Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/119441cf-7de5-3e21-9ea2-f9bc7015c688.roa
File: 119441cf-7de5-3e21-9ea2-f9bc7015c688.roa (raw, json)
Hash identifier: jxE2ITiQBpxPY0dMI7PnI+svcBD+nl2jQSR4O/RqwHI=
Subject key identifier: E1:75:7D:19:9A:70:7D:78:D5:BD:A3:AF:DD:59:17:BB:6B:54:96:2B
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F432858483127590E13F8254C3521D580
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/119441cf-7de5-3e21-9ea2-f9bc7015c688.roa
Signing time: Fri 13 Dec 2024 10:40:47 +0000
ROA not before: Fri 13 Dec 2024 10:40:47 +0000
ROA not after: Thu 13 Mar 2025 09:40:47 +0000
asID: 54535
IP address blocks: 156.53.200.0/24 maxlen: 24
156.53.201.0/24 maxlen: 24
156.53.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:27:59:0e:13:f8:25:4c:35:21:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 10:40:47 2024 GMT
Not After : Mar 13 09:40:47 2025 GMT
Subject: CN=423d42aa-5c6f-4bf7-86dc-76ba1739b900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:71:c9:54:0a:c8:81:0a:78:32:65:ee:89:
9c:16:da:19:2c:cf:9b:5c:2c:54:00:69:c4:a1:40:
3f:26:d8:ff:ff:8f:3c:40:9c:42:49:9a:b4:f7:a6:
1f:c9:ce:79:12:96:88:10:d6:58:3f:e3:aa:70:82:
17:fc:2a:94:96:54:cb:2f:c4:b2:b2:5c:ff:bd:f2:
54:74:13:11:e8:2a:32:ab:fe:0b:27:97:87:79:63:
38:f8:a3:a1:c5:22:4d:60:b9:50:db:fe:8f:a7:d6:
1c:06:f4:c2:0d:dd:82:88:95:ef:63:f8:9d:40:8e:
3d:71:95:ea:fd:d8:4b:6e:82:2c:23:f1:28:eb:55:
6c:a6:fc:20:bb:a7:8e:83:a5:c7:6c:10:fd:33:23:
57:f9:30:78:e1:b7:17:02:0c:c9:9e:a1:54:25:49:
cd:4d:18:86:a4:17:4a:3c:ce:19:f7:82:dc:bb:75:
68:bb:30:85:75:8f:f5:28:0d:33:44:05:89:ed:ab:
95:96:81:03:77:17:98:a6:c0:b6:eb:c2:7e:08:40:
5b:9a:b3:45:bc:cd:e6:fc:73:4e:21:01:34:89:ab:
be:5d:0f:8a:be:40:74:38:79:f7:f2:11:1f:ad:37:
91:55:2c:e1:42:d4:22:de:e5:83:1e:48:b9:f9:bf:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:75:7D:19:9A:70:7D:78:D5:BD:A3:AF:DD:59:17:BB:6B:54:96:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/119441cf-7de5-3e21-9ea2-f9bc7015c688.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.53.200.0/23
156.53.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:9c:4f:13:23:0f:62:2f:f1:f1:06:61:4e:23:58:3f:27:7d:
fe:1a:dc:c7:bf:9c:f2:dd:18:a0:a5:6a:3c:94:7b:63:75:57:
8f:6f:99:11:88:1b:b3:cb:ce:5a:92:68:9e:28:29:ff:ea:19:
79:e6:31:33:96:49:4f:4d:4c:33:49:1e:b0:90:e1:68:3c:33:
a3:16:ea:27:1d:f9:d4:a0:c3:1e:8f:f3:72:f5:43:d9:b9:65:
6d:82:8e:bf:2b:c3:7a:57:5b:0e:97:81:c4:e9:8d:02:c8:22:
35:a8:98:4a:1f:6d:78:24:d5:0f:02:e6:a2:4e:24:42:39:6d:
97:29:15:2f:34:a0:bf:21:fa:fb:bb:e1:3d:c8:0c:ae:e4:89:
3a:4c:c7:62:28:a4:cf:bf:0a:68:b0:53:51:df:4f:9e:2a:dc:
5c:f1:af:0f:f6:76:4a:ba:9d:a0:29:af:d6:3b:77:08:65:2c:
73:79:5d:20:ab:bc:11:a8:68:23:6c:80:4e:ae:76:de:7b:14:
a5:99:48:47:98:68:e4:8f:d6:0b:19:18:c4:b5:93:41:01:73:
48:22:3d:b3:5c:ca:fc:c3:96:96:00:5d:0e:e1:ae:c0:1b:58:
3b:d5:ba:cf:57:bb:16:04:52:60:e1:22:86:47:c9:76:77:15:
b8:82:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:38:38 2025 by rpki-client