Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2f0597a-080f-35c3-af5d-0e69a56ab9a5.roa
File: d2f0597a-080f-35c3-af5d-0e69a56ab9a5.roa (raw, json)
Hash identifier: uKv7ophL5T29sXFbrxxtPE0d7mlz3mU1/UTnVmwNV4w=
Subject key identifier: AB:C2:B5:2D:BF:23:84:C0:54:6F:55:20:50:2D:1D:18:6E:FD:1D:5B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285845CF43A762CA6869B876BD2D30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2f0597a-080f-35c3-af5d-0e69a56ab9a5.roa
Signing time: Tue 07 May 2024 12:00:00 +0000
ROA not before: Tue 07 May 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.68.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:cf:43:a7:62:ca:68:69:b8:76:bd:2d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: May 7 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=355182af-5cff-4723-a3f0-5c2bcb6ac10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:15:75:d1:c5:6c:c6:fa:a0:06:c3:d8:2b:
c3:e9:41:40:cc:c7:a3:d0:2d:41:26:48:69:64:ee:
62:2f:dc:75:3a:87:d7:14:ec:66:05:52:85:f7:ca:
95:27:39:88:c3:4e:69:69:2f:43:c9:75:73:37:2a:
46:dd:ae:9b:30:1a:98:47:f1:4d:10:af:26:f0:64:
5f:05:a2:ad:b0:38:66:50:27:c0:32:2a:7a:f7:0b:
06:29:29:6d:39:70:27:fc:56:15:5c:27:6b:b9:a7:
94:a6:ff:86:7e:7d:ca:76:a4:fe:c5:c6:66:ef:bb:
16:90:cc:c9:ab:8e:e4:4b:72:53:99:89:da:5d:21:
ab:4c:83:d6:37:71:0a:90:04:cf:d6:f0:82:df:ec:
cf:9f:fb:4d:e4:c6:7a:5a:70:c7:68:c0:d8:f2:d5:
8e:68:2f:b2:0e:68:46:bf:72:a2:ba:68:1a:34:c4:
4b:25:ac:ca:31:42:23:b2:98:ff:3d:12:bf:0f:b7:
b2:51:1e:2a:da:db:02:6c:82:75:bd:9d:d3:f4:c3:
5a:83:04:de:2c:7b:54:cf:31:e3:cf:08:73:5b:d7:
82:ac:70:63:5f:59:fa:37:71:b6:a2:54:81:8b:33:
0e:68:7b:91:e9:d0:df:6a:26:ff:7c:b6:2a:70:52:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:B5:2D:BF:23:84:C0:54:6F:55:20:50:2D:1D:18:6E:FD:1D:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2f0597a-080f-35c3-af5d-0e69a56ab9a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:88:58:cf:04:d7:d6:e9:3e:3b:8b:c9:d1:92:0a:b6:3b:78:
a1:15:62:f2:6a:8a:9f:0d:86:d1:e0:0f:ac:1e:17:00:31:f2:
10:88:af:78:4f:4d:2c:ff:a6:83:01:12:cd:3f:9c:8b:31:c4:
f3:21:8b:80:80:a1:7b:0b:0c:d2:33:28:d7:03:2f:45:4a:6b:
50:53:27:b3:ec:38:8b:51:a7:99:86:73:e9:be:c6:f1:d3:48:
82:45:b8:a5:78:f6:d8:d6:ed:be:26:e2:aa:b2:3a:86:4b:67:
1c:4b:e1:3c:68:b4:92:8a:cb:f2:d9:82:7f:9a:55:33:d5:b3:
e0:7c:41:79:51:83:78:2c:cb:22:6d:5a:6f:79:ba:87:69:d6:
f6:1b:f5:8e:18:11:f8:54:1a:65:ab:9e:6c:31:81:f6:b0:5f:
e2:93:bf:ed:ee:62:ff:5b:06:d2:b0:e4:e6:f3:76:8f:9d:26:
a9:a5:a5:86:f0:a5:e0:f8:a3:1b:3d:f9:d3:9f:e7:d2:27:ae:
9b:ba:c2:4d:7e:44:72:57:d2:cb:d5:b9:fd:1f:31:49:b1:9c:
4d:d0:68:7b:3c:28:a4:6a:ec:3f:2e:96:f1:87:bb:8e:d3:55:
80:f6:50:3c:bf:42:73:1a:21:4a:c3:73:2e:00:18:7c:c8:dc:
7f:e4:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:24 2025 by rpki-client