Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1b9b4ea7-7aa5-3f1b-bc6f-3e3c4b857b48.roa
File: 1b9b4ea7-7aa5-3f1b-bc6f-3e3c4b857b48.roa (raw, json)
Hash identifier: 9/C8L2RSIEOYZOM4Y8Zv36g1jlZilgn8g92vbkKH6lQ=
Subject key identifier: 57:8C:CA:2A:28:BC:47:BB:88:0D:E9:F7:67:0A:A3:6F:88:1E:90:3F
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285846E69AA8B1815B4CA227C98780
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1b9b4ea7-7aa5-3f1b-bc6f-3e3c4b857b48.roa
Signing time: Sat 17 Aug 2024 01:00:30 +0000
ROA not before: Sat 17 Aug 2024 01:00:30 +0000
ROA not after: Fri 15 Nov 2024 02:00:30 +0000
asID: 17916
IP address blocks: 20.134.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e6:9a:a8:b1:81:5b:4c:a2:27:c9:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:30 2024 GMT
Not After : Nov 15 02:00:30 2024 GMT
Subject: CN=64ac989b-4d76-488f-aed4-8203971978ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:c4:d0:13:c6:71:b7:4a:fc:65:9f:cf:cc:
03:95:20:b2:54:ac:29:e0:4d:c8:6e:58:7d:fc:f0:
30:5a:2a:b0:6d:96:ca:06:3d:18:1b:f0:f8:86:0a:
09:0b:6a:73:05:06:bb:6c:44:37:f0:ba:e2:2f:e8:
7a:13:ff:bd:c4:92:77:c6:aa:5a:6d:c9:fb:82:2f:
90:91:b0:68:b4:72:0f:a6:77:af:7c:b3:97:a3:32:
7e:4d:d6:5e:4a:5d:f1:c0:70:81:24:57:e3:46:b3:
4c:df:fa:63:c0:11:eb:56:59:f5:c1:79:05:d6:23:
8f:ba:e6:95:78:d0:cb:b7:b8:70:b2:ad:f2:eb:16:
75:6b:c1:7a:48:c7:0a:ec:76:42:2b:7b:61:7e:cb:
46:ec:08:de:9b:2f:70:a2:d3:53:57:d5:49:7b:b8:
22:08:50:fb:2a:c9:08:6c:05:de:10:a4:1d:1e:20:
68:40:a6:67:c5:2a:b4:84:2d:69:6c:fb:28:74:9a:
14:0a:8f:b6:b0:5d:42:8b:0c:3e:d3:4f:8c:4c:8d:
c8:6e:ad:58:fc:c2:8b:fd:ca:a1:0b:94:56:a3:05:
92:de:b1:41:b5:d0:ad:cd:fc:eb:73:2c:61:14:96:
e2:b4:41:83:ba:fc:74:5f:bb:6b:2a:78:c6:31:e2:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:CA:2A:28:BC:47:BB:88:0D:E9:F7:67:0A:A3:6F:88:1E:90:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1b9b4ea7-7aa5-3f1b-bc6f-3e3c4b857b48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:90:91:b3:7a:b8:32:c2:55:d0:c1:64:d8:a7:a3:0f:d9:d8:
f0:36:b6:bd:71:43:52:9c:f7:9d:b8:81:17:be:35:86:ed:dc:
7e:e8:8f:7a:7b:5f:51:11:9d:9a:1a:4c:ba:ab:27:14:d8:c8:
b8:42:e8:17:cf:30:01:9e:3e:6b:72:cd:28:56:f6:30:05:58:
8f:b3:c2:71:3a:1a:3c:f2:fb:2a:76:9e:2a:97:aa:a0:e6:3b:
0e:52:2f:80:09:89:77:92:59:82:89:ce:7b:3b:3a:2e:e7:52:
92:44:85:fd:cd:f0:1f:30:ac:b9:73:82:a5:ef:ed:7f:ff:7e:
b2:ba:13:08:2a:d0:89:77:f2:7b:c7:f1:27:ae:7f:93:9e:d2:
a5:bb:4f:df:22:1b:fb:46:34:f5:f8:70:2f:78:95:6b:ea:32:
e1:1d:ad:82:6e:96:49:3b:42:47:32:bf:c7:e9:db:05:a3:f1:
5d:53:be:68:17:4a:3b:1f:70:e1:1f:7d:fe:7c:58:0c:fd:02:
89:f7:da:04:e7:a5:1e:f2:0e:96:8f:30:8d:b5:4a:7d:69:eb:
15:de:e1:c3:b8:b6:8c:5c:1f:35:d9:4a:08:d1:8b:be:d5:30:
fa:dd:42:ce:3f:4e:24:9d:c8:3d:02:3f:0a:00:43:74:7f:d2:
cc:c4:4e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:59 2025 by rpki-client