Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/10d08edb-db21-32ee-8cc8-3770f7ff5fa5.roa
File: 10d08edb-db21-32ee-8cc8-3770f7ff5fa5.roa (raw, json)
Hash identifier: 9ySY5Pk+DsDywD/pt0kHy4FoADnOD8Ywb8zW526Lct0=
Subject key identifier: 57:32:6A:4B:0E:CD:B4:1E:06:37:1B:CE:23:93:1D:5D:19:7E:E2:C4
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858466BA911D97CA6BE40B7E35240
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/10d08edb-db21-32ee-8cc8-3770f7ff5fa5.roa
Signing time: Thu 04 Jul 2024 00:05:10 +0000
ROA not before: Thu 04 Jul 2024 00:05:10 +0000
ROA not after: Wed 02 Oct 2024 00:05:10 +0000
asID: 21877
IP address blocks: 20.137.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6b:a9:11:d9:7c:a6:be:40:b7:e3:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 4 00:05:10 2024 GMT
Not After : Oct 2 00:05:10 2024 GMT
Subject: CN=39689ad4-c141-48de-a583-79d9d6df83dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:70:64:48:2e:5b:d1:05:87:37:5d:39:ef:
c5:49:a0:a9:b0:ec:3f:ae:9b:94:b0:09:ab:4f:97:
c9:2c:7d:71:df:e3:51:7c:29:fc:b2:bc:49:66:33:
b4:31:79:cc:68:7b:fc:35:ad:ad:d0:2b:d3:ea:9b:
ab:ee:92:55:0b:fe:5d:74:40:6b:2b:75:9a:a0:7f:
ac:f2:dd:87:8f:6a:4e:ba:ee:2e:55:4e:c6:43:39:
9a:f6:5a:d0:74:76:a0:08:60:32:50:66:3c:7b:c6:
1f:64:93:ba:e8:9c:72:56:60:b8:0a:f1:6c:66:fc:
1b:4b:7e:e8:91:5f:b6:33:49:76:8e:bf:dd:00:8b:
de:7a:5d:c0:45:ba:ed:5d:25:f1:da:22:a0:b1:ad:
72:6c:eb:62:1d:18:67:1c:e5:56:e1:7b:6f:04:f3:
58:cb:e6:8a:d4:d7:36:6b:10:d8:e8:d9:09:9f:2d:
3b:78:f0:59:8d:70:f4:ff:02:78:b0:36:bb:5f:87:
aa:4f:7d:f5:16:8a:f3:b1:e1:30:6d:86:aa:de:da:
ca:60:84:9a:10:5b:f7:c0:03:46:9b:d7:4f:7c:6e:
fb:3a:0c:3a:c0:6b:7b:b2:2d:18:2f:d5:f3:9f:34:
82:0a:f8:30:c8:f1:46:0a:11:87:2d:2b:16:32:bd:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:6A:4B:0E:CD:B4:1E:06:37:1B:CE:23:93:1D:5D:19:7E:E2:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/10d08edb-db21-32ee-8cc8-3770f7ff5fa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:c4:93:f9:58:37:74:5d:35:93:2a:de:3b:36:01:f9:7d:3c:
8d:b0:3f:d7:52:0a:21:45:09:bf:22:fe:0a:2e:7f:bc:2d:57:
e2:cf:19:ed:62:c5:42:4e:ca:ac:d8:5a:e4:af:7f:27:81:5d:
54:ad:5b:43:00:c2:ed:b0:d3:47:01:85:99:4d:ba:cd:65:27:
d9:8d:22:43:ec:00:49:8f:c8:71:0a:2d:dc:4a:1f:cb:55:2e:
37:64:93:d7:bb:a7:bb:e8:20:83:a3:1e:e1:03:ee:92:11:e1:
a7:a1:96:0d:8d:97:be:a0:b2:60:4d:e7:01:13:8e:f5:2a:41:
dd:d2:c8:9e:db:ad:e7:98:62:bc:d5:23:1e:bf:2b:67:58:06:
80:b0:6a:39:de:4e:47:61:dc:0f:e7:02:0a:a6:b8:e3:5d:12:
4d:1f:1e:d7:dc:94:40:2c:a3:42:06:65:14:29:0e:a0:6e:98:
a9:07:9c:6e:5c:f6:a1:2a:4b:c7:10:ea:5f:ec:19:fb:6c:10:
c7:b0:16:ce:36:5a:d9:09:df:d0:9a:75:c1:87:0a:74:47:dd:
3e:36:78:2e:c1:81:99:36:f8:b8:a0:49:57:b2:2d:9d:a6:e9:
46:02:28:8e:2a:f9:1c:e0:b4:dd:9f:3b:7d:6b:80:3f:38:88:
3e:3e:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:47 2025 by rpki-client