Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d844d072-0294-37cb-90d9-4e8d9487a7a2.roa
File: d844d072-0294-37cb-90d9-4e8d9487a7a2.roa (raw, json)
Hash identifier: rn4MR8pfw0io12ouLibnkffTSXbLLEIziKI3dUtcDZE=
Subject key identifier: 8D:1C:85:83:3A:EA:8F:2D:5F:4E:08:97:EF:CB:27:DF:C9:77:17:5A
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F43285848100A737B157AF01F81F62540
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d844d072-0294-37cb-90d9-4e8d9487a7a2.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 42652
IP address blocks: 148.188.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:73:7b:15:7a:f0:1f:81:f6:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=f6abf3f4-29c1-4e27-a036-10ac03dd5d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:0a:09:cb:fa:65:3e:40:26:f8:e3:2d:34:
58:4b:4a:20:60:59:cc:a4:6f:1c:d2:dc:31:56:54:
a5:b6:e5:b4:b0:ef:68:25:0f:a4:e0:c6:80:e2:b3:
4d:fb:2a:8d:b8:b3:b2:4b:d1:6a:d5:46:37:b2:20:
38:49:b4:3b:cb:4d:dc:d4:f1:4c:82:bf:53:e4:f0:
6e:b0:e5:48:4f:b7:f4:bd:a4:96:41:12:d3:06:f5:
45:80:01:d9:fb:d4:39:53:98:27:53:4e:21:07:fa:
78:ad:65:38:c8:c4:0f:06:81:ea:1e:54:79:68:bf:
a8:97:62:36:dc:ea:01:e8:54:62:dd:15:9c:eb:e6:
a7:21:55:20:b5:18:67:6f:3a:6f:2b:9a:a6:5b:d4:
7d:57:ed:74:5e:b7:d5:24:07:f1:68:56:31:7b:d2:
cc:c9:8d:0a:9b:16:47:36:d3:da:b7:b9:b8:56:f7:
47:7b:e7:8f:bf:02:fd:a0:b4:4b:94:05:63:ed:de:
32:80:5a:06:ae:52:33:6b:45:56:89:52:b5:5b:b8:
8c:4b:4d:13:17:5d:be:cd:13:5a:e2:e2:97:50:42:
ca:7d:0f:a1:91:95:ba:29:3e:cd:8b:3e:00:68:ff:
0a:d4:f2:fa:a9:96:15:22:24:25:a8:0e:72:17:29:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1C:85:83:3A:EA:8F:2D:5F:4E:08:97:EF:CB:27:DF:C9:77:17:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d844d072-0294-37cb-90d9-4e8d9487a7a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:ec:35:cc:94:0f:c7:81:90:35:ce:5d:b1:b7:7d:1a:b1:94:
0d:c8:f5:c2:cc:97:49:14:13:c2:46:2e:61:dc:e2:56:c0:62:
12:2f:e7:9b:31:6b:cf:5e:1e:f3:49:b0:35:69:4e:24:7c:6f:
a4:0c:e9:55:a6:9e:6e:98:45:ef:f0:74:7f:82:52:07:3a:75:
6d:dc:ae:ea:a9:97:cd:de:ab:fe:39:4d:03:13:e1:c3:33:ca:
33:16:94:62:3f:c3:04:ee:3d:48:31:c3:b3:ef:4c:63:e6:8f:
cb:0f:28:fd:c6:a7:fc:bb:c0:79:73:3d:14:a6:ed:b8:55:8e:
97:fa:00:2f:bb:46:6f:97:d6:d2:37:96:e4:e7:59:a6:1b:51:
35:9a:31:0a:1b:77:df:a0:fb:4b:17:74:b5:25:9e:64:6c:80:
be:68:91:60:3b:38:8f:0e:a5:5c:b8:87:b7:61:31:37:20:92:
8d:ed:65:42:16:a5:82:65:6e:e9:60:d3:0a:1e:74:1f:b7:72:
67:7f:27:17:f7:1f:0b:d6:1c:14:08:6b:a3:09:bd:ba:8c:aa:
1f:2c:1a:9e:e8:81:9c:60:09:01:b1:43:62:1d:51:23:e1:08:
61:ac:6d:7f:ba:72:b9:aa:ca:25:96:73:83:fb:cf:7e:da:5e:
4f:c9:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:38 2025 by rpki-client