Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33dfb761-b044-3c41-bdf5-0f92684de4fd.roa
File: 33dfb761-b044-3c41-bdf5-0f92684de4fd.roa (raw, json)
Hash identifier: vgqct3t4TT7wyC4ksvWxStJZ7XuBBjhNkN1cjFIKUEs=
Subject key identifier: 99:C6:A2:54:43:B4:A4:EE:A5:43:DB:70:EC:A9:B3:A9:D9:51:5D:8C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285843E8B82601198142A82F7FF400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33dfb761-b044-3c41-bdf5-0f92684de4fd.roa
Signing time: Wed 15 Nov 2023 12:00:00 +0000
ROA not before: Wed 15 Nov 2023 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.68.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e8:b8:26:01:19:81:42:a8:2f:7f:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 15 12:00:00 2023 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=978966cc-bdd3-4387-8680-08add1191343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:5c:df:ca:e9:d9:32:1c:b0:0d:f8:ee:37:
f2:1d:19:4b:e2:2e:9b:04:a3:4e:2a:ce:aa:99:78:
ce:c5:f7:00:6d:e2:94:3f:b0:fc:fe:8a:a0:78:b5:
52:89:d2:af:b7:5c:eb:ef:9e:8f:7c:15:4d:73:26:
98:28:48:75:f1:48:02:0b:84:8e:d0:34:e6:d8:21:
52:6b:c8:07:a7:e3:5d:e0:aa:ac:07:3c:c0:e5:82:
e1:63:cd:51:a4:68:dd:a4:69:25:29:2e:be:fa:79:
74:76:33:50:81:aa:eb:4e:6f:bd:f3:0b:2f:2d:fb:
57:c9:f7:a8:f6:1a:33:f2:f3:c5:9a:90:6e:d5:77:
5a:29:19:6b:f1:be:9e:20:3c:6c:00:b1:91:7f:d3:
91:01:55:73:0c:47:77:09:0c:ed:2f:5c:04:5b:25:
45:34:58:2c:6a:e5:f1:8b:40:4e:c4:85:cb:c5:a3:
48:14:79:b3:a4:06:71:e7:6a:b9:00:4f:e1:07:6f:
db:22:8a:c8:56:f8:eb:a6:ae:9e:86:52:36:b2:8b:
d4:30:7f:64:c6:50:08:5e:58:20:be:50:97:4f:e8:
58:3c:d2:03:32:9a:f2:7b:9b:33:c1:81:e1:88:a7:
f9:82:35:1c:16:f9:bb:90:68:86:e3:5e:a0:56:80:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:A2:54:43:B4:A4:EE:A5:43:DB:70:EC:A9:B3:A9:D9:51:5D:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33dfb761-b044-3c41-bdf5-0f92684de4fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:ef:7e:d3:f8:a1:1a:0f:48:dc:f8:2c:70:34:b7:58:9a:90:
43:d7:4a:bb:af:b7:f5:6f:87:49:38:fe:d6:27:c5:df:75:78:
55:57:7d:18:58:d5:a8:50:cd:7f:a3:73:94:17:68:a9:07:af:
31:b3:2e:25:4e:ad:2a:bb:09:3d:27:b4:c7:c4:3b:99:55:c1:
e7:63:1b:90:c2:48:41:ca:17:71:90:a9:89:09:7b:49:68:eb:
b5:34:fa:cf:8a:94:5f:09:6c:5f:f6:98:4f:ef:c1:29:3e:7a:
54:6a:93:37:b9:25:2d:e6:3a:42:1e:f5:02:00:1a:bd:2c:f3:
e7:66:d0:03:4e:db:80:e3:45:36:a1:51:2d:dc:9c:51:26:d1:
21:12:12:27:f7:11:e3:f5:08:37:8c:88:b9:2f:70:87:eb:f8:
1a:58:85:61:e6:cb:44:58:18:d8:eb:c7:05:01:bf:b5:37:19:
8d:6f:de:61:4a:8a:a5:0d:1c:46:4e:4d:47:77:78:1b:f0:61:
18:b5:fc:a3:58:7e:00:98:01:8d:7b:e7:8e:5d:b6:fe:e9:9d:
ea:fc:31:d5:84:38:be:cc:6c:87:cb:c5:90:57:e9:6d:04:4a:
3c:6b:c8:7c:85:fb:19:e5:32:5a:ca:8b:97:d1:a1:69:40:ac:
f0:68:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:17:56 2025 by rpki-client