Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/baa9a522-ca80-3aaf-b1cc-71248470ed3f.roa
File: baa9a522-ca80-3aaf-b1cc-71248470ed3f.roa (raw, json)
Hash identifier: SCYyUmdb9Vs7MXuLxsPDV1gwzTI9E0vxoIWUNnQzZO8=
Subject key identifier: F4:85:DC:80:53:91:D5:FB:34:6C:96:9F:0E:57:E6:EF:9D:9B:54:1C
Certificate issuer: /CN=53c2cca8-3817-42e5-a92f-da9eff96d7a7
Certificate serial: 010D0C9F43285848547039C2F829AEAF903DCE80
Authority key identifier: 77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/baa9a522-ca80-3aaf-b1cc-71248470ed3f.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 398876
IP address blocks: 195.85.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:39:c2:f8:29:ae:af:90:3d:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c2cca8-3817-42e5-a92f-da9eff96d7a7
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=f05898ac-9bc7-409b-955d-00e6cbe9d7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:77:ce:cc:99:de:94:8e:2a:82:30:fc:c6:
41:44:37:54:9b:0e:ac:79:50:e5:06:18:2d:c7:b4:
1e:bd:56:6a:40:9e:17:23:d7:1d:6b:bc:38:8e:d7:
f7:03:ae:c9:8d:44:d4:5a:2d:27:ad:52:f1:19:d6:
8f:02:6f:26:72:1a:ba:d2:a7:b7:06:4e:8f:73:3b:
a1:e6:6b:6f:62:20:39:48:38:af:93:67:6b:0e:50:
51:98:7d:8b:6e:cf:86:fa:a1:4c:29:4b:3c:e6:5f:
9a:37:27:51:61:e2:35:f7:2f:3b:a4:49:83:76:92:
25:ea:f1:fb:4e:2f:d0:c9:be:b3:a3:c2:d8:82:e0:
86:bd:f0:8c:2e:4e:62:08:36:86:83:60:9f:6b:52:
0b:ac:bf:e4:c8:71:93:25:81:95:b0:23:72:79:fc:
76:de:b4:b4:6a:4c:fb:15:86:6b:3c:33:b1:11:12:
94:88:25:b0:2b:df:57:1e:4f:1a:1f:2a:e2:50:ea:
52:18:8b:f3:1b:a5:19:4d:21:63:d3:9c:d8:84:4d:
49:88:b4:90:d1:b0:2f:f9:7e:7e:1f:a8:f4:91:35:
f3:fa:7d:aa:0c:a1:57:61:a4:9d:6b:b6:b3:96:66:
19:2b:62:36:4a:f6:6e:bb:52:b0:06:95:4e:9d:26:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:85:DC:80:53:91:D5:FB:34:6C:96:9F:0E:57:E6:EF:9D:9B:54:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/baa9a522-ca80-3aaf-b1cc-71248470ed3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/53c2cca8-3817-42e5-a92f-da9eff96d7a7.crl
X509v3 Authority Key Identifier:
keyid:77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer
sbgp-ipAddrBlock: critical
IPv4:
195.85.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:f8:59:f5:21:35:27:45:c4:17:28:19:30:41:18:fb:4e:3e:
01:a4:09:cc:b5:65:a7:d0:7e:81:62:1b:1a:94:30:44:b4:d1:
13:57:21:00:c1:a4:cb:78:b1:a4:88:09:ae:50:98:c3:9c:8c:
65:7a:cc:b1:3e:c9:be:90:a8:a5:83:12:fa:8a:b2:52:1c:92:
bc:5a:1f:cf:79:46:b3:54:ad:5f:74:ad:14:69:51:dd:8b:5b:
05:b0:72:a2:9c:7f:9a:74:a8:cc:59:de:17:3c:b9:2d:84:ed:
a6:c4:9d:6b:9e:00:69:87:d4:50:8e:22:92:5a:19:da:dc:50:
e0:a7:ac:68:76:2e:b9:d7:c2:50:af:44:7b:65:7a:a7:08:df:
e1:19:c4:e3:4b:cc:3f:7f:46:98:19:67:62:b3:23:bd:bc:b2:
a7:3f:53:7e:f2:c1:47:f1:5a:11:b4:45:82:44:af:03:4c:1d:
38:d5:7d:df:bc:a3:55:40:b3:6e:74:79:b2:fe:96:01:7d:d6:
a8:48:d0:56:aa:fb:d0:5b:e5:ac:c9:db:b8:6d:e0:bf:9e:ab:
0a:68:09:fb:8a:18:27:61:a5:62:1e:31:20:a1:4c:ad:72:bf:
bc:fb:b3:69:25:1a:ef:05:23:dc:3e:76:7f:a1:fb:18:50:e4:
69:17:66:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:39 2025 by rpki-client