Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/adac0915-7516-36c6-8c40-5d8877c3320c.roa
File: adac0915-7516-36c6-8c40-5d8877c3320c.roa (raw, json)
Hash identifier: ozIodMKVdlTIRAFGfv14B82/RF/ml81xKA5KpQTSq6g=
Subject key identifier: 2E:2D:4D:AC:5E:07:C0:8A:D3:D5:85:9D:86:00:5E:27:76:7C:67:D2
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584836A7B0314B61B223E839DD00
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/adac0915-7516-36c6-8c40-5d8877c3320c.roa
Signing time: Sun 15 Dec 2024 09:58:25 +0000
ROA not before: Sun 15 Dec 2024 09:58:25 +0000
ROA not after: Sat 15 Mar 2025 08:58:25 +0000
asID: 54535
IP address blocks: 156.53.200.0/24 maxlen: 24
156.53.201.0/24 maxlen: 24
156.53.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:36:a7:b0:31:4b:61:b2:23:e8:39:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 15 09:58:25 2024 GMT
Not After : Mar 15 08:58:25 2025 GMT
Subject: CN=68872b6f-fb8b-47b6-ad4d-9dc16e0857e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:5b:0d:d4:e8:6d:ab:7c:2a:92:f1:25:4d:
a1:ae:7b:8d:85:38:b2:9f:10:99:f7:03:84:a1:c3:
e3:ea:55:d6:6c:f7:6a:c1:ff:5d:e7:1e:b8:f4:0f:
00:21:aa:1a:48:78:f6:d0:2c:e5:52:b6:5b:05:92:
73:b8:df:64:62:0d:6b:97:67:58:b5:8d:bf:29:49:
5f:02:9e:6d:7e:f0:35:00:14:9e:f1:a4:23:0f:7e:
c9:4e:cf:7a:e6:17:2d:9a:d5:50:50:42:e0:1a:5e:
aa:66:7c:95:68:8c:29:fc:da:3e:12:65:f0:bc:45:
45:55:6e:68:a0:cc:17:d2:f6:15:ad:01:ae:16:15:
63:86:57:83:b4:07:67:91:ac:5b:88:bf:63:ee:49:
34:a4:14:a2:b9:21:ca:e5:8c:74:66:e4:fd:b0:b7:
b0:f2:17:d9:34:04:7d:5a:50:d8:f7:21:15:1e:d5:
92:9a:2f:cd:23:50:94:2e:f5:af:15:6f:a7:67:91:
0e:93:76:71:94:39:e5:e2:90:90:39:f5:85:63:20:
78:21:d9:71:e4:1a:6a:11:4f:12:ec:d6:4b:1f:89:
69:81:24:b6:74:ea:5c:25:25:04:ff:ed:d1:4e:ab:
4e:61:a9:7c:bf:70:0a:b4:a0:bb:de:6d:56:db:f1:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:4D:AC:5E:07:C0:8A:D3:D5:85:9D:86:00:5E:27:76:7C:67:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/adac0915-7516-36c6-8c40-5d8877c3320c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.53.200.0/23
156.53.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:24:da:bc:ab:6d:9d:c9:b0:9a:b0:d4:66:d8:19:2e:a8:e1:
11:f2:37:ed:43:f5:63:df:a9:01:41:f6:9c:7f:3c:db:f7:fb:
8a:17:0a:ee:34:ce:c9:a9:7f:c8:f7:b3:39:e9:42:ec:e8:cb:
e9:5b:02:35:b3:6c:67:9f:b0:0e:b8:27:43:25:cc:50:a2:67:
0d:0f:df:d1:19:81:88:17:e2:ce:65:08:96:47:9e:18:67:7c:
7f:00:24:07:76:cd:4f:d6:b7:b9:45:81:8a:ab:09:eb:9d:d7:
8a:6f:b0:81:47:fc:64:46:06:8d:4c:8d:6b:e5:bf:f4:6b:54:
23:f5:66:56:2f:7a:c1:7f:1c:fc:93:a8:5e:a0:26:6a:f9:bc:
6e:78:1b:7c:85:8c:b7:7b:c1:94:f6:f7:f6:b2:61:be:8c:80:
06:59:c7:03:f3:a3:76:dc:12:30:4e:8c:f2:bd:fe:0e:58:7b:
3e:01:80:f1:8f:cd:26:d9:ad:bc:74:65:b3:15:4c:aa:e3:30:
a9:af:ec:a6:20:b8:a2:c1:1e:79:07:bc:f3:70:62:11:73:3c:
e7:db:a1:7a:c8:3d:b2:d0:c1:8b:d1:5c:ab:30:97:18:c0:e5:
ad:e4:f6:cd:f3:d6:9d:55:b8:82:86:7a:da:1a:6c:ff:6e:29:
00:bd:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:45 2025 by rpki-client