Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c39914fd-4d65-3daa-bd89-8bccb3ea1772.roa
File: c39914fd-4d65-3daa-bd89-8bccb3ea1772.roa (raw, json)
Hash identifier: 0euf2YneKdYWNNciEKHUs1ikx9s8tonDRbPS6neqxoY=
Subject key identifier: E5:FD:23:83:13:31:67:EB:39:8E:6B:BD:C8:AB:54:17:FB:42:7F:A5
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B5CC1363BD8B8F86A3D4AE0
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c39914fd-4d65-3daa-bd89-8bccb3ea1772.roa
Signing time: Thu 05 Dec 2024 15:20:36 +0000
ROA not before: Thu 05 Dec 2024 15:20:36 +0000
ROA not after: Wed 05 Mar 2025 15:20:36 +0000
asID: 376
IP address blocks: 132.213.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:5c:c1:36:3b:d8:b8:f8:6a:3d:4a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:20:36 2024 GMT
Not After : Mar 5 15:20:36 2025 GMT
Subject: CN=23c06c3d-d068-4282-bfe4-ec80f6eb7ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:ea:a9:01:94:dd:7a:90:df:9b:d9:74:ab:
ae:c9:ce:f2:73:4a:c7:6e:83:ec:6f:9d:18:aa:56:
bf:9e:7d:0e:fb:24:09:58:16:7b:78:e9:f9:e1:ce:
ac:8f:70:33:c3:48:1e:9e:06:31:c7:be:58:3d:40:
6c:aa:0e:48:8e:ed:9e:7c:0a:99:59:d1:3f:2e:0f:
35:09:31:60:8f:fd:61:e9:d4:3a:3c:25:52:5b:6c:
aa:6c:ec:0a:90:1c:93:1b:28:b7:70:12:08:a2:00:
2f:63:c8:c5:68:c1:ed:0e:b3:91:29:fd:83:6d:a3:
bc:28:dd:60:9c:31:79:ab:f0:26:19:5c:00:6e:7b:
cd:fb:8b:46:b9:fd:05:d3:22:77:fe:69:14:da:8f:
fe:a8:af:84:49:92:0c:45:fc:71:08:6f:cc:a7:8d:
72:ba:b1:5b:83:c4:ea:61:8f:e2:11:fb:fd:4e:4b:
36:b0:fc:02:e8:bb:73:94:43:b8:d5:bb:a2:85:70:
2f:de:dc:db:ef:8b:03:01:b4:17:3c:40:e5:14:b5:
e0:da:66:7b:a2:dd:cf:1d:ad:de:4e:73:57:4b:f2:
fc:31:ea:24:06:64:9a:83:1a:0b:61:cc:ce:f9:a0:
3d:73:b8:b0:40:a4:bd:59:1a:d1:cb:46:3b:da:da:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:23:83:13:31:67:EB:39:8E:6B:BD:C8:AB:54:17:FB:42:7F:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c39914fd-4d65-3daa-bd89-8bccb3ea1772.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:9a:a6:1d:ed:b9:e7:01:e4:a6:b9:d9:c4:b0:5d:bc:88:c6:
9c:71:d0:f9:17:2d:4f:25:4f:c8:1a:d9:62:4f:b8:e6:f9:e9:
e9:6a:85:13:4a:e9:9e:d5:98:cd:a9:30:e9:cd:4a:0f:14:dd:
5d:05:b1:58:ea:b9:a0:9b:12:3b:a1:ce:da:ae:75:a7:53:15:
de:d5:ee:fb:c6:e0:91:03:87:b6:f8:99:42:51:96:c6:24:e0:
36:e5:aa:50:c7:27:c5:93:22:88:b6:9d:3f:98:18:c4:31:c0:
03:91:d7:b6:21:0d:3b:54:12:52:2f:9f:44:b3:7e:8f:a7:b7:
9c:fb:1b:e0:c2:bc:42:ff:e5:91:f6:b2:94:80:ca:60:22:1d:
78:cb:5f:c1:b5:e1:b2:56:05:68:9a:30:00:45:c0:7a:06:12:
31:c1:87:95:3c:ff:12:9c:0b:c8:2d:95:43:cf:df:90:d6:cc:
70:59:e2:74:8c:6c:02:28:7a:0d:20:d1:f2:33:d7:a8:30:70:
d2:03:9c:4e:e7:6e:b6:93:2b:39:3e:b6:c2:08:78:98:7e:e1:
b7:91:4f:0b:f9:44:4a:fc:db:6f:a9:69:9c:38:06:10:7d:2a:
98:66:e2:75:7f:ad:93:7b:6c:3a:43:ae:4b:be:b8:4c:c6:9c:
a1:f0:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:25 2025 by rpki-client