Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db65da08-1849-3a90-aa65-5f726735e9a1.roa
File: db65da08-1849-3a90-aa65-5f726735e9a1.roa (raw, json)
Hash identifier: OgoQ2bivexpQ2GBzuzIr8foZefnirNXqadvhg3X3TuU=
Subject key identifier: 56:92:14:38:FA:2A:62:F6:0A:23:CA:9F:5E:62:85:6A:80:B1:D5:98
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285846E00E51155A1F3885E1B64780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db65da08-1849-3a90-aa65-5f726735e9a1.roa
Signing time: Wed 14 Aug 2024 16:42:56 +0000
ROA not before: Wed 14 Aug 2024 16:42:56 +0000
ROA not after: Tue 12 Nov 2024 17:42:56 +0000
asID: 7018
IP address blocks: 142.111.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e0:0e:51:15:5a:1f:38:85:e1:b6:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Aug 14 16:42:56 2024 GMT
Not After : Nov 12 17:42:56 2024 GMT
Subject: CN=4d661fe1-c8f7-4ea4-98df-4406cee68bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:12:3b:90:08:90:d7:df:0a:6c:be:5a:44:
de:10:56:3b:6d:20:87:41:64:44:6b:f8:6b:16:ed:
10:f7:2c:07:10:7c:18:f7:be:30:77:bd:12:8d:d9:
87:49:d5:32:3f:07:b1:fb:76:ec:63:f3:a3:fd:67:
34:37:ae:35:06:53:66:91:f2:c7:6b:c9:73:3b:d4:
b1:0f:db:77:c4:5d:29:35:c0:10:68:58:61:d8:0c:
ca:80:3b:3f:7e:2f:c2:4a:42:f7:81:80:b4:60:23:
77:c1:2b:0e:95:b2:99:30:f9:05:7d:3a:fa:07:8f:
d4:bf:d0:2e:23:fe:1b:c5:03:07:9e:76:a9:30:8f:
60:1d:15:56:f1:14:37:92:7a:ab:10:7a:ef:0d:36:
28:38:f3:32:61:e2:3a:78:0e:95:6c:79:0f:3f:90:
21:46:51:23:88:c6:cb:84:cc:7a:0f:71:04:d1:09:
c4:3e:0b:07:37:dd:6b:9b:fb:6b:77:d7:14:76:02:
68:6e:d0:0f:df:1c:b8:72:68:c4:fd:9d:b7:f1:66:
a0:ff:06:b7:69:36:ce:fa:72:ab:4f:b0:9b:ff:a7:
be:66:cd:92:15:56:44:73:5b:e7:0f:cc:e8:fe:8d:
7d:58:ed:d3:36:1e:1a:71:d8:2c:be:78:0f:84:b3:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:14:38:FA:2A:62:F6:0A:23:CA:9F:5E:62:85:6A:80:B1:D5:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db65da08-1849-3a90-aa65-5f726735e9a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:3e:2c:21:3c:b2:c1:23:be:23:59:05:ac:68:05:98:d9:fe:
1c:12:fd:2f:42:d1:cf:ff:40:d4:94:38:3e:c0:fb:05:1e:54:
69:07:f7:25:4c:60:12:f3:9c:27:e8:84:c5:3f:a5:37:51:43:
e8:1b:ee:a1:3e:8c:0c:7c:82:c4:17:8b:aa:28:4e:c7:ea:2d:
4f:5b:50:22:e5:93:df:9f:35:a4:11:bd:f6:7d:ad:16:77:2c:
00:7f:7a:09:43:f8:cc:d7:af:f8:f7:35:cb:c0:ad:f7:92:9a:
a2:06:93:4c:f0:fd:41:eb:60:4b:a4:16:a9:34:c0:02:91:e2:
e0:53:41:c1:5f:1d:19:2d:55:d5:18:c7:41:fd:88:75:8b:c3:
5b:e3:48:83:46:80:92:e4:98:73:2c:b3:0e:51:cc:f1:cf:82:
a4:4a:b8:6a:8b:1c:84:a2:4b:2c:3e:df:c0:7d:3f:95:6e:e3:
84:37:17:a5:75:94:d1:8a:89:12:16:e4:e4:2b:e5:4e:fc:b4:
db:60:aa:78:0d:bc:92:d3:1c:c9:99:2f:a3:65:38:9e:54:78:
ea:32:26:57:c4:d8:34:48:3e:02:63:d8:75:7e:01:b1:d0:47:
bd:ea:3a:2f:ae:d1:5c:8d:39:71:01:13:75:94:27:74:6e:be:
17:29:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:35 2025 by rpki-client