Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ad42eed-3bd5-32a9-bd6d-fb35c7192314.roa
File: 6ad42eed-3bd5-32a9-bd6d-fb35c7192314.roa (raw, json)
Hash identifier: hCw6I1ikZLU9kFc4Pns75Z0E/tBsA4dibEjYuMWqlIs=
Subject key identifier: 6C:56:D8:4A:03:2C:61:46:56:1D:31:4D:01:96:30:97:31:CF:00:24
Certificate issuer: /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial: 010D0C9F432858457DCAAA6F65965769F8864DD0
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ad42eed-3bd5-32a9-bd6d-fb35c7192314.roa
Signing time: Tue 09 Apr 2024 19:10:28 +0000
ROA not before: Tue 09 Apr 2024 19:10:28 +0000
ROA not after: Mon 08 Jul 2024 19:10:28 +0000
asID: 25914
IP address blocks: 65.49.152.0/21 maxlen: 21
108.160.80.0/20 maxlen: 20
108.160.84.0/22 maxlen: 22
132.147.240.0/20 maxlen: 20
184.94.176.0/20 maxlen: 20
2607:2900::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:7d:ca:aa:6f:65:96:57:69:f8:86:4d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
Validity
Not Before: Apr 9 19:10:28 2024 GMT
Not After : Jul 8 19:10:28 2024 GMT
Subject: CN=124dfa47-1ec2-4e36-a9db-1e95455b3e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:e9:a1:f4:15:46:3a:8e:64:a8:ca:77:a2:
ee:b2:1d:58:03:83:d7:8e:a2:e4:d1:4e:42:d8:18:
a1:46:9d:89:96:57:00:7c:71:bb:5a:f7:9d:fb:58:
b2:6e:4f:f6:a9:1b:f2:c3:bd:b2:4f:58:cb:98:59:
f7:06:a2:af:d6:9e:62:c4:c4:c4:be:97:f4:ea:90:
95:0e:d6:6c:59:0a:6c:26:77:18:0b:e7:96:cd:83:
c3:c2:7d:bf:3d:84:34:47:74:24:0b:84:88:3c:e2:
97:67:2b:3c:03:09:07:b6:f6:5f:68:3e:81:ed:02:
84:c3:96:72:64:f4:8e:55:19:1c:3e:33:99:cc:24:
df:cc:64:ab:f1:bb:9f:01:d1:ad:75:ab:14:16:d6:
89:c2:68:49:a4:7d:5c:73:94:fa:16:5b:5c:77:60:
c9:dc:0e:e6:55:49:fe:54:af:1d:6d:1e:65:15:77:
89:99:d4:37:a5:ad:36:52:e9:19:1d:f9:09:ec:dd:
a4:f5:62:f2:b7:d6:28:bc:4b:48:78:d1:00:42:b8:
37:ae:46:ac:95:e2:d4:e2:c0:dd:ca:57:c1:b6:90:
ca:a9:8e:07:0b:37:4b:94:5c:ac:8c:4d:ad:1b:a3:
c8:fa:bf:7b:32:8d:dc:8e:53:dc:9a:3f:9e:0d:7f:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:D8:4A:03:2C:61:46:56:1D:31:4D:01:96:30:97:31:CF:00:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ad42eed-3bd5-32a9-bd6d-fb35c7192314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
X509v3 Authority Key Identifier:
keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.152.0/21
108.160.80.0/20
132.147.240.0/20
184.94.176.0/20
IPv6:
2607:2900::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:18:70:02:15:f7:f0:60:8d:37:a5:44:d2:3a:41:6e:dc:51:
e5:08:0d:b2:32:03:4e:ae:b6:0e:70:fe:61:63:e3:34:77:c9:
b6:9d:6e:88:77:3a:e5:ca:77:0b:24:37:1c:7c:c5:a8:28:d4:
fb:a2:6d:e9:76:59:4a:e5:94:7d:4b:fe:0d:aa:08:11:ee:bc:
a1:45:ca:52:a0:60:23:5b:ff:a0:f3:58:2c:f3:24:5e:43:e7:
0b:a6:e0:31:6b:99:e9:2e:a8:e3:e1:59:86:7c:3e:05:1d:62:
51:72:d8:5c:5e:8b:63:61:73:fe:aa:50:86:aa:0f:50:d3:96:
f7:c1:d4:bc:44:4d:08:d2:01:70:a9:ff:2c:70:8f:86:a6:5a:
29:e2:2b:d4:b3:03:49:ab:8f:e8:9e:e7:13:aa:22:82:78:ba:
8c:ba:50:da:cd:24:f9:fc:06:f1:3a:cc:3d:0c:a4:75:67:ff:
fb:46:e0:84:7f:87:69:c9:45:ad:4c:04:94:63:3b:7e:9f:00:
3c:93:18:79:84:5f:1f:2e:9d:77:c6:2b:be:d0:95:22:c6:4b:
43:de:86:e1:ef:1e:7e:24:a0:9e:bc:8f:54:75:c6:84:f8:b3:
c3:b4:88:7a:66:10:ce:fa:d1:a6:bc:60:1d:a4:e3:e6:03:fe:
42:43:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:57 2025 by rpki-client