Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cfb6c931-9a00-3c9a-8e32-0e18dcab7aaa.roa
File: cfb6c931-9a00-3c9a-8e32-0e18dcab7aaa.roa (raw, json)
Hash identifier: hvUnpds0hJ6V6zNimvQGw0W/OsAR4K+m+n8v+BLv7hA=
Subject key identifier: F0:65:BD:B0:D0:5F:19:47:83:50:9F:BD:59:FA:60:0B:96:C8:36:B4
Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial: 010D0C9F43285844883FF8B33621F7EEC7E5A100
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cfb6c931-9a00-3c9a-8e32-0e18dcab7aaa.roa
Signing time: Fri 12 Jan 2024 20:17:58 +0000
ROA not before: Fri 12 Jan 2024 20:17:58 +0000
ROA not after: Thu 11 Apr 2024 19:17:58 +0000
asID: 14681
IP address blocks: 144.81.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:88:3f:f8:b3:36:21:f7:ee:c7:e5:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Validity
Not Before: Jan 12 20:17:58 2024 GMT
Not After : Apr 11 19:17:58 2024 GMT
Subject: CN=e61025dc-fcd6-4fbd-b6ab-c64af4dbf17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:36:41:1d:7b:55:05:64:13:a1:b2:12:c6:
37:4d:b1:51:49:99:e9:bc:88:cc:cf:e7:bf:95:3b:
a6:90:2f:10:29:57:1d:7b:41:53:bd:fd:ef:b8:e3:
35:ad:e4:ad:fd:e7:f8:14:e9:1f:b3:9d:cc:da:35:
38:86:ad:43:5f:72:17:01:6e:db:0a:49:04:ae:c1:
c5:7e:29:10:89:1e:6e:21:90:9e:b2:d2:8f:61:a7:
61:00:4e:26:76:73:b6:04:d7:af:2a:d8:b9:7c:89:
bc:71:e4:4c:8c:94:f0:13:27:4c:75:d5:de:c3:89:
ae:ee:9e:9a:55:90:ce:dd:82:26:2a:c3:47:74:f0:
94:fb:42:41:e8:f9:a1:1e:01:b9:bc:4e:0a:35:17:
9f:38:0e:00:64:3c:48:59:44:63:00:cf:6c:7a:3f:
95:07:75:5b:0f:c7:b7:37:05:54:15:72:3e:c3:b4:
16:00:2e:dc:d6:88:9d:d9:12:c8:27:43:e2:9f:2e:
01:98:a2:4e:d5:36:31:30:7b:4e:37:c5:06:c2:24:
7b:7b:6e:30:ab:0d:61:f0:2c:65:06:c3:61:9c:7e:
0a:5f:84:5d:7a:1b:f7:3c:ad:f9:b5:dc:83:a5:44:
dc:9e:bc:87:67:7c:70:3e:cb:25:57:d4:88:8d:85:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:65:BD:B0:D0:5F:19:47:83:50:9F:BD:59:FA:60:0B:96:C8:36:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cfb6c931-9a00-3c9a-8e32-0e18dcab7aaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
X509v3 Authority Key Identifier:
keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
sbgp-ipAddrBlock: critical
IPv4:
144.81.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:92:7f:df:3d:de:d6:d1:b3:ae:3c:81:d7:4f:f8:e6:27:2d:
50:4c:70:ca:86:3c:25:a1:33:39:81:c9:6a:14:c4:20:f6:54:
fd:fd:61:50:57:2f:e4:01:05:2e:04:37:d9:2c:ac:fa:48:17:
78:cc:15:6f:ae:fb:c9:ad:c0:cc:3b:fe:0c:df:53:84:cc:48:
a6:f6:a1:b2:33:89:fe:28:2b:e4:34:1e:35:5b:dd:8f:3d:7e:
15:f7:bb:15:75:de:f3:a9:3b:93:a4:1b:15:b5:10:ee:11:aa:
ee:37:07:f3:18:d5:f1:0e:36:37:14:ac:f0:3e:a2:1e:67:e7:
ba:4c:60:67:50:03:dc:91:76:f3:2f:24:8e:60:15:34:c1:3b:
9f:48:85:f8:ca:80:9d:0b:c0:30:fa:09:ad:b3:fc:11:42:ec:
bd:3e:98:d9:0b:b1:9b:9c:b0:7a:95:b0:08:09:98:e8:17:dd:
60:e1:32:71:84:e4:7e:4b:1a:0c:5b:d5:8c:5e:fa:4a:e3:1f:
e2:41:53:f4:15:26:a5:8a:20:c4:7c:3f:d3:55:94:bd:89:ca:
c8:bb:e5:42:bf:58:68:be:84:30:c9:05:1c:33:d2:59:06:90:
ef:ed:1a:68:70:a7:9f:51:71:e3:70:ee:a8:66:df:e2:51:58:
d3:b5:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:42 2025 by rpki-client