Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e5a4bc2-074f-33da-a7c5-2317a3d7ae48.roa
File: 1e5a4bc2-074f-33da-a7c5-2317a3d7ae48.roa (raw, json)
Hash identifier: MkVt/q5jFV0U5X8BUXSHVHtAx/XHCBrtOTZ64MoTWoo=
Subject key identifier: DD:41:10:9E:73:1B:FE:EE:15:3C:5C:ED:55:5B:DF:51:C5:97:14:CB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD3630FE5E3D58CC6C5A2C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e5a4bc2-074f-33da-a7c5-2317a3d7ae48.roa
Signing time: Tue 26 Sep 2023 21:00:52 +0000
ROA not before: Tue 26 Sep 2023 21:00:52 +0000
ROA not after: Mon 25 Dec 2023 22:00:52 +0000
asID: 397217
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:63:0f:e5:e3:d5:8c:c6:c5:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:52 2023 GMT
Not After : Dec 25 22:00:52 2023 GMT
Subject: CN=65c5311a-f854-472d-a2a4-a57c6d602492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0f:36:c6:be:d1:73:88:4f:6c:71:21:ca:5b:
bf:2f:9a:99:1b:e4:e9:a2:1e:9a:bd:fc:e1:80:63:
29:4e:cb:9e:05:ad:95:82:66:78:80:0f:5a:4d:c9:
84:92:54:e0:8d:ae:e6:c3:71:ec:db:3a:08:eb:3d:
02:31:59:aa:28:f9:47:5d:26:bc:3c:ed:60:03:a6:
88:e4:08:b7:f0:f9:b6:5c:b0:0c:b2:f1:05:0c:63:
89:44:de:e8:13:bb:26:71:cd:01:f5:8f:3d:23:8b:
42:54:58:af:65:ee:34:dd:2d:bc:2f:2e:f0:7b:9f:
b7:30:e5:5a:2f:4f:52:40:15:14:d3:27:b9:ea:e6:
e1:9e:45:bc:e8:d3:7e:e8:de:3b:10:6d:5e:6e:29:
9e:7e:91:2e:9e:cd:2f:4b:91:09:b3:e2:25:22:9e:
f2:7a:96:4d:92:1e:88:99:33:97:58:ed:ea:41:3a:
e1:14:6e:04:18:22:ef:ac:d8:67:24:44:b8:94:ce:
78:17:65:c9:bb:44:11:a5:52:c9:58:2e:57:00:c5:
28:35:ba:1b:e1:54:e6:d0:8f:f5:14:e5:f3:2d:2b:
a4:2e:58:26:d3:90:e8:7a:49:65:f3:7c:7d:8b:c7:
dd:02:3c:a5:cb:48:a3:3f:79:3c:60:f3:b3:16:63:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:41:10:9E:73:1B:FE:EE:15:3C:5C:ED:55:5B:DF:51:C5:97:14:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e5a4bc2-074f-33da-a7c5-2317a3d7ae48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:14:7c:d0:e3:da:a0:4c:0c:5d:c9:19:c6:05:52:e7:1d:1c:
b9:f5:b5:1a:f4:3a:64:fe:90:6c:04:98:da:37:9f:9a:09:3d:
37:0c:01:bb:11:a5:26:79:12:80:2f:23:7f:55:d5:4b:6d:fe:
6e:76:79:73:96:8d:e7:c5:16:4c:a3:16:e1:7a:fa:d4:45:9d:
64:ea:9e:69:3e:52:f2:5e:b3:98:2f:5e:3f:45:c6:2a:d3:9f:
93:5b:1d:dd:41:04:d6:46:8c:1e:3d:76:e3:3a:45:36:ac:4f:
24:39:b1:00:b7:cc:64:38:49:3e:ed:be:25:95:be:02:c1:63:
5a:61:7e:3b:50:71:49:a7:37:81:49:f9:d1:00:59:37:43:3b:
f1:85:76:00:41:47:f8:7b:df:20:ce:8f:e6:b5:75:56:48:51:
b4:7a:94:72:04:1f:42:24:5f:65:71:9a:d6:5f:35:4f:03:64:
73:0b:cc:e3:29:4d:73:b3:d7:fa:06:2f:5a:18:e3:c7:34:e5:
f4:0e:2a:2d:a8:31:94:62:c0:bb:04:f3:eb:9b:d4:0d:7e:ee:
09:56:91:28:76:7f:84:07:0e:10:fa:2b:9f:bb:cc:a6:58:47:
28:46:bd:72:9f:c7:56:18:11:f3:7c:4d:ed:52:dd:97:6b:2a:
09:4e:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:04:45 2025 by rpki-client