Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8cd40970-690d-3c1f-91df-e9a50b6070fb.roa
File: 8cd40970-690d-3c1f-91df-e9a50b6070fb.roa (raw, json)
Hash identifier: MWZ5lhs/pMzF+20XbhzeeAsMG9RRArObAr0rzyZPIIs=
Subject key identifier: BE:C8:BB:75:E9:CB:8A:B8:F0:31:77:4E:20:79:A6:64:67:51:72:79
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285846D5DA91B1F1D0B617E167D1E0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8cd40970-690d-3c1f-91df-e9a50b6070fb.roa
Signing time: Sun 11 Aug 2024 01:00:28 +0000
ROA not before: Sun 11 Aug 2024 01:00:28 +0000
ROA not after: Sat 09 Nov 2024 02:00:28 +0000
asID: 5624
IP address blocks: 20.133.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d5:da:91:b1:f1:d0:b6:17:e1:67:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 11 01:00:28 2024 GMT
Not After : Nov 9 02:00:28 2024 GMT
Subject: CN=be9d98b7-4155-41f8-9a26-89ef7deb1270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:7f:49:04:a7:b0:e4:92:ad:73:2d:1c:36:
a0:4b:78:f9:89:71:00:08:8f:39:40:b0:d0:f2:d7:
dd:d2:a5:b4:34:60:d4:e1:4e:de:82:42:ce:4a:a1:
a3:12:2e:23:2a:3c:1d:3a:86:de:2e:e1:a3:b7:ac:
c4:dd:f6:b3:58:90:a7:d7:9a:d0:75:a3:57:8e:25:
44:d4:29:0d:94:72:00:9e:5a:1b:c7:63:0f:45:9e:
8f:49:b6:d0:47:e8:8e:a9:d1:ca:7c:6f:5c:a2:49:
aa:0f:af:8f:bb:3b:95:85:dc:5d:cf:ea:da:d3:09:
9e:f7:3a:af:ec:04:2a:8e:66:6f:d1:be:64:91:08:
b5:21:b4:ab:ed:0a:dd:f2:da:79:d3:97:d5:44:cb:
f1:92:26:98:bf:76:50:ce:f3:34:5e:dc:fa:58:9c:
7b:50:66:78:08:73:db:f9:91:eb:a1:a6:a2:c6:3f:
44:b8:54:48:5a:2b:57:aa:74:50:d3:5a:cf:0d:36:
76:7f:0e:74:0b:8f:70:7f:44:f4:a7:e7:54:82:07:
83:ae:f8:2b:39:55:a2:f3:23:7d:8a:97:77:99:94:
11:84:bf:db:ac:35:98:a8:7e:0f:d5:df:21:82:b2:
9c:14:33:db:9f:c1:b2:34:a7:4b:6b:99:45:ab:c8:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:BB:75:E9:CB:8A:B8:F0:31:77:4E:20:79:A6:64:67:51:72:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8cd40970-690d-3c1f-91df-e9a50b6070fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:18:36:67:90:13:de:4b:55:a3:dc:63:76:30:91:60:41:35:
3f:c2:28:ef:73:35:23:60:ac:85:33:68:ed:9e:84:74:dd:6f:
e4:cf:48:d0:ee:ed:dd:02:e3:b0:92:7c:44:61:01:ce:14:32:
b7:b9:d2:49:dd:09:4d:ee:45:26:43:d6:c8:75:d3:1d:03:b4:
b7:c6:08:1e:43:52:22:7b:d0:0c:d1:ea:db:04:9d:85:fb:e0:
02:52:19:dc:65:b2:6a:f9:fb:7c:2b:64:bd:a2:ee:83:03:3f:
8a:8e:b7:0c:04:51:ae:e9:e0:03:f9:64:13:d8:0d:aa:f6:49:
df:33:cb:c9:47:f3:ff:a5:b1:b8:c3:5d:82:77:d5:59:e3:d0:
a2:21:56:48:a3:f4:d3:5e:02:4c:4e:82:e1:e3:bf:53:cd:a6:
bc:4b:f1:e3:d5:71:da:6d:ff:df:9e:a9:a6:a4:fb:1c:e2:ef:
e5:56:3a:37:3f:ab:c7:cf:0d:eb:a1:25:21:b3:10:b8:24:74:
78:ab:aa:b1:c4:01:7c:98:b8:b5:48:d4:bc:17:36:19:5a:b9:
cc:d4:f3:51:bb:2b:b8:84:6e:3a:fb:f9:b1:2a:f5:6f:a5:54:
da:51:74:d2:1a:2c:64:c5:76:ae:5d:83:3b:93:10:c5:c3:35:
f9:b0:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:17:24 2025 by rpki-client