Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7b2035b1-e5ad-3ccd-a019-63413c9d5680.roa
File: 7b2035b1-e5ad-3ccd-a019-63413c9d5680.roa (raw, json)
Hash identifier: zAJVcUBeG+lf6L5HX7mkYPJ0monP+zeZQLRpKqpq20w=
Subject key identifier: 55:42:6E:F1:3C:4C:A0:99:E4:D5:6E:48:F3:38:72:67:56:78:B5:90
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858466BA78BCA762294CD2AEA8BC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7b2035b1-e5ad-3ccd-a019-63413c9d5680.roa
Signing time: Thu 04 Jul 2024 00:02:05 +0000
ROA not before: Thu 04 Jul 2024 00:02:05 +0000
ROA not after: Wed 02 Oct 2024 00:02:05 +0000
asID: 21877
IP address blocks: 20.137.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6b:a7:8b:ca:76:22:94:cd:2a:ea:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 4 00:02:05 2024 GMT
Not After : Oct 2 00:02:05 2024 GMT
Subject: CN=f6f52987-4223-43dd-b429-3bbd25f5a62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:7f:01:bb:4f:1c:ad:7c:03:48:28:2a:ae:
36:9f:4e:fc:c8:5d:17:1c:53:e9:94:90:b9:a0:07:
d7:51:00:d3:7e:f8:21:c7:47:4e:aa:84:55:6b:17:
9e:15:77:23:6d:1f:92:ff:3a:08:38:0b:32:70:e8:
a6:51:86:bc:60:a5:8f:0e:18:2a:8e:a2:ca:c6:8a:
76:c3:a5:ab:89:35:4a:7b:ea:70:d0:78:f0:22:bb:
a3:77:f2:01:5b:2f:2f:a5:eb:91:91:db:5b:0b:a3:
be:b6:42:43:b4:f7:0f:19:2d:7b:7c:22:17:cb:de:
5f:4e:fd:70:66:2c:51:b8:ce:3e:7b:2a:be:3a:a1:
f8:da:71:0c:e2:66:1f:ba:5f:5d:ed:ac:b5:49:43:
60:8f:62:d2:7c:90:68:82:45:09:93:45:c8:80:f9:
68:37:a5:b8:b7:fb:1a:5d:2b:13:98:62:5c:53:2f:
90:9d:14:0a:b1:30:c3:2e:1b:46:cd:1a:b6:b0:02:
ec:bf:5c:47:b0:ae:84:c0:8e:de:81:8c:a9:fe:84:
b6:79:41:97:e5:ac:30:85:22:a4:95:f7:71:e0:ee:
0f:12:b2:c4:33:39:c9:09:5f:39:69:08:81:1a:98:
83:68:4a:09:82:31:da:91:4a:d7:9b:c0:e7:dc:f6:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:6E:F1:3C:4C:A0:99:E4:D5:6E:48:F3:38:72:67:56:78:B5:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7b2035b1-e5ad-3ccd-a019-63413c9d5680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:e9:59:37:60:a9:df:76:cd:b3:90:f8:21:67:e3:62:18:0f:
3b:22:f9:5b:b7:7b:9d:ab:cd:ff:3f:b9:e1:65:23:5b:28:16:
fe:a2:1f:a1:c4:57:7d:f0:37:db:a5:7f:84:c2:a8:33:3c:71:
49:79:8d:de:ed:ce:58:a0:33:b6:e5:b9:8f:e8:8e:04:8a:8a:
d7:0f:dd:80:6c:ad:26:bd:80:53:27:8b:cd:f8:72:05:f2:19:
6b:45:a6:2a:d3:cf:76:5c:8b:b2:41:82:a5:37:49:17:ab:73:
93:89:35:0c:17:13:53:7f:f2:45:24:a5:b1:e2:9c:7c:a5:47:
ec:d9:fe:09:ff:7f:cf:6c:d8:7b:82:ac:f0:d2:e7:9b:ee:b6:
49:74:97:b6:0e:3c:8a:d2:5b:b5:07:6e:97:4d:80:58:93:b3:
9b:d3:2d:7b:8d:b8:1d:5c:46:df:ef:29:1c:27:ac:f1:4b:c8:
b4:50:74:5e:cb:d1:01:a8:13:4f:81:5b:cb:a3:46:5e:69:c4:
c1:33:fe:d4:f4:49:8e:6d:3a:0a:eb:e5:89:ac:a1:4d:99:fd:
00:b1:b8:d5:76:17:3a:9b:8e:c9:ed:65:9f:e0:bb:03:63:c2:
dc:d7:78:76:16:3a:d5:9f:d5:e2:a8:d4:91:26:78:35:7d:90:
06:60:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:40 2025 by rpki-client