f:e9:68:74:b9:7f:e2:58:0b:96:7c:26:a9:11:
dc:76:a9:5c:1c:c7:d3:63:b5:ff:5c:33:8b:77:0c:f6:ef:c2:
2b:fa:05:d2:79:ec:91:32:82:88:ca:e4:3a:14:98:13:c9:e7:
e9:6a:5a:9f:39:cf:1c:34:8e:99:eb:63:66:ff:40:eb:05:fa:
36:f8:f8:f7:6d:a1:fb:0c:df:b0:da:b0:6f:ac:50:d7:9e:5a:
39:e4:b4:ad:46:c2:a0:3f:85:73:bc:59:ec:de:32:cc:92:04:
4c:e8:f5:cb:6d:8a:76:ff:a2:c0:72:b1:7e:13:b7:f4:24:46:
b2:40:25:e4:3c:bb:e8:73:b4:34:be:af:e8:34:c4:e3:29:8b:
1c:f2:ab:93:cc:86:28:a7:fc:0e:50:46:52:03:ce:c6:72:91:
f2:82:4e:65:58:d3:87:8e:e1:e0:80:8e:f4:b1:2d:b3:31:16:
97:0a:15:d1:f6:99:f6:f9:76:4f:bc:48:92:5d:eb:97:d4:5d:
7c:dd:62:e5:c8:f9:c0:66:79:fd:4a:70:c5:6a:2a:6d:2f:e5:
f1:54:da:7d:90:b0:96:38:a2:b4:43:be:d2:3f:ea:57:38:05:
c2:f8:68:aa:e6:27:c6:a1:ef:da:d3:70:71:e5:16:73:70:ac:
c8:e1:b8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:07 2025 by rpki-client