Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf482502-9d3a-3606-958d-0931039e8ce2.roa
File: bf482502-9d3a-3606-958d-0931039e8ce2.roa (raw, json)
Hash identifier: guANXbS+YE1lT8rcOy1Y7rfOmPSKqY4fdVRchNf3tD8=
Subject key identifier: FA:5D:E6:B0:60:D2:13:F0:D3:A1:24:56:C3:47:AE:1C:33:14:5C:31
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD362A9F66F012106279710
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf482502-9d3a-3606-958d-0931039e8ce2.roa
Signing time: Tue 26 Sep 2023 21:00:52 +0000
ROA not before: Tue 26 Sep 2023 21:00:52 +0000
ROA not after: Mon 25 Dec 2023 22:00:52 +0000
asID: 397232
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:62:a9:f6:6f:01:21:06:27:97:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:52 2023 GMT
Not After : Dec 25 22:00:52 2023 GMT
Subject: CN=0a0d046a-32a8-4e89-806d-af33bfdf5582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:a9:ec:5f:78:fa:6f:80:ec:3f:ed:62:5b:
74:5a:c3:3f:8d:26:a4:66:1f:00:86:37:28:ad:4b:
d4:19:9c:b5:57:29:e3:dd:13:7e:aa:17:1f:45:e0:
30:e1:e8:91:c8:a8:cd:e1:f9:f2:ff:14:ba:1b:b9:
b9:e8:14:46:bd:bc:57:d3:37:4f:ac:43:06:d5:4b:
93:81:b5:88:d4:4e:64:af:6f:c8:c1:92:17:77:9e:
36:93:68:84:bc:11:9e:a9:d2:f9:91:aa:bd:34:08:
fe:b1:79:fe:27:7d:d5:1c:cf:c0:a7:81:ac:13:5d:
f5:0d:6f:b3:03:4c:bd:14:41:d6:9e:26:1c:7d:6f:
63:18:46:86:95:10:9b:f0:3e:85:30:77:b9:fd:e3:
e1:4b:4b:39:d2:09:bb:11:ae:18:7e:41:9f:99:89:
85:8c:5c:ee:ef:0d:a7:ca:59:39:af:b5:7c:1f:c8:
24:d5:0d:88:50:4d:dd:94:3f:55:c0:2a:a7:a2:4f:
7b:2d:1c:e3:d6:d2:04:f2:7c:2d:e1:86:b9:07:4c:
ed:4f:a2:47:58:20:8c:51:ca:27:69:75:71:57:e4:
32:42:75:48:39:cc:c9:51:55:65:be:c5:4c:60:65:
1e:b0:83:a5:a9:b4:0c:c1:3c:bf:44:22:57:00:2b:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5D:E6:B0:60:D2:13:F0:D3:A1:24:56:C3:47:AE:1C:33:14:5C:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf482502-9d3a-3606-958d-0931039e8ce2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:73:90:75:b7:6d:ea:77:f4:a3:14:14:2a:88:30:af:81:70:
1f:64:f3:5c:a3:14:ad:4b:30:4f:f1:7f:2b:02:d8:ab:21:74:
c2:0e:51:86:3e:fb:b7:37:3e:83:02:29:6b:1b:ff:f7:b5:f9:
9b:1b:e9:19:de:e0:c5:25:3c:50:02:a6:12:9b:b4:a6:f1:6c:
8e:5b:72:8d:02:f1:20:78:e3:6b:5f:47:ad:50:79:2a:73:6d:
33:dc:9b:ff:05:c9:81:06:55:e1:bf:0a:12:8b:6b:a8:d8:b5:
1a:8a:b1:0d:24:13:3b:84:35:ff:50:65:b8:f0:8b:e2:86:9f:
98:b1:75:84:f4:3f:a9:62:8a:01:9b:6e:7f:ca:74:80:25:f9:
99:70:f7:e4:13:85:be:6e:30:8d:9d:46:9e:4f:8e:48:0a:3a:
fc:23:13:ee:25:9e:fa:34:eb:e1:ac:c0:bd:dd:cf:d6:2b:01:
9b:d9:5a:33:58:45:b8:0a:28:21:5b:98:91:5e:51:cb:de:dc:
92:ea:48:8c:31:85:e6:18:e0:67:20:be:be:d6:8c:01:05:02:
a0:1d:39:7b:61:16:8e:95:bc:0f:1c:34:a6:82:80:9c:8e:1e:
25:58:44:25:e8:fa:b3:19:64:1c:85:26:62:9e:8e:17:e3:c5:
13:86:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:51:14 2025 by rpki-client