Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/0432ea17-7ed0-39f1-b844-987657284f59.roa
File: 0432ea17-7ed0-39f1-b844-987657284f59.roa (raw, json)
Hash identifier: oGDPK/2L9DfhkCFEnFgCXe/WXMQTJ53IiyPhN5JuHPA=
Subject key identifier: 78:13:46:C5:21:D6:61:07:15:84:56:6A:C0:E7:F8:A6:FE:42:18:89
Certificate issuer: /CN=2162682b-5ac3-45f6-9093-042c8ec00a00
Certificate serial: 010D0C9F4328584877ACAE32C11576D903A59980
Authority key identifier: 0D:0F:07:1A:C3:70:53:BD:82:A3:E3:5C:44:0E:1D:2F:24:47:B7:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/0432ea17-7ed0-39f1-b844-987657284f59.roa
Signing time: Tue 07 Jan 2025 16:56:01 +0000
ROA not before: Tue 07 Jan 2025 16:56:01 +0000
ROA not after: Mon 07 Apr 2025 15:56:01 +0000
asID: 32505
IP address blocks: 158.51.88.0/23 maxlen: 24
207.167.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:ac:ae:32:c1:15:76:d9:03:a5:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2162682b-5ac3-45f6-9093-042c8ec00a00
Validity
Not Before: Jan 7 16:56:01 2025 GMT
Not After : Apr 7 15:56:01 2025 GMT
Subject: CN=d4eaa3ea-46fe-4ba0-b8dd-1c93fba2c569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:a7:87:85:f4:e7:7f:d6:40:f0:86:73:bf:
9b:97:f2:7a:bf:07:62:4d:19:5d:a4:44:53:a2:89:
34:d1:3e:41:12:49:51:a3:a8:36:48:eb:6f:d0:be:
07:06:06:53:34:9a:fc:dd:17:49:de:51:46:23:1e:
49:57:3f:e9:10:cd:fa:38:1c:28:75:18:14:e8:8c:
21:9a:de:68:6c:7d:7c:86:4b:e2:55:2e:72:e8:d1:
6e:a4:d5:14:9c:24:5f:4a:c2:e4:78:2d:24:57:27:
0f:29:3c:f7:a8:82:2a:c6:e4:3e:25:7e:3e:87:62:
b0:f8:2a:2a:03:e0:df:f5:19:fd:51:bb:92:94:54:
9b:e1:14:9d:8a:c7:28:18:e2:59:bc:1b:d6:6b:30:
bc:af:12:06:8f:56:8b:14:a0:66:bf:61:56:18:f2:
a3:03:c6:17:7f:0f:04:0f:42:41:c5:6c:30:5d:67:
07:77:33:2b:bc:90:c5:b3:7e:65:7e:a6:3c:82:d0:
68:fe:0e:85:71:b8:e4:04:25:08:84:73:c7:6f:97:
7f:36:1f:49:e3:15:ad:fc:e4:3b:4c:33:9d:55:5a:
5b:6c:c4:35:ff:a4:4b:e9:d3:f1:53:fa:b5:b9:3e:
9b:7b:b8:bc:f3:a7:22:d6:b4:02:b0:f6:f5:12:15:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:46:C5:21:D6:61:07:15:84:56:6A:C0:E7:F8:A6:FE:42:18:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/0432ea17-7ed0-39f1-b844-987657284f59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/2162682b-5ac3-45f6-9093-042c8ec00a00.crl
X509v3 Authority Key Identifier:
keyid:0D:0F:07:1A:C3:70:53:BD:82:A3:E3:5C:44:0E:1D:2F:24:47:B7:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.88.0/23
207.167.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:3a:37:2c:d7:55:9a:a1:01:c5:d7:86:02:46:9f:c9:c1:eb:
ae:ae:d3:f2:21:42:d3:9c:23:5c:e9:fa:f8:be:b1:de:b5:47:
1a:dc:1a:ab:2e:f9:28:23:95:f0:0c:45:bd:9e:91:a2:e1:17:
f6:52:18:1e:f0:46:2c:b8:e8:e4:93:9d:d7:2a:11:3c:9a:18:
00:d2:e7:c7:05:b6:78:d5:da:d6:fa:43:a8:cc:02:6a:1a:ae:
bc:01:10:7b:59:c1:b5:a7:36:f5:d7:f0:39:60:9a:ab:9a:13:
09:53:0a:d5:8f:23:d8:e8:9a:3c:74:a7:eb:65:8f:df:1e:8e:
51:eb:a7:58:03:1f:d6:de:7f:50:44:a1:2d:b6:a6:b6:d6:89:
ec:c3:bf:90:b7:6c:85:61:ec:4a:4b:c8:b4:9f:7a:52:8d:6a:
3a:59:92:9e:f7:f8:4f:e1:a4:5e:c5:5e:ee:86:19:24:7f:bc:
8c:eb:cc:3a:2f:d1:bc:d6:eb:dd:fd:35:b0:40:52:fb:a8:39:
a2:7c:30:5b:14:4b:b9:db:81:ec:4e:90:bf:cc:2c:2f:12:2c:
00:81:46:09:10:04:bf:05:0f:d2:39:bf:33:c1:25:41:29:1b:
29:75:da:b5:dc:95:9e:71:01:0b:bb:f4:47:1b:8a:93:cb:16:
bb:21:40:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:40:10 2025 by rpki-client