Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/465a26bf-f3a0-3a46-9b70-6b7133b5ee07.roa
File: 465a26bf-f3a0-3a46-9b70-6b7133b5ee07.roa (raw, json)
Hash identifier: vw9PQPVi1+cGQ4eQoD7KKjXwEwD1AQO4kVj1HzsCn7Q=
Subject key identifier: 3E:D4:2C:ED:62:1C:19:83:9D:E6:F8:16:81:EA:24:AC:A2:3E:19:C8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD363928523F2C1319CA200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/465a26bf-f3a0-3a46-9b70-6b7133b5ee07.roa
Signing time: Tue 26 Sep 2023 21:00:52 +0000
ROA not before: Tue 26 Sep 2023 21:00:52 +0000
ROA not after: Mon 25 Dec 2023 22:00:52 +0000
asID: 397227
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:63:92:85:23:f2:c1:31:9c:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:52 2023 GMT
Not After : Dec 25 22:00:52 2023 GMT
Subject: CN=8c16516e-b0da-46d4-925a-8f7e9022497a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:69:1b:59:b5:e3:94:8c:3e:f8:ba:7b:21:74:
0d:ff:33:2c:a8:5f:50:81:c8:c1:69:29:0d:7b:ad:
09:d6:14:c2:e5:42:b3:bc:83:84:7b:5b:46:5f:89:
fc:b6:dc:c8:d2:97:ce:be:77:4d:19:45:13:00:77:
e7:1a:f9:b3:ef:8c:3f:5e:99:54:ef:3c:36:22:18:
29:b5:ca:bf:dd:c5:3f:fd:66:e0:72:05:a8:44:7a:
c9:9d:77:64:1b:a6:4d:d7:17:05:af:3d:e1:94:ad:
3b:be:35:a9:f5:38:52:d7:ef:3f:65:94:98:2b:f9:
fd:73:90:02:03:4a:85:fc:56:a5:07:9d:bb:c2:60:
db:90:dc:22:3d:97:ed:e8:74:68:eb:24:48:a3:8b:
e6:f2:c6:e0:91:6f:6d:b0:03:5e:86:ea:32:37:78:
2d:8f:34:7e:e5:72:aa:29:43:13:54:1c:b5:bf:55:
a6:aa:a9:92:b9:71:c3:5a:d3:e0:cf:18:94:fd:8f:
54:47:56:ec:86:54:49:c4:c3:50:1e:6a:7b:8d:3a:
a1:2a:53:bd:be:f3:77:2f:db:f2:1c:54:d3:80:b4:
43:6e:22:45:06:b3:16:fd:42:4c:e6:be:a1:87:8a:
74:ca:0e:52:7e:7f:67:1d:33:99:63:32:98:d6:a6:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D4:2C:ED:62:1C:19:83:9D:E6:F8:16:81:EA:24:AC:A2:3E:19:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/465a26bf-f3a0-3a46-9b70-6b7133b5ee07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:dc:94:db:ad:87:49:ab:42:47:ed:d7:a5:b9:4d:73:e4:dc:
95:69:5d:f7:ed:33:45:00:b8:cf:2d:20:25:4f:2b:1b:6b:d3:
75:06:47:8d:c8:bf:c5:2f:48:32:f0:2f:47:a7:a1:cf:f3:7d:
c4:73:e2:e8:36:96:e1:34:d9:a5:bb:c1:29:68:c3:a9:51:30:
52:4f:1e:63:40:13:74:e9:3f:96:6b:92:99:f5:26:87:dc:ec:
97:ae:3f:a3:68:26:6a:fc:7e:b5:41:79:82:b4:b5:27:3f:aa:
cf:03:0e:7b:93:38:57:5c:6e:e0:f5:48:69:79:9d:6c:81:65:
a2:e1:68:f5:03:78:0d:a2:fe:e5:bb:72:78:f3:f1:87:6a:a6:
52:85:a2:16:3c:c9:19:26:d7:dc:38:00:ad:43:8e:ee:19:4b:
65:ed:2e:9f:62:b0:68:26:aa:bc:47:09:a7:ca:a3:3a:47:c4:
29:5c:e2:6f:3c:5d:25:9a:45:a4:fb:4d:53:41:03:05:05:e2:
02:c0:63:10:55:c4:bb:89:47:77:9e:32:60:57:1f:66:c7:ce:
b7:cb:8c:a5:82:ba:46:12:ef:47:cd:aa:c5:ae:65:c0:95:e1:
59:e5:c8:47:f1:50:9c:cc:4f:c2:a5:10:6b:0d:9b:7a:6a:e3:
6f:b6:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:21:50 2025 by rpki-client