Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/d9ccabe9-f4d2-3b68-92b1-e922427c7e66.roa
File: d9ccabe9-f4d2-3b68-92b1-e922427c7e66.roa (raw, json)
Hash identifier: VeQ5ZmvrewVFj3SM4iD5GTyEwCNEqtizUm2rDHgikzo=
Subject key identifier: 34:EA:0B:77:4F:20:B0:9E:0A:85:AC:B6:CF:EF:ED:CE:7B:9A:E2:46
Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7
Certificate serial: 010D0C9F43285844E121348B50927995A9900DA0
Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/d9ccabe9-f4d2-3b68-92b1-e922427c7e66.roa
Signing time: Tue 13 Feb 2024 16:22:55 +0000
ROA not before: Tue 13 Feb 2024 16:22:55 +0000
ROA not after: Mon 13 May 2024 15:22:55 +0000
asID: 13933
IP address blocks: 198.160.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:e1:21:34:8b:50:92:79:95:a9:90:0d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7
Validity
Not Before: Feb 13 16:22:55 2024 GMT
Not After : May 13 15:22:55 2024 GMT
Subject: CN=8a832050-b3de-4f6c-a31f-49acb52f2bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:48:31:a6:1e:38:e3:8d:df:10:8b:fa:8b:
39:fd:6a:3d:9c:62:f7:2c:86:f9:d9:e5:b4:bb:ac:
22:5f:b8:b4:76:b2:3b:0e:99:c3:14:40:ec:0f:ca:
e2:5d:af:ee:5c:d7:1a:a5:23:ed:50:29:db:59:3e:
e2:c5:b6:f0:4f:a1:ee:c3:22:21:13:a2:10:13:63:
e3:4b:ee:31:57:71:d7:29:09:d6:8e:47:93:26:32:
10:d3:51:b5:79:c3:b0:d3:2d:16:4c:85:13:db:88:
c3:94:e7:e8:2e:8c:ec:92:84:b3:38:3e:6f:df:c3:
e8:90:07:ce:64:ae:89:0b:6d:2b:e6:1c:af:7d:01:
8e:1f:a0:32:73:9b:49:fa:c9:a1:34:09:34:0c:be:
9c:0d:aa:e5:a0:be:87:38:38:da:ce:92:16:a6:3f:
65:dd:07:41:f7:6e:83:28:84:7c:95:82:6b:9a:e3:
73:c8:b7:9c:ca:56:e4:7b:06:c7:41:14:89:2e:cd:
04:5f:6c:d9:e2:56:cc:da:5b:cc:fd:d6:a6:47:03:
dd:ca:2c:44:7b:98:c5:5a:13:c9:b7:bf:a9:9e:9f:
a8:5a:57:25:f6:59:ea:ac:13:9d:86:9c:c4:a8:14:
05:d3:51:32:6e:9c:81:86:0f:cf:98:5e:9f:d5:26:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EA:0B:77:4F:20:B0:9E:0A:85:AC:B6:CF:EF:ED:CE:7B:9A:E2:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/d9ccabe9-f4d2-3b68-92b1-e922427c7e66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl
X509v3 Authority Key Identifier:
keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.160.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:80:2b:a0:09:7d:1e:15:b4:d8:77:a5:e9:3a:d1:20:bf:cc:
06:43:0d:23:6c:42:fb:d7:56:5d:4f:51:fc:7c:d5:97:0f:dc:
fa:81:fe:4e:6a:eb:3e:a3:2b:bb:f4:fa:bb:81:0a:4e:f0:df:
fd:e0:f9:13:95:bd:9f:47:12:ac:14:41:41:c0:4a:6c:ac:08:
36:0b:80:cc:d8:3b:12:9d:49:09:23:f4:68:5e:09:af:b7:2a:
18:12:1a:04:f5:88:00:86:8f:ca:43:b1:df:7e:87:01:b3:f0:
6d:f4:c1:9b:6d:46:18:3f:16:19:5b:23:ea:fc:76:4f:b2:d4:
f8:d0:c4:91:83:91:49:f9:a8:44:a9:dc:7d:57:88:d0:64:5d:
cb:ff:eb:bb:e9:8f:9f:0a:c4:1d:47:ea:c4:32:82:4a:be:8b:
42:d5:bc:d6:50:f1:8f:10:b9:46:eb:e4:f6:57:70:35:9a:4a:
d3:50:ef:e2:54:f7:86:fe:7b:5f:1a:74:14:a9:3a:29:fe:ff:
ff:5f:3e:03:99:98:b8:dd:2d:d4:8b:12:da:a4:af:24:62:04:
30:44:2c:a7:8f:d4:8b:4f:11:37:91:40:67:05:8a:cd:51:d7:
62:2d:29:19:05:cb:0b:53:89:82:ec:7f:8a:76:30:60:82:8d:
ca:2b:b4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:24 2025 by rpki-client