Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/84211d80-1efc-3ce4-9b10-5766d5988314.roa
File: 84211d80-1efc-3ce4-9b10-5766d5988314.roa (raw, json)
Hash identifier: CDlkIp7Amzt7nfncws7X3ys7iwKfUlxM7J0QwdqyfTg=
Subject key identifier: 9D:DE:6E:C3:F5:CD:D2:C7:C1:56:10:29:AE:C7:D7:ED:22:07:E6:F5
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F43285846F60C8BDB186F261A42F7DAC0
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/84211d80-1efc-3ce4-9b10-5766d5988314.roa
Signing time: Thu 22 Aug 2024 13:47:09 +0000
ROA not before: Thu 22 Aug 2024 13:47:09 +0000
ROA not after: Wed 20 Nov 2024 14:47:09 +0000
asID: 212238
IP address blocks: 65.87.14.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f6:0c:8b:db:18:6f:26:1a:42:f7:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Aug 22 13:47:09 2024 GMT
Not After : Nov 20 14:47:09 2024 GMT
Subject: CN=7f9a6f59-d37b-41b8-abd9-00a56941f9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:e0:b2:f3:be:5f:de:29:be:77:56:cd:0a:
03:95:65:aa:74:81:a4:1e:a4:dc:34:a1:81:9a:61:
ea:17:b5:3b:f2:f2:7a:59:b3:94:1d:ee:d7:fa:09:
9c:92:fb:7c:45:ba:23:05:17:9d:90:41:18:15:27:
ed:e7:78:93:7c:19:09:d4:07:04:cb:7f:84:e4:9b:
6e:0b:84:67:a4:56:20:8f:40:a1:9c:96:6c:32:54:
58:3f:42:55:12:9c:6d:2e:fa:f5:7d:65:54:12:d6:
91:ec:00:bd:45:db:dc:be:d5:40:64:b0:d2:89:07:
44:33:17:aa:34:f2:d5:db:e0:ca:be:c8:db:d2:cc:
cd:b3:57:c0:8d:11:96:4d:fb:8c:20:5b:c3:31:f5:
94:7d:28:94:26:ec:88:d5:e4:1b:d6:78:37:0c:26:
d9:fd:56:ac:77:68:ca:ce:ae:b4:28:d3:14:c1:6a:
53:ca:80:8b:d4:46:b3:98:b3:8d:9d:2e:21:2a:d0:
cb:2d:0e:3b:41:e7:2c:a4:36:aa:fa:4a:15:28:92:
12:3f:11:10:66:33:81:74:00:59:0b:6e:b1:32:7f:
53:7f:bd:b1:1a:e7:a1:18:cc:6f:d3:fd:2a:24:d8:
a9:0f:7d:0e:ce:bf:e1:af:0d:53:25:86:4a:e4:0e:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DE:6E:C3:F5:CD:D2:C7:C1:56:10:29:AE:C7:D7:ED:22:07:E6:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/84211d80-1efc-3ce4-9b10-5766d5988314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:d1:43:e3:5a:08:5e:da:38:ef:ca:e1:c2:c6:d9:ca:ff:62:
cf:4e:8a:5f:2c:40:6c:ae:cd:b1:48:31:5a:27:3b:cc:c6:5b:
60:58:26:a0:56:e8:b7:ce:0d:ac:79:a2:e0:01:00:6c:35:b8:
89:19:97:5f:e2:72:99:88:b9:6f:3e:e3:55:55:89:07:c9:72:
9d:86:bf:9d:0b:fe:cb:2d:62:fc:df:49:eb:85:97:ab:4b:be:
85:11:55:8f:fd:c0:e2:a4:eb:65:64:fe:1c:88:0d:6f:51:92:
27:7c:f5:fd:17:b7:d6:3e:8f:6a:5c:39:53:0d:64:b4:68:dd:
a4:a7:69:6f:d1:38:ab:f2:77:74:51:72:42:a3:b0:46:4e:7d:
49:96:89:d8:09:61:9b:25:7c:ca:b3:ce:58:f1:fe:46:d8:ae:
81:00:52:e2:fc:3a:6e:8f:b3:78:4a:b3:c0:a4:85:7e:d3:c5:
75:1b:b3:3f:48:e1:41:2d:3e:32:84:f7:0d:b4:fd:25:d4:f6:
a5:86:30:0d:1b:95:3d:5d:61:d6:df:94:ce:47:40:ed:84:85:
88:66:c9:c9:ba:b4:71:f8:be:74:88:db:08:96:4a:f5:14:46:
fe:07:e1:ba:48:1a:ec:7b:e5:ff:b6:8a:5e:ae:57:60:a4:44:
4d:75:84:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:41 2025 by rpki-client