Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/15e353dd-1451-368a-acd4-68a8ce1b3f3c.roa
File: 15e353dd-1451-368a-acd4-68a8ce1b3f3c.roa (raw, json)
Hash identifier: +d7dKk55iaGtR2Q0stg22k1i80403tfz0JHA2+2f1+4=
Subject key identifier: 7F:3E:B2:65:29:CB:8D:46:B9:99:2B:A2:AC:09:0F:29:25:4D:F2:38
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285848313237F32B39E571F96C4F00
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/15e353dd-1451-368a-acd4-68a8ce1b3f3c.roa
Signing time: Fri 13 Dec 2024 11:02:41 +0000
ROA not before: Fri 13 Dec 2024 11:02:41 +0000
ROA not after: Thu 13 Mar 2025 10:02:41 +0000
asID: 54535
IP address blocks: 146.197.44.0/23 maxlen: 23
146.197.50.0/23 maxlen: 23
146.197.52.0/23 maxlen: 23
146.197.176.0/22 maxlen: 22
146.197.184.0/23 maxlen: 23
146.197.188.0/23 maxlen: 23
146.197.198.0/24 maxlen: 24
146.197.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:32:37:f3:2b:39:e5:71:f9:6c:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 11:02:41 2024 GMT
Not After : Mar 13 10:02:41 2025 GMT
Subject: CN=ccbe86e7-ac28-427c-96c3-dff5412feb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:bb:3f:02:16:27:2d:0d:e5:e0:57:60:75:
b0:23:3c:d8:8a:19:85:b6:09:17:1d:01:ba:f2:6b:
81:53:8e:12:d2:24:9c:d8:36:41:94:37:57:68:42:
ae:9b:bb:07:8c:ef:6f:f8:ea:e3:94:33:81:2f:07:
a4:47:dc:e6:a4:f4:79:43:6d:0a:c5:7b:e2:8e:77:
81:52:02:c0:3c:50:2a:8d:9b:45:39:0b:c1:78:4a:
2d:65:8c:96:21:c5:e1:e6:2a:15:0b:b6:a3:8c:37:
74:75:7f:41:7b:85:6e:45:15:68:db:e2:68:fa:d1:
d4:15:3a:d3:c9:96:41:ab:fe:57:03:cf:29:2c:bf:
61:4c:a2:47:fd:42:b9:82:f0:74:01:5b:67:8d:9a:
74:9d:70:20:32:02:27:a0:fc:6a:fc:50:12:a8:f5:
c1:e6:7e:41:1c:8c:34:6c:0a:b5:95:01:b1:2f:e5:
3f:64:9a:23:d9:78:18:65:4e:3e:ec:b7:01:c0:af:
19:a3:27:8e:ed:c2:e4:1f:03:4f:b1:85:43:42:2c:
3b:55:2a:c1:79:d3:0d:7d:52:57:8d:86:80:50:48:
1c:dd:ca:10:64:5c:96:c7:23:d3:dc:a2:5c:1c:e3:
b7:9a:fc:99:c9:82:f3:08:f7:68:2c:71:42:99:a4:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:B2:65:29:CB:8D:46:B9:99:2B:A2:AC:09:0F:29:25:4D:F2:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/15e353dd-1451-368a-acd4-68a8ce1b3f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
146.197.44.0/23
146.197.50.0-146.197.53.255
146.197.176.0/22
146.197.184.0/23
146.197.188.0/23
146.197.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:90:9b:0a:ce:e3:9f:99:d9:b6:97:88:a4:ca:68:23:3e:8e:
87:80:72:fa:98:0d:59:cc:cc:7b:5d:4a:44:63:18:65:24:e8:
0a:46:aa:00:88:9b:8e:75:d7:ce:1b:4c:e9:af:3f:7b:93:55:
68:19:ec:7c:30:18:7e:e7:98:2c:20:3c:5d:a6:c3:0e:6d:db:
9d:41:60:57:03:06:41:ac:be:d8:ed:ae:5b:b9:d7:8b:d4:50:
4d:8c:e4:a6:9e:ce:d9:0e:e4:cd:75:05:dc:0e:bc:d4:08:5b:
d9:3c:2b:33:2c:1f:ff:45:23:b7:fd:6f:de:ae:aa:95:52:e8:
c4:78:a3:03:7e:f6:b5:ec:ab:d7:bf:fc:e0:bd:7a:ef:01:fe:
d0:dd:20:19:c3:e3:9a:0f:a9:aa:f2:a7:04:80:30:89:d5:6b:
ef:83:29:f1:b5:a3:10:32:9b:e7:bf:17:cf:13:ef:db:c0:83:
44:83:3a:b8:7b:c7:8a:33:7c:cf:f0:ab:bb:c7:8f:52:33:9d:
52:fc:f4:dc:7c:ef:8b:85:48:8a:e7:76:5e:51:82:a1:86:2d:
d4:63:03:57:1b:fd:26:7d:b8:7f:7d:62:de:28:61:b6:58:b2:
ee:7d:7e:f6:51:15:fa:8f:ad:c3:9d:24:95:95:5c:64:a2:4e:
d0:cb:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:18:04 2025 by rpki-client