Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5c43acfc-9350-3e13-a6cc-37202c24a812.roa
File: 5c43acfc-9350-3e13-a6cc-37202c24a812.roa (raw, json)
Hash identifier: AEhobyPOBbDN4GBEhCXTQM7l6eFdYyf+zMQM1kA4wDQ=
Subject key identifier: F4:FF:CF:E9:71:25:E2:76:96:08:C3:26:3E:38:11:9C:2A:C0:A4:90
Certificate issuer: /CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
Certificate serial: 010D0C9F432858472DCBAD7F609D76B8BDDBBF00
Authority key identifier: 2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5c43acfc-9350-3e13-a6cc-37202c24a812.roa
Signing time: Wed 11 Sep 2024 13:01:43 +0000
ROA not before: Wed 11 Sep 2024 13:01:43 +0000
ROA not after: Tue 10 Dec 2024 14:01:43 +0000
asID: 13376
IP address blocks: 150.228.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2d:cb:ad:7f:60:9d:76:b8:bd:db:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
Validity
Not Before: Sep 11 13:01:43 2024 GMT
Not After : Dec 10 14:01:43 2024 GMT
Subject: CN=d272f760-5e50-4c28-b06a-ac607280020a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:d5:b4:d8:f4:c2:48:6f:73:7c:89:a1:57:
57:e4:56:d4:31:40:f7:72:c3:4c:1f:fd:88:25:47:
1f:db:4c:c8:fc:f7:81:4a:ea:3a:4a:6b:9c:dd:ad:
ea:d4:97:b1:fa:39:de:c1:bf:4b:ad:2f:e3:45:ee:
df:89:be:02:1b:55:ff:b5:20:8d:19:2c:3e:f9:ad:
9f:cf:89:b9:28:85:3e:88:49:28:56:97:89:84:9e:
3f:cf:46:80:18:59:4a:4e:5f:a5:13:eb:6c:a5:c0:
c7:57:32:4c:45:ff:8e:3e:1a:07:5c:72:e2:6b:bd:
64:f9:e9:96:21:45:03:1e:71:82:e7:1f:31:2b:5b:
5a:86:40:02:33:78:de:2c:92:89:7b:5a:16:59:04:
74:12:f1:ba:7d:88:6c:b2:18:dc:97:30:5d:3d:0e:
bc:40:aa:a7:21:ae:7b:37:db:b9:87:79:82:21:cc:
f3:1d:7e:58:5e:08:dc:61:7c:f6:e2:89:88:84:f4:
43:47:99:a3:9d:70:f9:27:19:b1:ae:bd:58:b4:3f:
ec:44:d1:da:df:bf:27:e1:37:10:90:f6:e7:84:fd:
e1:ab:b5:84:19:33:0d:f4:26:97:5b:7d:b1:ac:31:
5c:63:f8:68:28:8e:0e:50:17:02:67:dc:af:99:74:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:CF:E9:71:25:E2:76:96:08:C3:26:3E:38:11:9C:2A:C0:A4:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5c43acfc-9350-3e13-a6cc-37202c24a812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.crl
X509v3 Authority Key Identifier:
keyid:2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
sbgp-ipAddrBlock: critical
IPv4:
150.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:8a:7d:66:7e:94:b8:17:b2:91:de:5b:88:57:1e:38:83:a1:
b0:24:4b:79:84:b5:6c:39:4f:7b:b4:50:89:b1:d1:9c:b6:cc:
7c:85:b3:f7:e1:7c:b4:3b:ab:e4:1f:a6:d1:bc:37:2f:e5:e7:
0b:86:9b:7d:69:42:b0:96:3e:fd:ba:4b:7a:9d:29:5c:37:c8:
f4:cb:52:f7:8a:25:c6:2a:6c:49:4e:69:26:c8:a7:36:49:2c:
c8:29:51:de:3e:67:fd:10:99:1b:29:87:a4:93:f2:21:f6:f2:
76:ef:6f:a5:9d:a5:b2:1a:60:2a:b0:0b:c9:d6:42:ed:be:f9:
7f:24:00:bc:0b:5e:5a:bc:00:e5:ba:6c:2a:62:04:ea:cd:d1:
b4:ca:77:74:a3:c0:3b:25:0c:9c:40:93:d6:f0:d6:44:59:60:
26:ee:e1:3a:04:d9:1c:57:4d:35:92:f7:bb:4b:44:0f:92:1c:
8a:fc:36:32:1c:8a:52:3f:51:c6:59:6d:7a:51:03:8f:40:c9:
cf:15:6f:8a:e6:01:bb:72:4a:6c:32:07:7c:91:d2:de:02:54:
e4:84:01:17:7c:c0:98:c0:fd:cc:e4:45:9f:f2:59:f0:48:ed:
7f:81:d7:90:f1:c2:99:84:16:78:aa:3b:c0:b0:5a:02:49:e9:
a5:9c:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:06 2025 by rpki-client