Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/37afe85d-e23d-3484-8d45-964845681fed.roa
File: 37afe85d-e23d-3484-8d45-964845681fed.roa (raw, json)
Hash identifier: fHNSbXyRoWX2vWMq8qODJOcibXdPWOEUgKrp4FStM6c=
Subject key identifier: A7:B0:6F:86:8C:02:DF:13:DF:DF:97:21:09:AB:50:13:8A:3C:85:60
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584831323807C8B213078F44AE80
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/37afe85d-e23d-3484-8d45-964845681fed.roa
Signing time: Fri 13 Dec 2024 11:02:41 +0000
ROA not before: Fri 13 Dec 2024 11:02:41 +0000
ROA not after: Thu 13 Mar 2025 10:02:41 +0000
asID: 54535
IP address blocks: 146.197.60.0/23 maxlen: 23
146.197.62.0/24 maxlen: 24
146.197.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:32:38:07:c8:b2:13:07:8f:44:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 11:02:41 2024 GMT
Not After : Mar 13 10:02:41 2025 GMT
Subject: CN=db43cdc1-f66d-472b-a1cd-5abba18ec76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:fb:30:36:ed:0a:eb:f3:aa:a1:1a:02:04:
9f:22:1c:b6:12:b9:e8:b0:e4:cd:62:aa:90:bc:c5:
23:a6:d1:90:c7:67:01:2b:84:6d:70:16:34:aa:de:
6d:bf:97:0f:a0:1c:de:d1:86:ca:c2:d5:98:3d:4e:
dd:f5:78:0b:60:35:9e:d8:4b:16:40:ec:d6:d6:c7:
8a:da:49:cb:f9:7f:ce:e0:94:05:f2:1e:21:86:64:
e3:a9:23:08:d9:cd:94:a8:4b:a0:27:68:ff:af:b6:
f0:7a:4d:4f:e4:ae:ba:4a:f6:f2:37:e9:65:d2:ab:
82:b2:1d:df:66:23:35:49:c4:b0:d4:d5:c1:ce:30:
a5:f1:33:92:79:b7:a7:bd:d3:7c:e0:3d:5e:03:52:
95:18:d2:c0:7c:ee:a4:34:30:4c:b8:9f:64:81:41:
19:d7:7c:3c:65:1a:79:3d:04:d0:95:e6:73:3a:0a:
0b:90:af:72:15:c7:86:e9:9c:a2:d5:2f:34:8e:13:
1a:25:1e:c6:d6:48:e1:4a:12:1a:db:de:3e:da:61:
63:14:1b:da:03:a6:fb:ba:a5:28:a9:69:94:c1:e3:
d7:c2:0a:46:bf:c5:c7:ea:66:c5:6d:e1:a8:37:99:
a7:d0:b1:cd:b6:18:89:55:18:04:f5:74:c8:19:c3:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:6F:86:8C:02:DF:13:DF:DF:97:21:09:AB:50:13:8A:3C:85:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/37afe85d-e23d-3484-8d45-964845681fed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
146.197.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:96:c1:00:08:81:03:da:4f:61:ed:e5:87:52:48:95:36:3f:
6d:6e:ac:cf:cc:b1:3f:ac:ec:47:36:0c:f6:61:26:97:c9:5e:
a8:ea:0f:1c:9d:a5:5e:23:b4:02:30:08:00:ed:ca:f4:4c:53:
9e:bd:f5:47:15:fa:22:1f:d8:27:0e:13:4c:22:4c:1d:64:66:
0f:30:d2:70:be:75:f9:84:82:f0:63:8b:f7:a9:13:6d:c6:4c:
f3:fe:cf:e5:54:1e:b2:3e:5a:fe:4e:6b:59:36:6b:27:0d:0d:
e0:e4:d5:55:5f:d6:71:c6:e0:a9:0e:cc:f6:52:cb:e3:e6:19:
f0:3f:cf:0c:f7:88:13:e7:70:a3:21:09:a0:99:d7:f9:ce:f7:
aa:e2:4b:ce:b4:e3:66:dc:02:c8:ff:a3:29:f2:20:c2:97:91:
39:1e:99:88:15:0a:da:0d:bb:e7:29:fa:5d:da:b4:19:0c:03:
96:95:bf:f9:8c:86:1c:7d:8b:0a:c6:21:7c:38:2e:22:20:37:
1d:e1:49:bf:9b:83:61:60:65:ee:26:68:d2:e4:d4:27:f3:e9:
a5:15:51:20:02:fb:25:0e:93:83:be:5e:34:f5:8e:e2:65:77:
85:b1:9c:f3:d5:6b:83:80:7b:a1:3e:10:08:8e:c0:84:7b:b0:
3e:f2:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:37 2025 by rpki-client