Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/e93fdd6c-945d-3979-9efa-4f17cf0f22be.roa
File: e93fdd6c-945d-3979-9efa-4f17cf0f22be.roa (raw, json)
Hash identifier: WDJcS8/mznjiYWYNI05e/D1btJ3jhXVnwqSggEsX3Fk=
Subject key identifier: AF:DD:9A:76:77:EF:70:DD:45:B7:4F:2F:53:A0:4C:AD:D6:51:C8:9E
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285848313237DE91DC2CDF468D4240
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/e93fdd6c-945d-3979-9efa-4f17cf0f22be.roa
Signing time: Fri 13 Dec 2024 11:02:41 +0000
ROA not before: Fri 13 Dec 2024 11:02:41 +0000
ROA not after: Thu 13 Mar 2025 10:02:41 +0000
asID: 54535
IP address blocks: 156.53.200.0/24 maxlen: 24
156.53.201.0/24 maxlen: 24
156.53.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:32:37:de:91:dc:2c:df:46:8d:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 11:02:41 2024 GMT
Not After : Mar 13 10:02:41 2025 GMT
Subject: CN=8568ce18-1030-497a-835a-436dc46ba934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:ab:3e:fc:8a:d7:80:8c:2d:38:9b:e2:51:
e2:56:97:c7:b1:5d:e7:69:7e:10:b3:10:00:ae:49:
79:17:20:b5:a9:6e:22:10:56:9d:84:27:1e:59:b4:
b7:cb:43:c3:2f:83:9b:8e:0f:3c:2f:3c:41:7f:64:
28:ac:6b:89:7a:ff:18:da:06:ed:68:f2:94:47:b3:
88:28:a8:40:7b:2d:d6:15:97:50:20:c2:4e:ae:dc:
6e:89:c3:92:bf:df:fd:2c:68:ba:3e:43:0d:b6:76:
6e:8f:53:69:7a:c4:d5:b2:94:32:d0:63:32:c5:76:
ba:e2:31:1d:d8:ef:cb:2d:36:18:bb:76:5a:81:ff:
5d:03:ea:16:46:4d:b5:67:f1:0b:6a:a2:8c:e7:2a:
23:37:2e:3e:91:3e:2f:30:dc:ea:50:91:96:0a:66:
33:89:f1:29:76:a3:ed:b7:a6:55:5b:e8:12:b3:a4:
f9:62:05:ef:fb:c8:f8:33:81:20:db:21:a0:17:34:
7f:1f:5f:f7:fb:c5:e4:a4:77:47:89:2c:24:9b:b3:
53:74:17:7f:e7:20:dd:23:6a:8f:9c:16:0d:d2:b4:
ca:6e:7a:77:c2:17:70:c2:cb:3b:be:42:17:e5:0d:
6b:0b:46:70:8e:a8:4a:ed:e5:ee:1d:4c:b9:78:e4:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:9A:76:77:EF:70:DD:45:B7:4F:2F:53:A0:4C:AD:D6:51:C8:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/e93fdd6c-945d-3979-9efa-4f17cf0f22be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.53.200.0/23
156.53.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:44:3e:86:23:3c:46:b1:6e:36:ca:97:22:35:b3:93:22:ac:
f0:36:e2:de:e2:5e:15:48:71:e1:e9:e9:17:e3:bb:0a:3f:1c:
44:a1:df:48:90:22:ea:42:08:4f:d5:25:cb:1f:53:0a:d3:cd:
c9:6f:22:8d:19:f7:ea:40:3b:47:e2:f8:cf:5e:21:b0:41:cb:
54:db:90:c4:b4:76:5e:75:e7:17:df:15:ed:93:7f:90:4f:56:
29:4f:b6:be:7e:cb:4e:e8:85:30:ca:9e:fe:2d:b7:63:01:78:
a6:ab:8d:47:f4:a6:c2:a1:61:ba:9b:6c:e6:d8:4d:3d:e1:64:
fe:b0:50:55:e5:3e:07:52:d4:99:7d:bf:37:4b:61:a9:70:e6:
3a:0c:fd:47:bb:2d:25:f6:5c:27:26:25:34:6b:04:9d:97:39:
1a:9b:7c:5a:ea:f3:08:51:a2:f5:62:82:b3:7d:98:cb:ae:1e:
2c:0a:1d:ae:6d:fb:f0:c4:08:34:e9:b0:32:5f:78:09:f8:3a:
d8:b3:e8:f1:8b:96:96:b6:35:52:31:93:e2:53:43:b6:69:ac:
d4:a6:2b:11:59:4a:0c:12:b4:4a:46:24:4b:6b:d9:2c:26:75:
e5:7a:2f:b3:f4:02:49:dd:ad:75:ee:b5:da:39:7f:57:69:54:
98:7f:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:50 2025 by rpki-client