Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c63bb330-3cef-3eec-8a20-d8b68ccc4b3e.roa
File: c63bb330-3cef-3eec-8a20-d8b68ccc4b3e.roa (raw, json)
Hash identifier: Mt2PEgYrNG5AYRjuFf/KpOeSVCrUGkKZCUgsTWLLIw0=
Subject key identifier: C9:4C:94:09:55:78:AA:37:49:55:A5:55:42:4C:03:18:BC:88:E4:7B
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584831035BE72BC1FC86FF912200
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c63bb330-3cef-3eec-8a20-d8b68ccc4b3e.roa
Signing time: Fri 13 Dec 2024 09:28:16 +0000
ROA not before: Fri 13 Dec 2024 09:28:16 +0000
ROA not after: Thu 13 Mar 2025 08:28:16 +0000
asID: 54535
IP address blocks: 146.197.78.0/23 maxlen: 23
146.197.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:03:5b:e7:2b:c1:fc:86:ff:91:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 09:28:16 2024 GMT
Not After : Mar 13 08:28:16 2025 GMT
Subject: CN=3f615fb8-3d9e-4953-942f-92caa757ddcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:f2:75:3e:b2:a2:a5:3a:be:3a:5f:1f:c4:
fb:f9:c1:62:dc:ab:4d:93:7b:b7:d2:33:49:af:ea:
b2:7c:be:04:f6:ae:cb:4a:56:71:04:b5:90:90:40:
dc:6e:9c:b0:9a:60:4b:3c:52:c4:a5:58:3d:1a:71:
f5:0d:4c:0d:3c:45:90:66:66:a9:a1:c1:78:c1:45:
31:89:4e:e8:90:1d:40:e8:04:af:a7:07:25:49:10:
ae:af:a0:fc:51:02:95:ff:9f:4d:d6:d2:48:f6:af:
cb:6f:12:cf:79:d2:02:48:98:1d:94:5c:09:7b:9b:
f1:1a:a8:a9:47:5b:43:ba:b2:f6:c9:80:c7:02:b2:
43:c3:3e:70:09:83:9b:3e:39:7c:c7:d7:eb:73:30:
8c:a9:ad:3b:1b:cf:22:32:25:cd:80:0a:b0:c9:f1:
31:73:a4:65:8a:73:65:1c:a0:63:64:43:81:3e:24:
16:99:11:53:20:00:52:54:99:75:e9:1e:6b:4d:58:
27:87:21:de:d3:56:c2:22:66:a7:e9:ce:5f:b3:50:
15:cc:8f:4a:27:30:d4:ec:d0:52:eb:e6:da:70:29:
d7:dc:e8:bf:d5:c7:3b:03:49:32:ac:6d:3a:5e:7d:
53:50:ac:e3:20:f3:c4:92:d6:ed:81:df:53:e3:e8:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:94:09:55:78:AA:37:49:55:A5:55:42:4C:03:18:BC:88:E4:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c63bb330-3cef-3eec-8a20-d8b68ccc4b3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
146.197.78.0-146.197.80.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:01:90:d5:63:89:e0:93:be:bf:35:d3:9f:68:9e:11:5e:58:
a6:6c:88:4b:c0:db:03:1c:c1:b2:d0:70:38:45:79:a7:cc:53:
a7:db:0a:c4:11:36:1b:de:01:b9:3d:06:ac:b9:c9:32:0e:0f:
15:38:22:9a:9d:b6:e0:ac:43:44:32:6e:44:62:45:4a:b0:34:
c6:a7:4e:81:4f:11:70:fa:22:02:c9:fe:e5:32:c4:01:de:80:
15:01:c4:5e:6b:18:c9:17:7d:02:61:92:4e:10:1c:b3:d9:8d:
e9:17:2c:bb:6f:a3:13:72:24:07:8a:38:96:7d:6f:e4:dd:ee:
74:9d:3d:b4:67:0d:2d:89:cb:ac:cd:3b:99:8b:78:26:2d:b4:
05:81:bc:3f:ee:43:47:f0:eb:b9:83:e3:53:b3:13:bb:fe:01:
1b:ec:3e:5b:fa:84:00:c1:99:ed:65:7c:11:12:88:d9:0c:06:
23:f8:da:02:c3:fb:da:0a:d2:5f:7c:45:91:a1:35:d9:77:4c:
39:96:60:d7:f1:6a:04:92:be:72:71:95:94:a5:d9:a5:e2:cb:
c0:6b:e8:58:cd:56:0a:98:44:d1:f2:ee:74:7f:aa:90:45:5c:
cc:e6:e9:66:96:e1:a6:e5:04:21:c7:c9:de:9b:bc:d6:d5:a5:
1e:d6:16:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:51:47 2025 by rpki-client