Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/0a226c34-27e2-3cc7-95d1-f2b675716a18.roa
File: 0a226c34-27e2-3cc7-95d1-f2b675716a18.roa (raw, json)
Hash identifier: K7PJANY/gHVzRN05KTp46Ak2zToayfoZ0qTs64y2pbQ=
Subject key identifier: 58:54:19:F1:0E:23:09:C2:7C:77:F6:B6:99:2B:07:5C:DD:DC:FD:45
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584833DD005279BEADFA38F9CC80
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/0a226c34-27e2-3cc7-95d1-f2b675716a18.roa
Signing time: Sat 14 Dec 2024 09:58:24 +0000
ROA not before: Sat 14 Dec 2024 09:58:24 +0000
ROA not after: Fri 14 Mar 2025 08:58:24 +0000
asID: 54535
IP address blocks: 156.53.200.0/24 maxlen: 24
156.53.201.0/24 maxlen: 24
156.53.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:33:dd:00:52:79:be:ad:fa:38:f9:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 14 09:58:24 2024 GMT
Not After : Mar 14 08:58:24 2025 GMT
Subject: CN=06de0d59-c582-4447-99e1-ccd1913c466a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2f:28:15:c5:4b:bb:8a:f2:dc:cd:ca:9c:08:
4e:5a:df:4b:4c:99:32:4c:0a:32:87:e4:46:b3:b7:
29:fe:c5:32:f0:eb:c0:ac:ff:e2:c7:64:30:56:3c:
0b:3d:a4:2a:a7:67:34:61:9c:04:c2:c4:b3:b4:25:
c4:1b:bd:9c:ef:1c:5d:cd:6f:0a:72:1d:58:d1:8d:
43:d9:ac:e5:76:b6:35:02:14:c4:8f:40:fb:b1:e5:
41:d0:81:db:f8:ed:2d:01:bf:bb:a7:ba:1f:01:6f:
02:66:09:fd:d4:b2:69:e3:32:41:72:60:25:a4:63:
74:bb:ab:92:68:66:d8:e8:61:f7:fe:64:95:9f:f2:
69:72:b7:6d:cb:09:57:3e:0f:9f:e2:82:ff:4d:26:
cd:4c:98:f2:0b:ba:15:90:3e:bb:01:1a:11:62:3e:
9e:b5:3d:ed:4b:2b:22:85:3f:32:cc:82:14:eb:3b:
f0:5a:c9:ab:9a:ca:7a:52:ce:15:93:13:d3:05:74:
e7:93:cf:23:59:c0:19:bb:63:90:69:8a:58:49:b3:
a6:c4:24:b6:e7:4b:3f:1a:aa:81:67:c5:5d:33:ce:
d4:5c:e1:8c:26:60:97:ff:88:db:cb:21:e7:55:d9:
b1:86:ad:0d:59:7d:c9:61:5a:d4:02:9b:c1:70:6e:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:19:F1:0E:23:09:C2:7C:77:F6:B6:99:2B:07:5C:DD:DC:FD:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/0a226c34-27e2-3cc7-95d1-f2b675716a18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.53.200.0/23
156.53.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:f9:9c:71:bb:33:ee:7a:63:b0:41:8a:44:95:82:59:c2:f8:
12:ae:3c:da:a2:8b:32:6b:28:0b:f0:12:8d:4a:81:9e:b5:45:
51:92:e6:80:13:42:fa:70:5b:59:43:9c:49:7c:1f:8b:3e:3a:
51:ed:26:2d:2d:71:01:45:ab:eb:83:f2:5d:41:c8:64:60:a0:
25:78:46:9e:ba:35:23:df:36:55:f3:56:2b:e4:ae:5f:6a:b4:
f5:62:e9:0d:98:49:0d:d9:67:c5:d4:08:2f:06:2a:7c:57:6e:
c1:2a:1e:24:7a:11:95:a6:16:40:8a:59:47:86:cf:e1:f0:af:
22:79:4c:df:58:b4:29:56:44:e6:ee:24:db:99:74:6b:48:5b:
cd:b4:f4:61:38:d2:82:2d:65:98:bf:6c:62:3f:01:4a:b2:cd:
0c:ec:e2:c5:4d:1d:ca:22:97:00:a9:52:70:9f:f9:db:fe:e4:
57:25:10:66:db:1f:9f:ac:fe:76:81:ff:05:b3:34:8c:6f:67:
6f:f7:0f:a4:49:9f:fb:5e:1e:6f:ca:a9:8e:3d:9b:2b:b9:b4:
53:d2:2a:9b:d5:7c:4a:c7:98:f5:e0:2d:ee:cb:2f:1b:7c:63:
9a:8a:51:2b:67:b2:bc:cc:a0:e5:39:c7:af:ec:c2:df:54:f4:
60:ad:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:49:57 2025 by rpki-client