Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/87378841-12fd-3975-8c27-5d0a0d4c74cc.roa
File: 87378841-12fd-3975-8c27-5d0a0d4c74cc.roa (raw, json)
Hash identifier: 97DwJ0AsUH2istithXKk1X7GynIjdVz3hUDOa8tJM7c=
Subject key identifier: 4F:22:1D:1C:F6:89:0D:0D:A1:00:16:4A:EB:43:C8:BD:A0:3A:D5:18
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F432858483127594A3D3D40B31795E680
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/87378841-12fd-3975-8c27-5d0a0d4c74cc.roa
Signing time: Fri 13 Dec 2024 10:40:47 +0000
ROA not before: Fri 13 Dec 2024 10:40:47 +0000
ROA not after: Thu 13 Mar 2025 09:40:47 +0000
asID: 54535
IP address blocks: 146.197.27.0/24 maxlen: 24
146.197.79.0/24 maxlen: 24
146.197.83.0/24 maxlen: 24
146.197.120.0/22 maxlen: 22
146.197.242.0/24 maxlen: 24
146.197.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:27:59:4a:3d:3d:40:b3:17:95:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 10:40:47 2024 GMT
Not After : Mar 13 09:40:47 2025 GMT
Subject: CN=7807793b-3a4d-400c-bf76-33896ddd38f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:22:dc:6b:6a:ab:97:79:b5:e0:49:e1:26:
2f:2c:64:c7:0f:66:d1:25:16:63:ec:b1:a1:21:60:
db:37:1a:7b:44:fd:35:36:f5:55:11:53:28:a0:fc:
98:e6:4f:e9:17:cc:9b:cb:97:41:71:da:d0:3c:71:
e1:ba:62:a7:3b:c3:2e:92:7d:24:c9:cf:49:98:03:
02:ba:85:ab:fc:20:31:fd:8f:02:38:f9:5f:34:c6:
5d:68:ab:1a:b6:64:4d:b5:1d:82:b9:ee:6a:34:8b:
e0:db:44:64:4a:16:d1:8d:f1:72:1e:71:63:a1:63:
ba:7b:59:0b:4a:5f:54:c6:44:dd:c3:c5:29:ce:88:
69:01:e1:a7:ea:b2:e0:55:54:a4:2c:50:c4:2c:86:
20:09:2b:00:82:fd:a5:6a:fe:0e:45:76:fd:16:48:
c0:ef:44:e0:aa:a8:59:55:92:1b:65:ff:0d:e9:e1:
ca:70:49:0f:18:bb:a3:16:c4:82:8f:d1:89:0f:70:
5f:4f:27:5a:9b:4c:7f:54:b9:9b:16:fa:43:7e:d2:
8e:93:d2:13:66:e4:21:eb:da:2d:38:f8:8f:86:e7:
05:eb:c3:56:b6:7b:95:4a:52:d7:78:ac:23:83:b9:
b6:c5:72:a7:0b:e9:d7:8a:a0:38:4a:47:97:6c:a4:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:22:1D:1C:F6:89:0D:0D:A1:00:16:4A:EB:43:C8:BD:A0:3A:D5:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/87378841-12fd-3975-8c27-5d0a0d4c74cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
146.197.27.0/24
146.197.79.0/24
146.197.83.0/24
146.197.120.0/22
146.197.242.0/24
146.197.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:a4:18:b5:d5:2e:2f:06:af:95:5e:d2:c4:1a:9a:1a:77:fb:
f2:8f:38:2c:04:7c:25:d1:00:8c:11:69:14:b9:4d:6a:9c:0b:
ba:66:fb:3f:4f:20:54:88:0e:01:5f:02:df:55:de:b9:13:4b:
7c:ae:19:7c:d1:e4:17:06:ea:5b:16:a2:b8:12:ec:96:a3:90:
02:16:49:82:31:a2:9c:b4:f0:52:35:1b:8b:54:60:a3:72:c1:
f7:13:ca:a9:20:d5:f7:72:77:d3:6a:ee:25:2d:77:2c:f5:d1:
9f:4c:08:06:95:70:db:13:02:d4:21:e3:03:bc:04:75:90:b2:
e1:59:4b:ee:7e:25:3e:a0:67:c1:02:f9:66:4a:7c:16:2d:84:
ce:77:c6:00:24:35:87:c1:e8:5a:ac:0c:ff:40:53:ff:d0:78:
0d:28:aa:2a:44:53:3e:52:8d:9a:e7:77:aa:12:56:79:ca:cd:
bc:25:92:7f:b1:ef:5b:9f:10:a4:91:4b:ca:e2:26:74:6f:89:
c0:b6:14:f5:c1:2b:58:9b:c7:a3:87:73:ba:53:94:f9:7a:4b:
28:c0:67:73:a6:16:f0:ef:d6:a6:d4:ea:e2:b1:b9:e4:fc:bc:
15:c3:fe:ee:e2:3a:08:b6:c9:94:3f:86:d3:52:6d:18:ca:fe:
99:09:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:27:11 2025 by rpki-client