Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/8409d3d3-ca16-3550-a4dc-4cc7116eae25.roa
File: 8409d3d3-ca16-3550-a4dc-4cc7116eae25.roa (raw, json)
Hash identifier: TNB2rrBiWquAYQDZyAfEdFZ3ii14h4N5SuhJP/lV2M8=
Subject key identifier: 5D:D7:F2:B9:37:97:D2:A8:6E:A7:50:2A:FE:81:2F:47:E5:C4:C2:77
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F432858483127589D4E9EFE7A15BA4B00
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/8409d3d3-ca16-3550-a4dc-4cc7116eae25.roa
Signing time: Fri 13 Dec 2024 10:40:46 +0000
ROA not before: Fri 13 Dec 2024 10:40:46 +0000
ROA not after: Thu 13 Mar 2025 09:40:46 +0000
asID: 54535
IP address blocks: 156.37.204.0/24 maxlen: 24
156.37.205.0/24 maxlen: 24
156.37.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:27:58:9d:4e:9e:fe:7a:15:ba:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 10:40:46 2024 GMT
Not After : Mar 13 09:40:46 2025 GMT
Subject: CN=3bc784cf-74b9-4928-bb0c-95c158d3a790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5c:50:0c:0d:87:16:5b:f9:29:99:60:b2:38:
dd:4b:cc:3f:db:91:76:0f:8d:65:00:3b:b2:e6:58:
a4:a3:d9:0e:0f:64:f3:1e:1d:06:54:d0:7c:aa:e8:
bc:33:51:bd:4b:e4:3d:36:40:6e:b8:5a:04:07:a8:
a8:69:9a:2e:b4:2b:3a:d4:65:1a:d3:2f:2b:ed:dd:
27:b5:a8:61:64:7b:2b:ad:77:fb:da:13:4a:ef:d3:
cd:0c:7d:14:83:df:a4:78:4c:e1:1b:8d:9f:78:f6:
e1:70:a4:8e:5c:0f:dd:f2:d7:0e:fe:e5:2f:cf:b4:
09:66:06:8a:de:73:85:40:af:43:57:0e:73:2c:6d:
dc:5e:c3:62:c1:5a:40:8c:41:c4:9c:38:4a:f3:fc:
94:d4:76:b1:73:2d:ad:32:d3:55:c7:d4:08:e8:67:
38:83:85:ea:37:b6:77:04:47:c0:58:d0:67:79:5a:
42:f5:0b:1a:74:99:d2:79:4e:10:3a:53:73:04:36:
c1:a3:de:77:89:a1:d7:67:6b:a0:56:a4:71:64:0a:
a8:43:c6:dd:f1:57:95:b8:a5:e0:c9:34:fb:b3:8e:
b8:36:35:2b:38:bd:d0:89:3a:68:50:15:b8:9d:e8:
55:89:66:83:bd:b7:6a:b6:83:fe:26:86:75:b6:6b:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:F2:B9:37:97:D2:A8:6E:A7:50:2A:FE:81:2F:47:E5:C4:C2:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/8409d3d3-ca16-3550-a4dc-4cc7116eae25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.204.0/23
156.37.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:65:0f:ec:e7:d4:da:f4:a1:00:d9:dc:d3:80:1c:b2:f0:12:
2e:c6:34:59:d7:93:9a:cf:e9:e8:ac:25:2a:9f:cb:1b:76:4e:
e0:2a:66:c9:91:9e:14:88:57:b0:0f:0d:9a:b8:68:26:12:7f:
39:23:b2:bb:df:e0:f4:5e:78:66:6d:f3:14:cd:6b:be:45:62:
1e:3e:2a:54:7e:c5:ec:e6:00:32:55:d7:4b:54:c6:ae:14:9e:
6b:14:86:df:15:c0:65:aa:2c:0c:21:9d:32:6f:15:81:3b:67:
a2:a0:55:42:0c:5d:4c:ab:ca:4d:83:47:35:eb:81:9f:86:ae:
72:2f:83:4d:d0:6d:92:12:75:23:4a:36:dd:33:12:5c:c4:2a:
77:1b:8d:c8:c9:9d:d7:09:bd:f8:7f:36:5b:ee:8a:5d:48:77:
c2:df:95:32:fd:bb:e5:99:69:2e:6a:bb:14:87:3e:77:0a:40:
52:83:24:e3:8f:06:09:7f:af:9a:33:cc:d0:d4:00:4b:f6:e6:
40:94:30:0f:a7:bd:86:de:0d:a2:29:b4:f6:4d:50:9a:c2:50:
78:d9:98:43:81:16:17:fe:79:68:03:31:da:86:6d:37:dd:72:
2c:29:1e:ec:dd:bd:62:52:b2:f6:05:6a:ba:08:07:d0:e8:e7:
e2:8d:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:36:15 2025 by rpki-client