Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a285b4b3-e964-3437-96cd-326ab47a52c2.roa
File: a285b4b3-e964-3437-96cd-326ab47a52c2.roa (raw, json)
Hash identifier: s+KLVC9p7NMahXDOFGH79ZQrynjws7T5uY7IX6K9k/o=
Subject key identifier: 83:9A:2A:F8:24:D6:96:37:10:55:D4:84:CC:BD:23:F0:9A:4E:C4:0A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE3FB91EBB662C3E261A200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a285b4b3-e964-3437-96cd-326ab47a52c2.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 67.69.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e3:fb:91:eb:b6:62:c3:e2:61:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=ea8e110e-e335-47aa-8d55-cbff20b85d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:ff:7a:1f:f7:07:21:cc:f3:6c:5e:a1:11:
b1:6f:63:fb:6d:57:78:a4:25:c8:d4:42:45:ef:fc:
e5:57:4c:51:2c:97:c4:f6:65:3b:8c:90:f4:a1:eb:
17:de:5d:1e:3c:3f:3a:2b:e2:53:84:cd:28:cd:c5:
4b:4f:d3:c6:cb:03:f3:d3:0d:89:a3:65:c9:29:fb:
ea:71:ad:51:f3:7b:cc:3e:27:e6:33:6d:d6:f3:0b:
b7:63:4d:f2:eb:97:a8:31:3b:fd:b3:6f:84:26:28:
65:b7:86:1d:84:0f:c3:73:7a:8c:b2:b1:1d:9d:8d:
db:e3:ca:8d:1e:31:8b:be:40:b0:dd:1b:99:8f:ba:
05:d0:ec:f2:53:66:8b:a5:63:45:29:14:42:29:1a:
40:96:af:a1:40:08:8f:11:5b:8f:56:06:c5:ad:1a:
23:ae:6b:af:af:5b:2d:5f:45:c5:ab:59:6b:96:f2:
02:15:eb:23:c8:ac:a6:04:6e:bd:02:29:14:96:71:
10:fc:c8:f2:db:be:a5:4e:d3:bf:f1:e0:aa:bb:ce:
a0:77:f6:ce:eb:8b:3c:38:dd:f9:0e:f0:aa:c5:aa:
b7:31:3f:12:f3:e9:ab:a7:1e:3a:96:af:6c:d5:21:
0c:15:61:12:69:bd:6c:08:3c:37:5d:f9:bd:1f:ca:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:2A:F8:24:D6:96:37:10:55:D4:84:CC:BD:23:F0:9A:4E:C4:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a285b4b3-e964-3437-96cd-326ab47a52c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:7a:3e:33:26:62:1a:11:03:10:4e:e8:f5:71:6b:1f:50:49:
ea:38:c5:b0:7f:bf:2a:62:d4:fb:cf:24:6f:8c:06:1d:49:bf:
82:71:d3:c0:20:c9:1b:68:31:55:4b:fd:d1:69:3b:d6:30:ed:
77:49:16:29:12:1a:51:8b:39:e6:0b:b4:09:56:ac:29:f6:ee:
d7:22:21:cf:fd:af:49:04:a1:1f:4c:3a:09:80:19:3d:d2:a5:
90:df:ff:cf:17:d7:12:a8:79:14:04:78:5a:c3:00:70:be:3b:
c7:c2:ca:25:32:83:28:01:09:27:9a:39:cc:a2:ae:28:c7:60:
8c:63:26:b2:0e:18:a2:95:f5:e7:33:f0:71:88:c7:af:4a:10:
fd:4e:b2:86:66:dc:2c:99:f3:13:88:af:74:f2:a6:48:9f:a2:
9d:88:98:af:20:73:22:84:37:f7:9b:af:e9:4d:3f:6c:3e:4e:
b9:99:e8:22:1a:b7:b2:cd:93:5f:30:ee:6e:e0:c1:dc:56:ea:
78:26:76:49:4e:62:8d:ae:8f:99:a8:c1:5c:ce:b0:4a:a7:b0:
9a:8e:55:84:f5:62:87:50:08:26:41:e8:9a:3e:a7:b9:78:65:
d8:22:8e:cc:fe:4f:db:3b:36:3e:cf:c6:3a:e5:38:fd:67:ab:
4e:ff:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:04 2025 by rpki-client