Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/44123023-b660-3f70-8943-f6a463a43035.roa
File: 44123023-b660-3f70-8943-f6a463a43035.roa (raw, json)
Hash identifier: YMqM7g87QguQCfdT4XixIotS3qDzzXs+Dq4ZUInk0d0=
Subject key identifier: 0E:1B:FC:62:1A:78:88:7A:AA:FD:AA:44:E5:D5:1F:1E:DF:FE:74:97
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584836A7AFD5AE875E879B39CD00
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/44123023-b660-3f70-8943-f6a463a43035.roa
Signing time: Sun 15 Dec 2024 09:58:24 +0000
ROA not before: Sun 15 Dec 2024 09:58:24 +0000
ROA not after: Sat 15 Mar 2025 08:58:24 +0000
asID: 54535
IP address blocks: 156.37.200.0/24 maxlen: 24
156.37.201.0/24 maxlen: 24
156.37.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:36:a7:af:d5:ae:87:5e:87:9b:39:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 15 09:58:24 2024 GMT
Not After : Mar 15 08:58:24 2025 GMT
Subject: CN=83505e72-0124-46d1-95e9-b81974ca0c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:75:cd:75:16:07:59:92:07:a7:8b:0c:0d:
61:91:d6:26:7f:95:3c:b2:44:de:25:05:15:25:ec:
96:bf:a9:05:2f:89:3d:97:3c:ea:61:a3:66:28:25:
58:ff:05:e0:88:fe:62:06:88:7c:40:88:c2:40:d5:
5e:c9:a0:90:25:99:2c:01:38:45:4d:fd:9f:50:21:
92:de:23:c8:ca:07:f7:d8:dd:18:48:71:f1:9a:61:
f2:74:88:3c:22:f9:a4:80:4c:ea:0f:57:d1:f4:4a:
63:5f:19:86:a1:5c:bc:e5:d9:4c:98:3c:fa:c9:56:
c1:ab:6c:df:bd:95:85:42:54:fa:45:b5:8b:3c:62:
d9:ae:fb:9d:9f:81:50:f3:79:d1:f9:46:b3:e2:aa:
74:cf:c7:c6:c7:8e:7f:41:f3:d3:fd:6c:b4:1c:94:
86:43:c2:95:97:b6:a4:4e:b3:9e:5c:b9:1c:f5:79:
d0:99:8d:f8:cd:a9:9d:01:4d:e1:a6:f3:45:98:23:
23:20:f9:3d:7c:52:e0:62:7f:8d:e2:96:12:08:46:
70:9f:91:1f:77:ea:6d:f3:96:a4:98:1c:fc:dc:70:
f9:39:3e:f4:d8:14:b2:9d:63:e7:39:ea:76:96:4e:
6a:67:d2:e4:ff:58:e5:e1:22:bd:a1:db:dd:56:50:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1B:FC:62:1A:78:88:7A:AA:FD:AA:44:E5:D5:1F:1E:DF:FE:74:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/44123023-b660-3f70-8943-f6a463a43035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.200.0/23
156.37.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:62:3e:a9:dd:e0:af:7d:b7:6b:f8:eb:86:d6:a2:ed:df:44:
2e:49:53:1f:c7:2b:a0:ff:5f:ac:e5:72:77:81:3a:a1:18:10:
17:86:cf:a5:6c:16:11:0d:a1:25:4c:9f:6c:3d:fb:97:d7:2d:
54:9d:65:a0:63:90:65:59:da:1d:9a:7a:d2:5f:aa:f3:b9:7f:
96:27:2e:8e:77:cc:e5:a4:ed:ac:36:de:2f:2c:2e:b0:ba:c1:
bf:12:71:9e:0c:1b:42:72:60:00:ce:06:a6:e7:6c:a7:f8:63:
73:9a:36:62:a0:44:56:39:a1:06:b6:ca:01:8f:40:d0:33:c9:
20:9e:c0:cd:2e:cd:f9:50:e7:84:9c:b1:d8:94:87:ea:cd:42:
74:02:13:6f:d3:63:b1:a1:f7:71:94:51:b2:8f:e1:38:f1:3f:
56:95:6c:d0:17:b9:17:ea:a3:74:b3:65:86:b5:94:49:15:c1:
18:e2:19:00:79:a7:c2:c6:61:fb:f2:c6:4b:e0:e4:13:3d:d0:
5b:fa:86:7a:50:9c:6d:0d:cb:b8:ee:86:09:76:3b:1e:4a:cf:
b1:7a:6e:45:63:89:8e:85:65:12:c7:3c:95:03:fd:75:ea:48:
e7:b0:90:db:c7:f6:91:76:bb:35:c7:95:b7:6e:51:66:bf:5d:
82:0d:af:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:51:25 2025 by rpki-client