Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e635814a-13ec-335b-bb42-0f8176f765df.roa
File: e635814a-13ec-335b-bb42-0f8176f765df.roa (raw, json)
Hash identifier: Xa0udtW77MtmvhrMaFxWefrML3yuCc40Mdu60cZM/3M=
Subject key identifier: 8C:7B:E7:D7:1B:BB:3F:77:34:D6:8A:AC:0B:53:16:15:61:68:AA:0C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2EA47DAD73CBC77EF8E80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e635814a-13ec-335b-bb42-0f8176f765df.roa
Signing time: Mon 07 Apr 2025 16:33:11 +0000
ROA not before: Mon 07 Apr 2025 16:33:11 +0000
ROA not after: Sun 06 Jul 2025 16:33:11 +0000
asID: 81
IP address blocks: 128.109.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:ea:47:da:d7:3c:bc:77:ef:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:11 2025 GMT
Not After : Jul 6 16:33:11 2025 GMT
Subject: CN=68e37419-57e4-4d6a-a171-55e0acf970ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:29:13:4d:84:a0:eb:ea:8c:05:9e:89:50:
6b:2d:7a:ed:15:58:a3:8e:43:1b:1c:1e:0e:13:7b:
2c:e1:82:cb:6f:a0:1e:9c:ec:7a:8a:f3:1b:81:87:
31:52:21:d8:e3:41:3b:ad:d0:96:ad:dc:61:37:e8:
9e:6c:50:10:68:78:b1:6b:13:8e:75:42:ff:75:cc:
5b:43:e6:be:19:42:ce:b0:87:d7:e6:b8:10:c0:d0:
f8:6d:77:fa:96:c2:91:3c:64:10:3d:96:dd:96:6c:
5c:c0:06:c0:b5:37:60:32:da:43:fb:28:09:21:dd:
33:48:a7:f9:e5:41:6e:d1:d1:d5:f7:99:e9:67:7d:
cc:05:33:10:4e:41:c1:f6:4a:d2:59:74:3b:72:1f:
08:32:58:d4:2a:a4:1d:a4:bf:cf:7b:9e:ff:5c:bd:
7c:3c:88:06:5b:21:f2:c0:7f:bb:20:83:66:91:66:
ec:fa:83:1d:45:d6:03:d6:96:9b:23:97:98:11:cb:
d4:d5:b5:49:36:2d:3a:c9:05:e2:6f:cb:9d:4c:d6:
62:8d:44:79:e6:ad:00:ad:da:0a:ca:d7:0a:11:38:
16:67:3c:77:f8:b7:8a:e3:b5:d6:05:6f:e6:9d:6f:
64:cf:59:35:ef:1d:52:a6:14:f9:06:3f:35:cf:3f:
c0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:E7:D7:1B:BB:3F:77:34:D6:8A:AC:0B:53:16:15:61:68:AA:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e635814a-13ec-335b-bb42-0f8176f765df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:b4:32:52:e6:1b:39:50:1b:a4:48:8f:e3:3f:e8:1e:14:2c:
57:77:b8:ee:4f:2d:d8:ae:32:87:ef:84:df:9a:2c:0a:f4:db:
a8:cd:97:a1:35:79:78:d8:35:0a:92:1b:f9:ab:f4:f9:71:f0:
74:8c:1d:0c:80:4a:10:c8:39:8b:59:34:52:2a:db:e0:0c:8a:
da:e2:3b:f6:c8:75:56:11:02:46:e3:a7:44:89:4b:e8:7f:a9:
ef:15:b0:e4:61:2d:70:24:d7:c2:33:ce:09:4a:52:f3:ae:ab:
00:fe:19:05:fe:9c:aa:bd:7d:f6:ea:99:53:66:ec:4f:18:61:
e2:d8:91:6f:4f:9b:75:53:77:94:95:a1:a3:fb:6f:da:b5:56:
33:71:f4:6b:7e:01:0b:43:5e:5c:95:c0:c0:a7:12:da:6b:bf:
f6:ed:ea:32:eb:a0:74:b0:50:5c:91:f1:18:d7:db:e8:90:86:
84:a5:ba:9f:da:4c:2f:eb:84:4f:b0:b0:b2:35:3e:91:3f:00:
e9:7a:a4:02:8a:2f:4e:89:c3:36:3f:be:83:59:41:1a:18:05:
f7:00:ed:5d:de:12:a8:83:7a:e0:66:02:68:64:1c:d7:5f:73:
27:b7:d8:bd:77:43:61:37:a1:ce:0d:0e:19:98:a6:5d:08:6a:
33:73:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:38 2025 by rpki-client