Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2c358d5-3eac-3ac6-89be-5151a9f5bc1c.roa
File: e2c358d5-3eac-3ac6-89be-5151a9f5bc1c.roa (raw, json)
Hash identifier: 6ZN5p1UdzmBJoV6BLV6BtPndqDsgnmk48EQS0mN6gDg=
Subject key identifier: 0B:70:EE:2E:72:7C:B7:A5:C1:47:33:9F:56:5D:D1:CC:D2:A4:A4:E6
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285846C51A73ADEEB3DB3A14088E00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2c358d5-3eac-3ac6-89be-5151a9f5bc1c.roa
Signing time: Mon 05 Aug 2024 01:00:29 +0000
ROA not before: Mon 05 Aug 2024 01:00:29 +0000
ROA not after: Sun 03 Nov 2024 01:00:29 +0000
asID: 203
IP address blocks: 20.132.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c5:1a:73:ad:ee:b3:db:3a:14:08:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 5 01:00:29 2024 GMT
Not After : Nov 3 01:00:29 2024 GMT
Subject: CN=251c8753-4c79-4cb0-8eca-d54d6a626f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:72:48:fe:38:31:85:2c:ad:09:14:ed:cc:
c1:10:b9:13:25:52:70:5f:01:49:8a:bb:d7:69:4c:
46:22:34:15:2f:c6:a6:0b:0a:8a:13:de:82:1d:be:
4c:cd:42:3c:32:f6:5b:78:a8:f4:cb:9e:d3:d6:94:
92:f4:2a:f5:d1:61:b7:dc:01:79:1b:d7:4d:4c:0c:
60:09:52:5b:f3:b3:24:af:35:dc:06:18:73:21:85:
eb:52:2a:f2:d6:1c:2f:d3:b1:bf:9b:c3:61:8f:a9:
b1:63:58:87:2d:c3:29:f7:0f:af:9e:22:d0:b1:32:
58:26:1c:e7:db:17:e2:d3:0a:51:de:64:57:2b:44:
e6:91:b8:42:08:e5:c4:12:d8:05:6d:0b:6d:d9:e4:
f7:c6:9f:e8:99:b3:26:be:a4:41:e5:bb:83:1c:65:
54:b5:49:73:81:f5:f8:63:71:ea:c0:78:7b:e9:4c:
03:5a:f5:1b:4c:4d:40:41:13:7d:2d:b2:b2:c7:d1:
fd:3a:f3:33:cc:98:5d:43:77:16:d0:ef:ab:15:cb:
20:ca:b9:f3:9d:d7:c8:2e:14:9a:fc:97:ec:bc:56:
30:01:61:d5:d4:e8:fe:ee:66:e2:bc:f1:40:72:e5:
d6:bd:e2:f2:04:4a:c7:c8:f3:f0:27:ee:35:85:3e:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:70:EE:2E:72:7C:B7:A5:C1:47:33:9F:56:5D:D1:CC:D2:A4:A4:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2c358d5-3eac-3ac6-89be-5151a9f5bc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.132.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:62:da:c6:6e:10:6a:07:3f:c3:6c:a4:95:2e:0f:3a:da:1f:
59:d5:ab:c9:66:61:25:a9:87:39:53:4d:19:85:06:66:2d:af:
b1:d5:6b:76:00:f0:2b:b1:88:04:35:a7:c3:b8:29:0e:d0:02:
d8:66:6d:b8:33:68:36:fd:cb:8f:96:23:e5:73:e6:31:fc:ad:
63:7a:50:78:84:1a:19:e4:9b:18:98:92:5f:45:57:ea:ad:89:
cf:d1:f7:46:33:45:0c:5c:f0:0b:43:22:e1:53:45:7b:7e:82:
a0:3f:b4:b8:d6:5a:8d:7e:17:98:46:80:91:48:3f:6b:4c:38:
d9:9e:4d:d4:43:aa:f3:f1:11:b9:c3:55:e9:6c:ba:11:eb:72:
70:0b:d0:36:d2:79:eb:03:eb:09:5e:68:86:11:ae:0c:c5:fe:
dd:05:cb:28:63:29:b7:94:dc:79:62:10:59:92:ef:46:bc:a1:
45:30:cc:90:ae:84:92:61:7f:3d:f1:e2:20:0c:46:85:ce:3c:
dd:38:81:5a:15:d4:78:8a:47:d9:b1:d7:ed:8c:9e:f6:53:ca:
0e:01:c5:ef:29:8a:ed:d7:dc:e4:d8:a6:5c:c7:17:42:9d:2e:
77:58:0f:0b:5b:f1:cd:4c:f9:d9:66:0d:a8:8f:90:43:d1:ab:
e1:ba:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:52 2025 by rpki-client