Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/07326a9d-51ad-3965-a5b7-bc8c348a22dd.roa
File: 07326a9d-51ad-3965-a5b7-bc8c348a22dd.roa (raw, json)
Hash identifier: ewHaF4YS6c/fWKHVuKH9579m0eRrR7b99NvBEniyO14=
Subject key identifier: D5:22:13:67:87:49:D2:82:9E:C3:C7:A2:9D:62:01:CA:81:F2:F1:55
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858466AD948CBEECB604E459CD370
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/07326a9d-51ad-3965-a5b7-bc8c348a22dd.roa
Signing time: Wed 03 Jul 2024 17:06:30 +0000
ROA not before: Wed 03 Jul 2024 17:06:30 +0000
ROA not after: Tue 01 Oct 2024 17:06:30 +0000
asID: 4237
IP address blocks: 20.137.14.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6a:d9:48:cb:ee:cb:60:4e:45:9c:d3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 3 17:06:30 2024 GMT
Not After : Oct 1 17:06:30 2024 GMT
Subject: CN=3675d564-1863-4f47-b8e4-fad874d6fcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:9f:bc:05:a8:d7:0c:a8:6f:88:bd:3e:36:
78:b8:18:cd:66:60:33:30:ca:dd:54:2d:17:a8:e3:
b4:b6:4b:3d:ee:2c:2b:b2:9c:8f:49:97:3a:af:c7:
b5:d4:ba:e4:34:c5:d9:21:ed:4a:0e:6d:6c:6b:71:
dd:20:7c:d0:8a:38:f5:51:ca:27:83:88:c2:dc:fa:
17:5a:37:00:f8:ac:4d:58:11:dc:e3:83:31:3e:4e:
5d:dd:8c:da:dc:8d:56:44:12:82:d7:aa:33:87:08:
b7:51:aa:ef:69:63:c2:89:de:33:d5:05:bc:27:f8:
c4:a3:ac:fc:58:5e:ca:14:4a:15:42:f9:62:2e:d3:
b7:ee:c3:c2:dc:19:09:8c:e7:dd:39:4b:45:83:4c:
b9:10:d5:4f:32:18:73:89:6f:34:55:0d:b5:32:0e:
e0:cb:16:f7:72:40:d8:27:0a:fa:2a:77:75:54:63:
a6:1c:62:07:22:85:e0:15:71:8a:ae:87:99:cc:a5:
44:71:6a:6b:42:a3:03:6c:b9:76:27:aa:35:c8:a8:
59:49:b3:fa:b6:55:45:44:f5:0a:c4:fa:78:68:e0:
7d:83:7b:e9:a4:37:7b:62:70:41:f4:65:df:01:7c:
21:e4:fc:4d:43:b2:9b:2e:81:d8:99:f1:e0:47:05:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:22:13:67:87:49:D2:82:9E:C3:C7:A2:9D:62:01:CA:81:F2:F1:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/07326a9d-51ad-3965-a5b7-bc8c348a22dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:1b:a5:43:f8:73:1b:d0:68:ce:c0:c8:cf:8e:cc:cf:3d:45:
6c:d7:0f:cb:81:0f:cc:0f:cb:8d:da:fd:d8:3f:01:f7:d6:0b:
13:05:6f:79:e2:d9:be:4d:62:0c:56:52:d2:5f:af:c9:8b:3f:
47:49:bd:88:8d:47:37:27:63:48:d2:d8:f1:06:bb:6d:ad:75:
df:ef:d6:d0:4c:fe:c6:19:2a:d3:37:ff:9b:af:49:44:64:91:
95:1f:26:4f:20:85:66:f2:e6:f6:bc:f0:f3:d4:98:bf:93:b9:
77:25:74:10:f3:dd:b3:41:a8:eb:46:48:9b:36:29:47:e7:2b:
95:62:10:20:cc:9f:f1:61:17:d4:aa:fa:62:3a:1f:db:93:88:
26:6e:e5:bb:92:a7:47:61:d9:df:f8:60:d9:d4:af:d9:70:8f:
19:09:a7:9c:fa:2c:70:47:75:7e:b2:89:dc:6c:c3:96:bf:d4:
b5:39:0a:1f:12:73:3a:ca:0e:99:23:fc:5e:a9:ce:3d:ee:b5:
bd:63:25:af:eb:8d:ae:45:8c:e2:43:3e:13:fc:7b:8e:8b:b8:
6d:79:d2:50:a8:62:33:34:44:ad:97:bd:93:21:da:49:7e:e5:
a8:88:33:7a:1c:61:fe:08:af:64:9c:aa:54:27:b0:9f:47:56:
e6:56:b5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:02 2025 by rpki-client