Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a172b59-b2ee-3395-a32c-5bf881873aed.roa
File: 5a172b59-b2ee-3395-a32c-5bf881873aed.roa (raw, json)
Hash identifier: d/H5scLiB7snRzT6UOmX0+oFb94vtRH8T0bzyXPdp04=
Subject key identifier: 8A:9E:94:64:40:2A:CE:31:95:99:D7:28:36:35:EE:50:18:A9:A9:FD
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584659D0D7377AF5C5F820672A00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a172b59-b2ee-3395-a32c-5bf881873aed.roa
Signing time: Thu 27 Jun 2024 14:40:45 +0000
ROA not before: Thu 27 Jun 2024 14:40:45 +0000
ROA not after: Wed 25 Sep 2024 14:40:45 +0000
asID: 4237
IP address blocks: 20.137.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:59:d0:d7:37:7a:f5:c5:f8:20:67:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jun 27 14:40:45 2024 GMT
Not After : Sep 25 14:40:45 2024 GMT
Subject: CN=43df2ba6-cd13-4910-ac0d-87ff01062a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:16:91:ff:ce:53:62:47:db:34:d1:19:db:
4f:a5:8a:8c:71:08:60:a4:de:ad:3e:ea:41:f6:85:
6c:48:25:b7:25:6e:fe:40:f4:06:75:dc:fe:92:ab:
bb:b5:81:b7:8c:24:1d:c6:18:68:e9:de:e4:0a:d3:
cd:2b:35:a9:a1:e1:b1:52:7d:b5:44:24:fe:69:71:
87:fb:3e:02:67:28:83:7d:ec:51:b1:64:24:0e:8a:
4f:0e:11:c8:d7:db:08:48:01:16:87:66:1e:e4:af:
7d:c3:8d:9b:96:07:cc:e7:e2:34:1c:f9:db:f6:57:
10:e2:a1:a7:11:f3:09:ac:f9:3e:4f:60:11:4f:f1:
99:b4:62:59:4f:f8:f0:a4:3c:62:6a:9a:cd:f9:8e:
fb:49:50:1a:26:05:b4:31:e0:4c:da:99:7a:8f:cb:
02:18:4d:2e:e5:43:28:01:85:c9:58:6f:37:90:41:
49:5d:6f:22:fd:4b:cf:d8:dd:4f:bc:9d:4d:83:95:
d0:63:b5:7a:2d:b0:ba:8f:c0:fb:74:f9:0a:08:9b:
72:6f:7a:8e:5b:87:7c:20:55:d7:7b:0a:9d:37:43:
fe:5b:46:0c:08:09:3e:cc:5f:bf:0c:0d:df:a2:fc:
73:15:35:f3:63:08:16:cb:8f:33:c6:24:7a:b8:75:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9E:94:64:40:2A:CE:31:95:99:D7:28:36:35:EE:50:18:A9:A9:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a172b59-b2ee-3395-a32c-5bf881873aed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:51:2a:5c:21:93:bb:4a:a5:dd:f3:25:cd:98:fd:28:84:99:
b3:c8:02:c7:2f:9b:a8:a5:06:0f:88:be:83:df:63:9d:b2:f8:
d2:e0:dd:d5:cc:ef:ba:d7:85:f5:53:62:57:0c:c4:15:e3:28:
93:9d:e1:57:cf:51:f1:41:3b:35:ca:a6:83:fb:48:f4:93:f1:
f0:53:bb:9c:9f:1f:e8:08:70:dc:6e:98:ec:8c:85:91:6f:0b:
98:41:96:fe:54:f0:48:16:c5:bb:e3:c8:78:3e:65:35:8f:eb:
97:46:ac:d3:6f:b5:ac:f8:52:3a:10:aa:92:c5:de:56:9f:9c:
96:3e:5a:a0:1d:ff:ba:ac:c2:6e:87:1f:49:19:5a:25:32:72:
6c:d7:87:fc:77:c0:68:97:08:bb:41:a9:d9:b6:79:c5:d3:df:
78:91:af:72:9d:8b:57:15:47:c5:c1:39:b6:cc:3b:2b:9d:31:
73:b0:01:ae:6f:d3:af:41:26:a2:e6:46:fc:1b:a7:05:09:e1:
45:99:35:8d:65:a3:a7:e0:c9:b5:8a:26:58:6f:00:c9:36:d0:
ae:11:2e:b5:ab:af:95:73:e1:f3:d5:ba:a9:05:12:e7:14:f2:
74:6e:62:b7:aa:69:14:8b:6c:2d:76:c4:9f:c8:44:6b:7f:72:
15:13:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:54 2025 by rpki-client