Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ee6ad1e8-d698-3e9a-8d2b-548991ec8a7c.roa
File: ee6ad1e8-d698-3e9a-8d2b-548991ec8a7c.roa (raw, json)
Hash identifier: j1ZgbNJtPhK7pZl7RlUpIQA7uqrdxpzZDOCDJQON84g=
Subject key identifier: B2:C9:F7:F3:4B:15:4A:60:16:EB:48:FE:FD:F6:C8:3D:73:FE:33:34
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285848ACC4563221B9B2B93B6E6D80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ee6ad1e8-d698-3e9a-8d2b-548991ec8a7c.roa
Signing time: Sun 26 Jan 2025 17:21:31 +0000
ROA not before: Sun 26 Jan 2025 17:21:31 +0000
ROA not after: Sat 26 Apr 2025 16:21:31 +0000
asID: 29082
IP address blocks: 130.254.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:c4:56:32:21:b9:b2:b9:3b:6e:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Jan 26 17:21:31 2025 GMT
Not After : Apr 26 16:21:31 2025 GMT
Subject: CN=f9445c00-6f09-46a5-9c77-ca8786cc02ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:9e:9f:de:ba:0c:66:ca:bf:ed:74:2f:6e:
46:53:04:22:ff:5a:80:1a:5e:70:a4:df:74:1f:a6:
c2:f4:c0:75:50:96:22:d6:8d:b8:fa:95:b7:d2:55:
a0:bd:d0:4b:25:e0:27:f7:64:b8:82:d7:c5:d9:c1:
83:b9:2d:b4:ed:80:c3:94:1b:2c:b8:22:b4:dc:17:
cf:e8:14:9f:1b:ab:ff:87:e2:98:5e:f5:ed:fa:f2:
18:2e:13:65:3f:0e:d4:cb:6e:40:c1:c3:2d:81:50:
2c:7b:72:2b:1b:8b:6e:d2:5a:fb:4b:70:04:22:cd:
57:8b:63:d0:91:b4:d1:df:c0:75:9e:bf:f5:ac:fe:
2a:a2:71:fe:72:22:f7:21:d9:8a:e6:a8:b7:67:78:
96:c5:21:9e:95:bc:dc:41:ac:b5:ab:63:94:6d:29:
08:38:d0:98:94:62:2d:55:61:94:ec:21:eb:cc:f1:
ba:49:ca:3d:b7:a9:ab:81:a6:aa:d4:82:d3:bf:53:
7d:36:c0:a5:c0:df:6b:4e:d4:67:f9:ae:a4:cd:77:
96:f2:3e:34:84:95:ae:18:ca:65:56:c1:2d:ff:e8:
63:bf:2d:ed:d2:6e:cf:ac:09:ba:ec:07:0f:f2:85:
95:db:6e:e8:fe:59:df:40:df:7c:64:5b:81:ab:a4:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C9:F7:F3:4B:15:4A:60:16:EB:48:FE:FD:F6:C8:3D:73:FE:33:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ee6ad1e8-d698-3e9a-8d2b-548991ec8a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:70:70:38:b4:e5:89:d0:6e:ff:9d:a2:f5:9d:00:d9:db:de:
58:a4:33:5d:9c:78:48:91:a5:95:e8:6e:17:24:21:1f:8f:ee:
7d:d2:f2:3e:fd:47:68:ea:43:61:2b:20:a7:19:d0:ba:27:ab:
33:c4:f6:68:64:74:69:6b:7a:14:45:a6:f0:09:19:ef:09:6e:
a8:9f:22:e9:8a:84:eb:6c:42:66:df:22:a6:c9:f1:6b:45:8c:
41:8f:9d:df:f8:96:2a:df:03:5e:91:89:08:13:2c:04:2f:6f:
c4:0f:80:10:c0:b4:0c:3c:6a:aa:a9:d1:ed:c4:79:d5:15:2c:
c0:99:9d:7a:5b:12:40:14:a3:5e:29:b0:1f:54:da:0b:42:2d:
17:da:23:0a:b6:d9:72:0f:c3:52:94:8c:99:42:a2:d2:9f:5b:
0a:6c:23:0c:30:3a:6c:1c:b3:16:3f:c1:4d:08:a7:e4:5e:6d:
a6:5e:ab:e3:6b:8a:c6:62:40:7b:bf:77:5a:31:00:88:7f:3f:
47:19:52:19:37:04:d5:74:5d:19:94:44:1d:20:c3:db:1d:72:
64:ee:c5:8a:7e:d1:78:44:c6:3c:82:f5:51:19:bf:c7:e6:52:
d8:fd:05:03:b8:bf:85:eb:36:dc:47:92:27:a8:b7:4d:fa:15:
22:d1:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:25:38 2025 by rpki-client