Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/bdb136bf-9d05-3473-be98-bfaf35c1d394.roa
File: bdb136bf-9d05-3473-be98-bfaf35c1d394.roa (raw, json)
Hash identifier: wukiErhoMUeg5pRTy6QAyoR6jpEh2qIBNJgms4wx1VE=
Subject key identifier: D8:D9:72:A5:75:7A:73:3D:E0:5F:0A:27:59:A6:08:1F:A7:27:FB:92
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584831275922AAA83C6D60A19800
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/bdb136bf-9d05-3473-be98-bfaf35c1d394.roa
Signing time: Fri 13 Dec 2024 10:40:47 +0000
ROA not before: Fri 13 Dec 2024 10:40:47 +0000
ROA not after: Thu 13 Mar 2025 09:40:47 +0000
asID: 54535
IP address blocks: 146.197.44.0/23 maxlen: 23
146.197.50.0/23 maxlen: 23
146.197.52.0/23 maxlen: 23
146.197.176.0/22 maxlen: 22
146.197.184.0/23 maxlen: 23
146.197.188.0/23 maxlen: 23
146.197.198.0/24 maxlen: 24
146.197.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:27:59:22:aa:a8:3c:6d:60:a1:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 10:40:47 2024 GMT
Not After : Mar 13 09:40:47 2025 GMT
Subject: CN=e85eaec3-c119-4fda-9fb1-46047f8e7d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fb:e6:76:f9:b2:d0:cb:39:25:cb:40:b3:63:
4f:96:75:78:93:35:cf:4e:b8:ff:3c:29:68:9a:79:
ee:db:18:59:92:0a:60:4d:ad:4f:f8:6c:14:c2:40:
ed:c0:b1:92:13:86:46:7b:94:40:24:a0:5b:9c:56:
8d:57:e0:c3:05:41:56:75:41:61:0f:93:83:6d:14:
fd:a0:6f:2f:e7:f6:a1:47:4a:e5:39:f5:3e:6c:ee:
93:73:31:58:8d:e4:1e:2a:ee:a4:4c:de:c7:42:81:
ab:cd:7e:b5:49:48:dd:14:6c:48:97:7c:58:49:21:
9b:0b:23:d4:b6:64:ff:ce:b3:05:be:78:a0:48:ed:
05:37:65:1d:57:36:f3:56:08:bf:19:53:b9:21:ae:
21:82:e4:ea:16:46:48:ed:13:64:3a:bd:5c:4c:7e:
b3:f8:95:1c:f8:b0:32:bb:10:f2:82:98:fe:8e:4a:
84:0f:92:91:36:9c:50:f2:c9:7e:7d:8b:07:ae:5c:
38:94:cf:c9:ec:d4:3e:b6:9a:fd:f1:4c:66:62:d5:
0b:da:e5:20:9c:12:30:14:10:89:66:4a:ed:d3:f0:
3a:cc:bc:ca:56:3f:b4:8d:cc:04:80:07:be:ac:7f:
5b:c0:d3:fd:b2:3e:27:79:27:9e:f3:f3:d7:9b:0f:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D9:72:A5:75:7A:73:3D:E0:5F:0A:27:59:A6:08:1F:A7:27:FB:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/bdb136bf-9d05-3473-be98-bfaf35c1d394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
146.197.44.0/23
146.197.50.0-146.197.53.255
146.197.176.0/22
146.197.184.0/23
146.197.188.0/23
146.197.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:42:94:f0:b7:7b:73:c1:fe:02:c8:bc:00:3a:de:af:24:2f:
93:c9:ec:2c:c5:98:87:ff:57:01:3e:da:8a:0a:cb:17:d3:18:
8c:e5:8c:ae:ef:85:6f:3a:a9:fd:fb:b6:9a:2e:b6:84:ef:71:
70:cd:58:8e:41:c4:4f:b4:5e:fa:9e:44:02:f6:43:2b:6b:08:
2c:85:e2:20:bf:49:50:82:80:a6:fa:ca:e6:49:5d:89:f7:05:
48:f3:e2:db:28:94:8d:ce:c3:14:56:54:2b:4a:b2:be:38:3c:
01:3e:eb:e9:27:a7:79:0f:1f:f8:b0:d2:52:fe:eb:a2:95:d5:
65:c3:8c:5f:87:8b:16:ed:03:c1:e8:5f:e7:a3:d8:0f:9c:10:
3c:7c:5b:9c:67:bb:38:94:59:2b:4e:95:b7:ae:51:ea:89:70:
9f:99:ce:dd:0f:2a:6c:02:43:8e:be:43:34:0e:6c:76:58:3e:
4c:ee:54:f9:ba:1f:41:75:c0:03:21:84:13:4e:6f:4b:7e:37:
fd:da:70:37:fe:1e:9a:cd:72:d3:d3:fc:0a:31:33:ee:d6:9b:
bf:a9:c1:fe:81:bb:fc:93:a3:05:e0:48:cd:c4:22:51:70:c2:
7b:eb:78:45:65:a6:4e:e3:92:8f:04:4d:e2:6a:90:5b:e9:15:
6d:c1:ac:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:42:44 2025 by rpki-client