Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/0f63f34f-1d20-3435-88ee-6a455d214407.roa
File: 0f63f34f-1d20-3435-88ee-6a455d214407.roa (raw, json)
Hash identifier: Qrx5kC9CYhuH4EzS/A/eN8nInBMAR+cQ/wMRUqt7q3s=
Subject key identifier: 51:D8:FB:57:CC:6B:D8:FC:B5:A3:38:2C:70:58:41:B6:82:55:78:9B
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F432858471D6353E9E7779F7F10778B00
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/0f63f34f-1d20-3435-88ee-6a455d214407.roa
Signing time: Thu 05 Sep 2024 15:58:31 +0000
ROA not before: Thu 05 Sep 2024 15:58:31 +0000
ROA not after: Wed 04 Dec 2024 16:58:31 +0000
asID: 834
IP address blocks: 65.87.4.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1d:63:53:e9:e7:77:9f:7f:10:77:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Sep 5 15:58:31 2024 GMT
Not After : Dec 4 16:58:31 2024 GMT
Subject: CN=3819ad75-5f81-4635-b87f-53d9363ad2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:e8:f1:3c:09:0e:b8:93:dd:f6:30:ca:a7:
4c:f5:d8:ba:05:be:df:1b:8d:80:bc:e8:ab:73:7a:
4c:cc:71:78:a2:4e:1d:5d:98:79:e8:76:ea:46:7c:
f0:c4:be:1d:cd:29:d5:96:f5:a4:13:1c:bc:78:19:
c5:94:8a:ba:33:69:5d:50:eb:8e:06:b6:71:1a:fe:
5d:31:6f:ad:a9:53:89:aa:06:e4:41:74:c5:28:db:
47:19:34:3e:b0:d8:e2:ff:64:e9:03:a6:cc:b2:bc:
e2:e7:fe:06:af:47:23:5f:db:b9:5e:ce:af:be:d6:
4b:33:d0:7e:b4:e4:45:a5:27:cd:72:9b:72:d8:98:
b6:61:3e:d7:15:51:66:1b:6f:27:7e:11:53:e2:eb:
49:7b:92:e2:0b:63:1f:bc:5c:6b:a8:19:a5:82:a5:
9c:1f:51:0e:48:fa:e1:f7:2b:a2:b1:a7:60:69:8b:
50:c8:46:29:8e:05:d1:88:75:40:7e:44:bf:9f:80:
e5:96:09:d1:ab:35:58:a7:44:43:e6:08:85:d6:bb:
86:e3:16:70:5f:c8:b1:df:00:2d:70:ab:58:16:a6:
b9:ee:84:1d:78:5e:4b:64:7d:34:34:51:94:ff:fd:
f8:e2:0a:73:8f:5a:52:77:8c:32:01:12:f8:fa:fc:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D8:FB:57:CC:6B:D8:FC:B5:A3:38:2C:70:58:41:B6:82:55:78:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/0f63f34f-1d20-3435-88ee-6a455d214407.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:74:15:83:66:cc:8b:65:8b:ef:9e:3a:f7:a4:d6:2a:76:57:
63:f0:af:50:53:70:78:a5:78:00:d3:4b:11:2f:1b:84:23:69:
ea:81:a4:fb:97:08:a2:9b:62:91:08:f1:34:03:d0:a6:29:b9:
47:02:0d:b2:85:38:ea:4d:71:58:25:35:c3:8a:60:d3:19:5b:
64:ae:58:f2:85:42:47:0a:51:45:9f:a7:bc:c6:a9:f6:86:95:
2c:e0:6f:a8:ac:3d:f9:c3:7a:c8:c5:d2:29:5c:12:a1:77:3a:
8b:ae:ae:b4:28:c4:e5:47:dd:5c:7f:be:10:d1:2c:bc:e9:3f:
a1:c2:6f:b1:ba:08:b1:38:d9:7c:d4:eb:5a:4f:ca:57:61:e9:
99:5a:e4:00:7c:c6:aa:4c:2a:a2:3f:8b:61:ff:3f:04:48:a7:
f6:8f:2f:7a:2b:75:76:c1:72:9b:9d:cd:e0:48:d8:d1:2a:c1:
e4:47:60:06:54:c8:dc:64:6e:4d:e6:68:69:af:e7:be:d2:2a:
24:e6:92:50:f2:cc:52:6d:f8:49:e6:75:88:af:00:ff:83:97:
4a:8e:ef:01:da:a5:08:da:27:3a:15:ed:52:3d:17:4f:77:dc:
4f:9c:57:26:10:ba:e3:e8:9c:d8:60:3a:57:87:ed:d2:00:b1:
16:a3:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:21 2025 by rpki-client