Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/5e47454f-781a-3dc3-85e8-4c911db9f6c9.roa
File: 5e47454f-781a-3dc3-85e8-4c911db9f6c9.roa (raw, json)
Hash identifier: ug9cMOhPq+2LymXqXV9S40njhvpJv/qvm30DQsrPlQA=
Subject key identifier: BD:E5:98:5A:8C:E7:8E:62:40:80:65:20:13:8F:A4:9A:46:3B:C9:8D
Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial: 010D0C9F4328584827C546CF405766A917FF8680
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/5e47454f-781a-3dc3-85e8-4c911db9f6c9.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 5662
IP address blocks: 157.166.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:46:cf:40:57:66:a9:17:ff:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=eb9608ef-d3c9-48af-a589-82675ddcdad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:9e:2c:36:11:e1:9e:d3:98:b1:7b:10:d3:
3d:fc:f0:61:39:68:27:40:06:89:3d:f1:a9:94:52:
0e:eb:a5:14:74:f1:26:48:c9:de:e5:17:5e:41:10:
33:98:02:84:2e:cd:79:ac:2a:1b:48:6e:7a:fa:e8:
09:d3:f9:9a:81:fb:51:67:c2:07:b7:cf:99:ec:15:
f3:5e:4a:ad:6a:15:61:dd:3c:a4:5c:43:72:51:56:
36:4f:91:59:66:7d:b9:39:a7:76:03:d6:47:72:7d:
35:80:82:18:6e:a4:61:9b:f5:60:1c:25:a5:55:2f:
02:71:df:2a:b3:ab:da:d7:2e:09:06:39:81:e7:ee:
b9:ed:3d:69:c3:c9:a4:ff:ce:86:67:fe:d8:38:d2:
9a:14:a0:ce:c9:69:6c:d2:23:60:ac:68:a8:24:1e:
de:54:4a:96:7c:84:30:ed:9b:c5:e6:7b:17:ee:5a:
1e:0c:ed:45:d3:e1:4b:a8:50:1f:72:d2:fd:48:ba:
62:48:d8:86:d8:57:c2:64:80:8f:a7:ec:95:41:5b:
db:84:c5:06:b0:6b:1a:e6:33:35:be:d8:dc:ae:34:
16:4f:3a:4a:e6:64:22:84:4c:81:68:60:78:7c:9d:
30:d4:18:96:fe:d7:2c:7a:e7:56:95:08:71:3a:43:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:98:5A:8C:E7:8E:62:40:80:65:20:13:8F:A4:9A:46:3B:C9:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/5e47454f-781a-3dc3-85e8-4c911db9f6c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
X509v3 Authority Key Identifier:
keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
sbgp-ipAddrBlock: critical
IPv4:
157.166.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:0b:1e:19:98:76:be:72:4f:2f:ee:80:6d:ed:60:79:bd:e7:
ba:f8:e5:db:48:75:5e:9a:6c:a9:5a:eb:80:19:12:c9:b5:99:
aa:78:76:fa:ee:84:88:5b:c4:00:bd:81:4d:f1:cf:5a:70:53:
5d:71:51:84:e6:14:88:30:20:fa:bf:dc:8e:75:9c:2c:18:57:
df:f6:c3:75:da:9c:fb:c2:5c:7e:ad:e3:19:62:e8:ed:34:c6:
c4:da:1b:77:58:60:e3:db:87:8f:5f:e4:ef:27:77:95:8f:88:
3a:28:e5:ac:46:a8:d5:64:86:0d:87:74:8d:ed:e3:7c:7e:2c:
7a:79:ce:4d:a2:9a:0d:00:14:42:a6:3b:c9:15:d0:65:b9:92:
3e:7c:ed:5e:b4:89:ee:94:3a:dd:74:4a:54:ab:0d:89:bf:67:
eb:cd:1c:ce:d2:a4:c6:0f:b6:76:07:7f:fa:78:b9:b7:29:25:
97:a1:58:b2:be:94:9e:84:3d:ce:cc:e4:28:10:73:7f:2d:27:
2f:58:8e:19:5a:1c:e5:9a:d9:e2:aa:41:88:cc:dd:5a:39:2f:
09:af:31:43:88:6c:d7:6e:e7:b0:2c:bc:8b:ef:3c:4e:8d:16:
28:c4:cb:ce:bf:5d:8c:f2:04:17:c8:ac:05:ab:15:ba:c0:6b:
13:08:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:02:38 2025 by rpki-client