Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/9f9a66af-d4fb-3cd9-934d-55aa80ad1726.roa
File: 9f9a66af-d4fb-3cd9-934d-55aa80ad1726.roa (raw, json)
Hash identifier: h1whUkOtfkcRfF/YX0ZV4M5G/KRtJVHFlGkme2wbeJw=
Subject key identifier: 42:0E:EA:35:B3:B2:0E:00:90:84:B9:73:59:60:D3:D7:42:60:20:7A
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F432858488123B8941B18596A1E468C00
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/9f9a66af-d4fb-3cd9-934d-55aa80ad1726.roa
Signing time: Sat 11 Jan 2025 02:18:08 +0000
ROA not before: Sat 11 Jan 2025 02:18:08 +0000
ROA not after: Fri 11 Apr 2025 01:18:08 +0000
asID: 400597
IP address blocks: 217.149.96.0/22 maxlen: 22
2602:fb1b:60::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:23:b8:94:1b:18:59:6a:1e:46:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Jan 11 02:18:08 2025 GMT
Not After : Apr 11 01:18:08 2025 GMT
Subject: CN=2886cd45-7b79-485c-94ac-70445236cc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:62:fd:10:e9:7e:51:8f:8e:9a:99:7c:ba:
dd:b0:73:b9:32:5d:e5:1b:8d:13:73:4d:02:a8:f5:
b2:1b:bf:73:29:79:7c:f8:a9:e8:96:f7:68:fb:25:
6e:75:75:48:d5:db:85:7f:73:4a:9e:2e:77:92:91:
6e:fb:7c:54:42:40:28:a3:8b:b1:64:07:11:31:fd:
80:1e:b1:2a:36:f4:07:89:21:25:9f:ae:3f:cf:66:
c4:d5:23:5f:4e:71:a5:ac:33:d4:a8:d8:b1:2b:bc:
df:ff:b2:b6:8f:3e:c6:c0:5d:2b:61:34:d2:78:3a:
ac:c4:09:f1:7d:ca:ea:0c:da:7f:27:05:24:9d:4d:
00:b5:71:c1:66:1d:f6:93:01:ca:c9:e8:c9:d5:f6:
b1:db:dc:43:6e:a0:18:2b:73:dc:5c:b9:12:67:e5:
83:9b:0b:d5:19:61:b9:52:58:27:ea:9e:3c:4b:48:
df:01:e1:52:84:3e:98:3c:8c:23:d8:e6:3c:85:a4:
6a:10:82:96:08:7b:db:d0:14:a0:3b:aa:30:8e:99:
86:86:12:79:62:49:f7:f4:ba:cc:23:97:d9:04:45:
5d:04:e8:50:d0:5e:39:e5:62:c0:00:7d:39:8f:3e:
a4:60:d3:fe:38:48:5a:f9:d9:6b:21:d5:37:39:ed:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:EA:35:B3:B2:0E:00:90:84:B9:73:59:60:D3:D7:42:60:20:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/9f9a66af-d4fb-3cd9-934d-55aa80ad1726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv4:
217.149.96.0/22
IPv6:
2602:fb1b:60::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:6a:6f:12:78:c4:94:6c:dd:5b:1d:d4:ca:11:54:a1:99:75:
4f:4a:4f:80:7e:52:cb:e8:67:d6:3c:de:33:fa:12:05:f4:9f:
80:71:77:0d:72:e9:51:02:0a:2f:57:35:18:da:8c:2a:fd:d4:
48:7b:29:c7:c1:0c:73:4c:75:a1:e8:f0:2e:4a:8b:31:c7:df:
d2:2d:fb:64:f5:3e:24:f1:4e:8b:91:f6:f8:aa:65:57:1d:30:
41:55:8e:0b:f9:ad:80:cf:dd:ad:38:9b:94:ec:2b:17:13:db:
5d:01:fc:e7:69:78:8f:8a:49:f5:2a:22:8c:f1:cd:41:b0:11:
ed:98:42:65:6c:f7:6b:ea:a8:a5:e5:ad:c8:ab:2a:c2:79:4d:
9b:2d:44:c4:05:df:9c:bf:af:66:78:08:87:e6:1f:13:9d:7d:
08:1b:d2:39:03:66:94:b4:7d:90:24:fc:54:93:ce:96:15:ab:
69:1f:92:53:7f:aa:01:c5:af:20:72:c8:a9:eb:5f:8b:2f:2f:
aa:8f:92:af:cc:0c:04:2d:ac:a7:66:0e:83:60:eb:5f:f4:ad:
84:9c:22:9c:d4:76:a6:3d:c4:7f:18:94:d6:65:73:82:40:2a:
6d:4a:22:c6:5c:78:63:7e:0c:89:d9:df:74:87:b3:ad:bd:52:
7e:2d:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:32 2025 by rpki-client