Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/5032ef46-05f0-3804-929a-3f58345e8b6e.roa
File: 5032ef46-05f0-3804-929a-3f58345e8b6e.roa (raw, json)
Hash identifier: HtTd2bSgsihLJFDgFPq7b1/S/4ZGZAmGjD9M40SsBh0=
Subject key identifier: F9:CE:35:9E:59:56:4F:F6:52:57:46:7E:1C:EC:61:42:A0:32:55:8B
Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial: 010D0C9F43285844BCEAD5683C0FC895EEFD6F80
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/5032ef46-05f0-3804-929a-3f58345e8b6e.roa
Signing time: Wed 31 Jan 2024 17:04:16 +0000
ROA not before: Wed 31 Jan 2024 17:04:16 +0000
ROA not after: Tue 30 Apr 2024 16:04:16 +0000
asID: 18981
IP address blocks: 204.154.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:bc:ea:d5:68:3c:0f:c8:95:ee:fd:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Validity
Not Before: Jan 31 17:04:16 2024 GMT
Not After : Apr 30 16:04:16 2024 GMT
Subject: CN=ca438ceb-4031-4d23-9a50-e40f48f1b143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:a7:19:1e:ca:03:bd:f0:34:1e:7c:ca:6a:
dc:dd:a4:5a:b9:25:f5:25:c0:1e:29:51:d9:58:72:
e8:72:f4:8d:4f:68:62:3f:aa:35:81:ad:bb:2b:bf:
af:a9:b5:37:c6:6d:92:56:08:a0:7b:06:d9:bd:6e:
ea:98:11:35:79:6d:1f:e1:7a:0a:54:27:6d:9a:5a:
6e:d3:7d:97:b1:b5:87:9e:ec:3e:88:3e:7d:18:fd:
ba:44:29:f8:8e:eb:79:db:e6:86:dd:91:08:ae:cb:
a3:e2:ff:49:38:6a:d3:28:0e:8f:65:56:f8:b5:07:
7e:cd:d8:44:63:66:6f:0b:6d:cb:8d:67:c6:cf:a2:
be:9f:d0:5c:9f:ad:71:87:b7:a6:81:d1:b2:6e:76:
8e:00:d5:dc:4a:04:0e:44:04:10:90:cc:d6:ef:a4:
bf:45:b6:6a:f8:fa:29:f4:a2:ee:1d:86:c5:4f:30:
97:83:74:91:0a:50:81:25:4e:0b:2a:7e:a1:e1:7c:
7f:23:15:06:77:d5:75:d4:ff:a2:d8:75:e0:02:68:
e5:59:31:2e:5e:ee:bf:a9:ea:3d:86:a8:e7:49:9f:
4d:f9:ed:ef:5b:80:25:26:a6:59:59:46:d8:17:40:
16:4a:43:00:a3:63:75:fa:f1:29:20:22:08:8c:f4:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:35:9E:59:56:4F:F6:52:57:46:7E:1C:EC:61:42:A0:32:55:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/5032ef46-05f0-3804-929a-3f58345e8b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
X509v3 Authority Key Identifier:
keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
sbgp-ipAddrBlock: critical
IPv4:
204.154.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:69:00:36:e5:d3:6b:f6:b8:48:a4:c2:48:f7:1d:5a:b7:f3:
5c:a7:70:b8:70:b7:45:e3:0b:d0:c9:1d:4f:bd:06:06:f1:e9:
63:5c:25:ac:bf:d9:2e:93:bf:ec:2c:cf:85:41:36:6a:48:bc:
9a:fb:31:d7:3f:18:9e:dd:db:36:ae:61:7d:b4:6e:3a:77:d0:
b5:3c:68:ed:dd:5f:24:27:73:f0:15:34:e8:93:b4:6b:aa:7e:
1e:d0:72:e8:1b:4b:58:31:a8:35:95:49:da:a1:23:09:5d:e8:
2a:db:50:40:d0:9c:30:98:c7:e8:84:a7:9d:fe:dc:f8:85:3e:
b0:72:0c:10:fd:3d:be:34:71:08:59:c5:8c:43:64:5d:41:50:
f6:19:f3:74:05:4f:fc:28:fe:e2:4d:07:2e:03:78:9b:32:e7:
95:fd:b7:90:15:a1:bb:6a:e3:d4:de:d2:a2:1b:c9:b0:4c:91:
a4:ec:34:15:af:73:e0:a7:b2:be:5a:04:8b:14:9d:cc:24:75:
bc:d3:ac:04:a6:e6:81:96:ac:1a:72:76:10:3b:e3:94:f3:42:
c8:55:65:34:4a:3d:d0:5c:44:de:07:d4:c0:ac:41:8e:06:bd:
e4:32:45:a6:b9:57:11:41:0c:56:e8:9f:b4:e4:08:86:10:22:
c9:b4:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:44 2025 by rpki-client