Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/e39de066-80e5-3907-b156-9840af28d276.roa
File: e39de066-80e5-3907-b156-9840af28d276.roa (raw, json)
Hash identifier: 6V9kQ6KqR2JIVHsn0f0y4Y07XHIoJFsUkHAnNVXWzXA=
Subject key identifier: AA:D4:77:6E:85:16:3D:BD:5B:84:A5:B3:A2:47:A6:B1:BF:D2:59:11
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285848312758D154D103C045BBD4C0
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/e39de066-80e5-3907-b156-9840af28d276.roa
Signing time: Fri 13 Dec 2024 10:40:47 +0000
ROA not before: Fri 13 Dec 2024 10:40:47 +0000
ROA not after: Thu 13 Mar 2025 09:40:47 +0000
asID: 54535
IP address blocks: 156.37.196.0/24 maxlen: 24
156.37.197.0/24 maxlen: 24
156.37.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:27:58:d1:54:d1:03:c0:45:bb:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 10:40:47 2024 GMT
Not After : Mar 13 09:40:47 2025 GMT
Subject: CN=5bdde13d-6773-4c0c-a7af-1dc85705317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:fa:cd:fa:ce:fc:71:e4:51:a8:24:b5:83:
89:07:2c:aa:6a:05:f2:7e:21:cb:be:b7:0c:94:0d:
7a:67:d7:bd:8e:c9:9b:bd:97:1f:5e:07:f3:f0:2d:
1e:e7:78:1d:38:22:00:9f:6b:16:1e:c6:56:d6:be:
72:c4:c9:0c:ef:a9:0e:aa:07:72:08:4e:ad:13:43:
c3:96:7c:f7:cb:e6:d2:3a:49:20:84:9f:3a:05:24:
4e:9e:0c:d5:c3:6f:c8:e9:12:38:2f:bc:43:20:21:
ef:bf:35:ac:71:38:2f:c6:12:5c:54:8b:67:a9:71:
62:3f:1a:b4:2c:75:75:62:86:a6:15:fc:98:1c:5a:
a0:95:20:51:96:a7:cf:18:3e:1e:8f:c6:fc:00:e1:
25:73:9a:3b:e0:e8:1f:ed:a3:fa:50:21:25:de:9b:
c2:c9:7c:ef:fa:7f:ba:af:d2:c2:9f:73:37:b1:ce:
15:0e:ff:46:fb:2e:52:6e:8e:64:cc:d3:e7:9a:70:
7c:37:85:e6:0b:89:a8:5f:92:1c:95:d8:3e:a4:1c:
49:73:e1:79:be:94:fd:c3:2b:d4:6e:b6:ae:89:64:
a7:51:b2:03:42:64:5b:9c:3a:ee:3c:33:5f:a1:17:
f3:3b:3c:6e:44:89:5f:d5:13:4f:47:2c:00:c4:20:
c2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:77:6E:85:16:3D:BD:5B:84:A5:B3:A2:47:A6:B1:BF:D2:59:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/e39de066-80e5-3907-b156-9840af28d276.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.196.0-156.37.198.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:a6:71:de:d7:a9:3e:52:7a:f3:d7:3f:76:b1:c9:5b:87:34:
b6:0e:1d:30:36:d6:52:8a:4b:67:c4:71:22:c6:30:66:d4:be:
f2:b9:e2:e4:60:ee:e4:23:0f:e0:d4:f6:70:ae:bd:4b:95:0a:
38:47:e0:19:44:2d:ee:2e:84:43:49:68:74:69:a8:32:1a:94:
be:fe:36:94:a5:08:e7:12:0c:da:2e:e4:4d:b1:5c:12:c8:20:
25:15:06:f1:1a:b4:13:87:c6:5d:e3:fe:e6:e2:8b:98:45:e3:
be:25:34:8d:ec:92:67:8c:d0:eb:a0:b2:81:4c:cb:32:ea:59:
09:db:0d:ba:6a:73:7c:08:ba:02:57:f5:20:a3:35:3e:8e:58:
46:4e:b3:2a:0b:7b:48:f2:c6:b5:3c:fa:91:22:2d:3a:31:28:
9a:27:7d:7c:33:17:8a:37:e4:83:24:c5:06:d4:8b:4f:5f:ad:
bd:16:63:69:07:8a:25:48:e6:48:0a:01:0b:66:aa:1c:d3:3e:
2d:ad:65:a2:3b:ff:ba:cf:dc:66:bd:4c:f4:44:13:34:30:29:
43:57:6f:12:ef:18:90:fd:6f:bf:06:00:df:d9:ee:9b:04:e6:
9a:d7:f6:42:96:93:b1:e8:75:32:42:e1:c7:3b:b4:45:37:47:
c8:7a:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:28:18 2025 by rpki-client