Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/de97299c-b7e1-352e-984a-3257e1d28695.roa
File: de97299c-b7e1-352e-984a-3257e1d28695.roa (raw, json)
Hash identifier: y/7Ee/bfNvGX1PWddoanbK+4lv9QMZGMrARiz1pxkNU=
Subject key identifier: 87:4F:5A:21:40:EF:AA:B7:48:CD:27:4A:68:71:F7:C5:91:EC:BF:7A
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285848EB5E1A02CD54B3DD30914F00
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/de97299c-b7e1-352e-984a-3257e1d28695.roa
Signing time: Tue 18 Feb 2025 03:31:27 +0000
ROA not before: Tue 18 Feb 2025 03:31:27 +0000
ROA not after: Mon 19 May 2025 02:31:27 +0000
asID: 834
IP address blocks: 141.140.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:eb:5e:1a:02:cd:54:b3:dd:30:91:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Feb 18 03:31:27 2025 GMT
Not After : May 19 02:31:27 2025 GMT
Subject: CN=dab59493-330d-4eca-99f1-0420fcce1ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:83:03:7f:52:28:bb:63:92:e5:5e:2d:14:
35:eb:c1:97:1e:83:cd:03:8e:92:58:58:95:f5:31:
45:4c:ce:84:4d:2a:02:87:fa:d5:e6:eb:26:7b:85:
a6:48:78:21:bf:9e:d2:f7:bf:36:83:58:ef:31:31:
92:c9:cc:14:d3:f6:b1:bb:8d:ed:61:a9:1e:3a:68:
45:b2:40:6a:fc:52:2b:46:18:d9:ca:78:b1:13:e7:
1f:24:5b:7e:5b:3a:f6:c2:24:05:48:76:cf:83:99:
14:12:ce:f7:b7:cd:c0:98:f5:18:4d:a0:18:8f:48:
6d:9d:c4:8f:33:1f:6f:67:f6:98:d7:62:00:d3:14:
08:16:32:6b:aa:cf:35:02:ee:80:0e:9b:01:b8:67:
7f:38:65:63:56:d9:d7:ae:83:f2:53:ac:ce:a9:10:
f8:0b:b3:4c:39:2a:fc:e4:bd:03:ef:a6:fa:1a:76:
a8:c9:dc:42:e5:ac:2c:0d:d1:99:9b:65:00:a7:de:
40:fa:c9:f3:1b:34:9c:19:b2:6f:f0:71:8c:1c:c1:
71:6e:15:0e:ae:5a:c6:21:d9:cd:f3:ee:a6:28:e4:
e6:8e:c0:a2:bb:dd:12:de:70:d1:d4:b5:53:1b:e5:
cc:ec:d8:9d:92:bd:16:cf:81:b4:87:2a:cf:bd:0b:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:5A:21:40:EF:AA:B7:48:CD:27:4A:68:71:F7:C5:91:EC:BF:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/de97299c-b7e1-352e-984a-3257e1d28695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:ec:35:44:55:9a:3e:4c:a6:5b:db:ff:49:ce:71:8d:ef:5b:
b2:39:98:d7:7a:18:4c:e4:50:62:68:72:bf:98:ac:56:05:17:
89:19:23:bc:be:b4:25:a2:16:e1:d2:2c:b2:b0:43:84:b9:17:
c0:bd:be:0e:f9:e3:c0:2c:39:84:82:01:e9:39:3b:0a:6b:6c:
65:28:2a:ac:bb:f8:8d:fe:70:61:d4:9c:41:b4:52:ab:bb:60:
9d:b6:e6:ad:5c:f1:08:7a:4c:5b:54:2b:30:ae:ba:97:45:3e:
fc:ba:3d:c7:9c:48:d8:40:49:33:22:4e:c9:cd:eb:a1:dc:82:
7f:67:0f:a8:96:19:dc:67:2c:54:18:fb:3b:c3:20:52:5c:8b:
b1:fa:21:a2:8a:0f:cf:77:22:a2:ba:49:2f:9e:19:90:2a:3e:
e0:8a:6f:2d:e7:5c:b0:62:5c:7b:75:d7:24:ba:c3:d5:5c:19:
2f:a5:04:b8:1b:dc:70:7b:8f:59:a3:ff:71:f5:e0:bf:4e:01:
0b:25:d4:8a:a4:cb:1a:0f:e3:49:03:c6:80:e7:df:33:25:09:
c2:00:f4:c2:26:6b:97:e9:a1:d8:58:cf:71:85:12:eb:f6:db:
71:c1:97:cc:42:09:0c:be:c6:47:91:b4:59:56:3b:ee:d6:24:
c4:ce:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:53 2025 by rpki-client