Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/e348dc24-a6f5-366e-90b2-f81e2e9e91ba.roa
File: e348dc24-a6f5-366e-90b2-f81e2e9e91ba.roa (raw, json)
Hash identifier: zJJkpBqiILikXBrHzLETOLpBOAHMEP9xwM7XmRvTWt8=
Subject key identifier: D9:6C:DF:51:0C:15:9D:7E:D4:E0:96:11:C1:62:6F:A6:B1:CE:F1:01
Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial: 010D0C9F432858451DEEE0C081F78DD72C602680
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/e348dc24-a6f5-366e-90b2-f81e2e9e91ba.roa
Signing time: Wed 06 Mar 2024 11:05:50 +0000
ROA not before: Wed 06 Mar 2024 11:05:50 +0000
ROA not after: Tue 04 Jun 2024 10:05:50 +0000
asID: 14618
IP address blocks: 150.9.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1d:ee:e0:c0:81:f7:8d:d7:2c:60:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Validity
Not Before: Mar 6 11:05:50 2024 GMT
Not After : Jun 4 10:05:50 2024 GMT
Subject: CN=e624bd77-faf5-44c9-a69f-c404c0285f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:fd:a1:dd:6c:26:e2:83:29:49:2e:ea:28:
28:2a:ab:17:87:58:cb:05:51:7d:24:c9:c8:e2:b0:
e5:f7:45:97:8b:ec:b0:e8:9b:d5:d1:27:c5:f5:d7:
4c:65:3a:b6:24:53:e8:23:74:3f:31:13:3d:86:b0:
d7:85:2c:cc:d2:92:89:f4:62:f0:f7:9a:6d:56:77:
54:83:1d:1d:c8:5b:68:81:d1:6d:b4:6f:94:0f:d1:
1a:2a:d5:93:29:43:a5:70:d3:73:0f:35:db:7d:f6:
20:51:a8:30:31:d5:5d:e0:e2:7b:88:41:2d:20:0d:
c7:38:ac:13:b4:b6:8e:d7:c9:55:79:b4:50:10:6c:
c1:34:3c:78:5e:56:89:63:38:ac:e7:38:04:3c:56:
d7:11:8c:9f:aa:11:fa:13:b2:51:3f:2a:dd:a1:da:
64:36:bd:70:00:87:a1:b7:3a:96:28:b9:2d:61:78:
fa:de:f7:a3:7f:88:e3:ae:63:4a:1a:4c:b6:e8:80:
8b:7c:29:34:ef:b0:f7:60:e7:67:46:21:0e:c1:12:
e9:d1:76:fc:cf:f1:75:a3:bf:ad:5c:3c:db:aa:fc:
4e:40:90:5a:6a:ae:40:aa:d1:99:cf:69:35:ed:2d:
42:b3:17:b2:20:2a:f7:7a:58:5c:b3:4d:52:da:89:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6C:DF:51:0C:15:9D:7E:D4:E0:96:11:C1:62:6F:A6:B1:CE:F1:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/e348dc24-a6f5-366e-90b2-f81e2e9e91ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
X509v3 Authority Key Identifier:
keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
sbgp-ipAddrBlock: critical
IPv4:
150.9.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:9a:17:88:6a:b4:96:14:26:31:e7:17:e3:1e:8b:0c:11:06:
90:de:40:64:04:30:4f:d6:b5:d5:54:e0:77:49:dd:7e:16:46:
39:dc:53:dc:6b:1e:6d:0e:55:6f:80:ff:cc:4c:78:89:25:10:
95:54:db:8b:52:53:95:65:77:ef:f8:ee:c6:6d:6e:02:0b:e6:
f6:76:a9:d7:fb:06:27:c9:67:27:d9:e8:23:b8:35:81:07:28:
71:96:fa:c6:e0:8c:63:e6:20:dc:c3:3a:f0:49:b7:a7:f6:48:
ad:fb:99:14:2a:f5:b1:09:8a:d9:20:78:6c:93:21:4e:f7:5a:
e5:20:c2:80:e2:5b:24:b0:05:50:6d:97:27:fe:ac:a4:74:e3:
9a:30:13:2d:2d:c6:cd:2b:d5:0d:6a:5e:de:8c:fe:7c:eb:b9:
4a:fa:2c:9c:ca:c8:a7:67:79:52:10:51:56:f1:6c:1d:68:8a:
55:c7:f3:47:dc:e5:c8:3a:c2:1d:5e:69:fa:ca:c4:0a:12:8f:
32:90:56:8e:db:ee:a3:e6:83:6b:bf:47:af:c6:30:62:26:63:
54:eb:f1:a7:ed:02:ec:11:8e:54:c9:50:e3:04:e9:87:8d:71:
64:11:56:ce:cc:ca:b2:ae:a3:9b:71:63:8e:76:f9:e2:7d:be:
49:16:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:16 2025 by rpki-client