Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/7730dffa-e2e8-3d31-add3-0269cd4e8a26.roa
File: 7730dffa-e2e8-3d31-add3-0269cd4e8a26.roa (raw, json)
Hash identifier: y7LiBiVSrLo78Jp+zdPGFQv+r6CrKUQ0fJuD6Sdjnps=
Subject key identifier: EC:2D:81:81:E4:F7:11:61:14:04:BA:69:50:A5:80:CC:67:77:F4:24
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F432858480730FEDF4673F3A10EE57380
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/7730dffa-e2e8-3d31-add3-0269cd4e8a26.roa
Signing time: Thu 28 Nov 2024 09:56:16 +0000
ROA not before: Thu 28 Nov 2024 09:56:16 +0000
ROA not after: Wed 26 Feb 2025 09:56:16 +0000
asID: 43260
IP address blocks: 199.96.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:30:fe:df:46:73:f3:a1:0e:e5:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Nov 28 09:56:16 2024 GMT
Not After : Feb 26 09:56:16 2025 GMT
Subject: CN=15a84bc8-b762-4ece-991a-3cad9c2c7e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:2d:dc:c2:0f:a9:6a:cc:c2:25:a6:67:4c:
be:17:ff:b4:a6:8b:4f:2f:35:5f:e6:70:1e:42:81:
65:14:e6:51:22:93:20:9b:0f:0d:49:c0:6a:bb:c4:
f8:eb:27:2c:c4:ab:cf:3b:3f:09:c5:15:4e:fa:a4:
e5:7a:6f:1d:6e:a9:c7:4b:e4:c4:3e:7d:43:f4:eb:
3b:a1:72:05:f4:f5:6a:79:66:57:92:ca:63:ad:50:
a6:bd:ea:8a:0f:56:52:d2:0a:01:d2:74:d8:ab:d1:
20:43:b2:a7:ae:51:11:15:57:81:d7:43:75:96:66:
a9:10:ce:5a:ba:18:dc:aa:b8:f9:9e:a4:90:e6:17:
bb:4b:77:7b:30:d6:1f:a2:a4:23:fa:1d:da:14:1a:
b5:05:c9:a2:82:1f:e0:3b:9e:3d:f2:c2:14:bc:cc:
db:a7:0a:1a:02:50:f2:92:af:bd:89:97:f0:1c:39:
dd:b1:38:b0:40:34:54:9e:72:3c:7e:b3:7e:d8:a1:
f0:f4:7d:3f:31:b7:88:1c:0d:fb:9a:5d:6e:c5:42:
92:b4:e1:3b:c1:1e:44:a8:43:51:b9:ed:93:7f:a8:
e0:5f:ed:7f:26:91:5e:a4:e3:ae:d2:94:33:9f:e0:
e3:df:4c:a2:5c:ac:ae:48:2a:7b:10:21:5c:21:db:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2D:81:81:E4:F7:11:61:14:04:BA:69:50:A5:80:CC:67:77:F4:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/7730dffa-e2e8-3d31-add3-0269cd4e8a26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:50:9e:6e:19:33:34:c8:3e:91:3d:55:4a:be:05:38:09:6b:
37:8b:6f:86:59:05:16:1c:b1:bf:40:6a:d3:cc:2f:f3:74:26:
d9:91:42:3a:10:56:8c:91:be:aa:91:ae:a8:6e:6c:21:d3:f0:
d7:fe:0d:cb:d2:97:94:3b:86:67:e4:77:af:fc:87:68:bc:d5:
01:90:01:0d:9d:1f:4a:a4:70:8b:5a:f4:e5:35:9b:80:6a:9d:
1c:94:2f:e8:34:d9:24:61:ec:74:b5:1c:67:73:7b:1c:5a:dd:
2a:13:45:5d:f5:4b:73:df:23:10:34:d7:d5:ba:26:2a:02:5b:
0d:3e:56:c0:41:e2:f1:74:3e:22:d8:08:9f:eb:86:16:4f:98:
d9:54:95:76:c9:98:7e:a3:6e:15:3f:6e:7b:9b:33:19:11:2a:
21:ad:6c:43:85:33:16:d2:f3:e8:46:b2:dd:99:6c:30:3c:2f:
d8:21:c2:f5:00:b3:d4:59:19:e4:cf:2d:cf:ac:12:00:f7:58:
f7:5f:ea:6d:33:fe:7b:af:bd:91:94:ac:85:e2:26:a8:fd:2d:
ce:e8:7e:a3:df:b8:c6:96:e3:80:2f:c3:06:f3:dc:a4:27:4c:
37:a6:ba:68:82:31:36:46:75:44:15:19:bb:fb:e1:4c:23:ff:
07:46:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:56:32 2025 by rpki-client