Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/b2c3f9db-1f03-3a91-93e6-e7ef2674378f.roa
File: b2c3f9db-1f03-3a91-93e6-e7ef2674378f.roa (raw, json)
Hash identifier: s5BuX5yVw6M6/KNUAsfCuGb2DjUMfxTOJ2H2eLE+9/Q=
Subject key identifier: 49:1E:1F:1E:81:24:01:95:4E:0F:8B:69:18:D0:87:B7:B1:61:56:B3
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285848312758EA44FCD77B13C37D40
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/b2c3f9db-1f03-3a91-93e6-e7ef2674378f.roa
Signing time: Fri 13 Dec 2024 10:40:47 +0000
ROA not before: Fri 13 Dec 2024 10:40:47 +0000
ROA not after: Thu 13 Mar 2025 09:40:47 +0000
asID: 54535
IP address blocks: 156.37.202.0/24 maxlen: 24
156.37.203.0/24 maxlen: 24
156.37.250.0/24 maxlen: 24
156.37.251.0/24 maxlen: 24
156.37.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:27:58:ea:44:fc:d7:7b:13:c3:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 10:40:47 2024 GMT
Not After : Mar 13 09:40:47 2025 GMT
Subject: CN=109ff066-8619-44d1-9c8f-539f322380bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:df:7d:e1:bf:4d:c5:0c:00:aa:d6:8a:d7:cc:
03:3e:17:b2:9a:7a:c5:ae:b1:6b:bd:69:05:db:aa:
4b:20:d3:c1:a6:6d:79:20:ff:1d:f5:b1:e8:b3:9c:
5b:2f:e3:45:5d:6b:0d:cf:22:49:96:79:69:52:97:
94:46:4d:b6:9a:61:56:be:f7:ca:c5:1d:85:fe:6c:
b8:52:fa:4f:53:ec:08:2c:2c:8d:c6:ab:df:3a:1e:
1f:55:ad:86:76:2c:e1:4d:8f:9a:69:2f:db:d7:5e:
d2:74:cb:15:96:f4:84:44:3a:32:16:fd:7c:a9:26:
70:e8:24:67:94:f8:03:98:51:e9:31:79:8c:54:e0:
b4:25:19:ad:62:64:a6:74:86:2b:71:12:9f:c2:53:
91:20:83:bc:9a:eb:48:be:0f:d6:72:cd:e1:3b:a7:
b1:27:8e:86:a6:87:f4:36:65:45:89:82:05:c0:0a:
bd:5b:ad:3f:00:0a:d6:7b:ac:b5:2c:e3:35:59:3f:
b2:84:bc:be:0f:05:0a:47:e9:ca:d3:5d:fd:72:61:
ba:ff:a7:f0:e8:c6:a9:d6:d9:c2:3a:c8:3f:5a:bc:
93:60:63:3c:6f:47:c6:1a:07:b1:21:97:7c:bf:a0:
2f:91:e7:49:e4:6d:8e:ad:f1:a2:78:b2:c5:ac:84:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1E:1F:1E:81:24:01:95:4E:0F:8B:69:18:D0:87:B7:B1:61:56:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/b2c3f9db-1f03-3a91-93e6-e7ef2674378f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.202.0/23
156.37.250.0/23
156.37.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f6:f4:b3:28:65:ff:51:e6:47:15:ea:91:fc:e3:de:e0:b9:
30:83:51:21:b8:24:cb:60:d2:63:50:cb:e2:67:26:ac:54:57:
00:91:89:32:21:87:27:5b:d4:7a:e5:08:83:59:94:2b:f2:fd:
49:c5:26:07:6a:e6:99:e4:4f:7a:c8:2c:49:77:18:4b:9c:03:
e6:f4:39:85:63:14:65:81:8f:53:ff:3a:da:02:18:47:46:7b:
79:8d:82:4e:1f:1f:68:45:40:4e:b5:9e:bc:cd:9f:e7:db:96:
0b:cd:92:14:08:d7:18:e7:7c:94:de:fd:e1:3f:a9:82:46:fd:
63:e4:3c:98:61:0b:43:af:60:e4:07:11:65:72:4a:8a:c9:df:
0a:c4:2d:61:68:49:31:bb:e8:b4:94:93:10:67:37:0e:16:7f:
f1:2f:f7:26:d5:34:87:3c:a3:0a:60:30:2a:d8:7f:6f:c9:31:
ef:0c:6f:4f:99:44:45:57:d6:9f:7a:95:59:71:42:88:22:e4:
d2:e5:68:37:0b:fa:6a:81:f9:d7:d3:cc:f6:33:34:d1:f6:06:
95:df:e1:82:21:bb:52:5a:75:0b:f9:be:f5:95:80:3f:a4:3d:
78:52:28:fb:c1:56:1d:ec:50:4e:26:f4:e9:b4:21:d1:6b:5c:
24:81:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:42:51 2025 by rpki-client