Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/ff9278e9-5da0-3730-8892-1d60cf45b6dd.roa
File: ff9278e9-5da0-3730-8892-1d60cf45b6dd.roa (raw, json)
Hash identifier: N+w2vsMR23wsJ7xqlPTlRRm+WDvRcUkwuHrPWb4IS2M=
Subject key identifier: 55:72:73:50:6A:97:90:2A:AD:44:4D:8B:BC:F8:41:5A:A0:C8:AA:43
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285848312759362A19838CDF8406C0
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/ff9278e9-5da0-3730-8892-1d60cf45b6dd.roa
Signing time: Fri 13 Dec 2024 10:40:47 +0000
ROA not before: Fri 13 Dec 2024 10:40:47 +0000
ROA not after: Thu 13 Mar 2025 09:40:47 +0000
asID: 54535
IP address blocks: 146.197.60.0/23 maxlen: 23
146.197.62.0/24 maxlen: 24
146.197.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:27:59:36:2a:19:83:8c:df:84:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 10:40:47 2024 GMT
Not After : Mar 13 09:40:47 2025 GMT
Subject: CN=3ebabe52-59c7-4350-beac-2880964aa880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4c:4c:db:6e:10:12:95:37:3e:5a:bc:68:f5:
c2:59:a9:c1:18:89:07:ea:3d:dd:1d:ca:86:d8:93:
c6:25:38:d1:e8:33:de:87:26:12:5b:31:27:2c:05:
33:3a:82:5e:e4:42:fd:c1:0f:72:c0:3f:4e:6d:f8:
a2:68:d5:40:38:97:8a:94:b2:75:11:49:6a:09:f0:
89:77:d7:81:69:c6:ed:32:c5:14:10:a4:d9:67:6f:
a9:ea:21:33:92:d8:e6:68:15:e0:8b:f3:58:ca:b2:
1c:d0:2a:c6:57:40:e5:e8:7a:b0:d9:56:9e:b7:61:
a2:ce:28:48:57:43:9f:ab:17:99:7b:cf:fc:a2:81:
d3:cb:44:44:62:6b:4a:30:88:06:3e:ee:7e:5a:bd:
9b:0f:8b:8b:08:58:a8:99:cb:14:ea:7b:a3:91:87:
63:b7:b2:04:73:15:e5:ba:17:c5:3b:50:75:91:ab:
67:b7:e1:7e:b6:04:02:ec:d8:8a:2b:7b:48:27:5c:
f6:9c:92:f4:a9:27:c7:1a:3d:8f:93:ac:a4:2b:88:
47:47:fe:3e:c9:7e:ba:25:d2:00:be:84:2d:bf:11:
47:a2:70:d4:be:48:2c:49:62:32:d1:9e:35:22:66:
ca:f4:85:f3:7b:78:e6:1d:d3:02:f0:f0:e7:3b:31:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:73:50:6A:97:90:2A:AD:44:4D:8B:BC:F8:41:5A:A0:C8:AA:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/ff9278e9-5da0-3730-8892-1d60cf45b6dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
146.197.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:ee:ff:d2:42:f1:f2:62:a1:f7:4a:c8:03:5e:7d:21:83:df:
4a:e8:6f:72:8e:3b:79:d1:e2:f9:2a:5b:95:13:15:11:44:bd:
49:b8:84:28:f4:f7:7b:7c:0f:93:22:ee:48:d0:20:da:57:65:
6f:76:9a:10:f1:6e:23:3f:06:cd:7c:50:70:70:08:d1:71:e6:
e0:b0:27:92:b9:ef:77:aa:b4:50:3b:a1:99:7c:05:4a:c7:d4:
ee:87:0f:d2:b0:71:d4:45:45:9c:1e:73:a2:47:1d:65:e0:01:
48:ee:a0:3b:76:6b:2a:7f:3f:66:7e:cd:26:da:82:2b:ab:8d:
ed:fc:59:5e:da:4c:3a:66:cb:2e:46:00:51:db:fe:bd:e5:34:
fc:b2:d8:fa:ed:80:e0:b8:77:ad:6e:90:c2:c1:75:b5:8d:d0:
48:af:74:03:f5:d8:19:69:75:2d:da:a5:4b:0b:50:2f:05:78:
b4:2c:d1:26:90:e6:0d:47:12:2d:f2:bf:71:63:f8:72:f8:65:
ff:b3:a1:8f:6f:ae:e5:59:fe:2c:be:0a:24:5d:39:a4:3b:69:
06:56:53:f3:43:51:e8:fd:1c:72:c6:2a:b5:30:3a:b7:4e:e5:
24:bf:9d:0f:b2:1e:53:a2:d4:81:ff:5f:1b:b2:37:b6:3b:83:
b8:8b:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:56:06 2025 by rpki-client