Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a4a24c7b-9288-3506-83a1-ae086b4edf1c.roa
File: a4a24c7b-9288-3506-83a1-ae086b4edf1c.roa (raw, json)
Hash identifier: OBZls2zb5+aCg+pFcQZqDeCowNf+JTkHs5qUR7kcaPA=
Subject key identifier: 22:B2:5B:32:08:69:9E:46:BD:A9:3B:AB:03:29:0A:A2:BA:96:FA:C3
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F432858477717DBFB0C90C771DEEB8C90
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a4a24c7b-9288-3506-83a1-ae086b4edf1c.roa
Signing time: Mon 07 Oct 2024 19:09:13 +0000
ROA not before: Mon 07 Oct 2024 19:09:13 +0000
ROA not after: Sun 05 Jan 2025 20:09:13 +0000
asID: 11798
IP address blocks: 136.0.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:77:17:db:fb:0c:90:c7:71:de:eb:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Oct 7 19:09:13 2024 GMT
Not After : Jan 5 20:09:13 2025 GMT
Subject: CN=c7e08549-78a5-4a79-91a7-cfbe1b840440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:5e:3e:ea:96:75:43:ce:09:22:3f:1a:32:
18:cb:01:e5:ba:ed:9e:b3:2b:53:78:40:55:2b:38:
30:25:0d:a0:e8:36:35:3e:5b:76:be:26:08:f6:d0:
91:4c:71:65:59:a5:ff:b4:af:8d:48:37:69:ad:17:
dd:8f:47:1e:aa:9a:1d:3b:89:c3:38:aa:50:13:87:
07:e4:2d:2b:c9:c8:5e:38:3a:a3:23:39:ec:0a:34:
4d:d6:08:02:f6:8e:a6:50:1c:24:d3:d4:c2:7c:5a:
a4:f3:9b:0a:5b:f1:ee:15:d8:dd:fd:2b:90:c0:82:
af:39:a7:39:fc:d9:6d:01:11:13:c3:7c:05:8f:8a:
f4:da:c1:5d:bf:7f:c0:68:7e:c7:87:45:7b:d3:45:
56:d8:41:ea:6f:b0:71:f8:7a:e8:37:44:6d:0c:4f:
48:2b:4a:2e:ea:4e:66:ac:60:64:30:17:0b:a8:9b:
01:0e:8e:08:d4:73:a1:96:39:4a:20:c9:95:29:e1:
cb:4c:95:5a:f5:82:5c:82:7d:87:20:b6:8a:1e:1b:
49:63:8d:11:ff:2c:15:ca:53:ff:f5:d2:b9:3d:dd:
c8:19:a0:84:85:c5:2e:d2:5b:73:41:41:c2:14:68:
62:03:a1:07:92:dc:85:56:fb:e7:72:d1:69:69:06:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B2:5B:32:08:69:9E:46:BD:A9:3B:AB:03:29:0A:A2:BA:96:FA:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a4a24c7b-9288-3506-83a1-ae086b4edf1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:54:61:21:8a:01:41:93:e7:a3:cd:ce:bf:b1:d8:3e:8c:f1:
25:4f:b4:be:3e:5d:ca:0e:a7:33:be:e5:e7:0a:f2:d2:1e:53:
00:98:7a:3d:41:15:88:17:9d:da:f3:ac:d9:62:ee:d1:02:c9:
a3:89:b3:ab:38:9a:02:b3:3b:ed:05:ff:17:e3:0c:47:93:10:
b0:f6:74:08:a6:f5:41:97:2d:13:04:8e:91:c2:94:a6:38:57:
c9:d5:0e:cd:d3:bb:89:e8:c4:d3:e6:76:99:76:54:9d:f5:52:
e6:b9:43:82:1a:e8:ac:58:76:74:7d:c8:dc:03:c1:5e:77:8d:
b1:b0:6c:93:fe:99:fd:ec:ae:97:69:09:d0:d8:e3:ca:93:43:
cc:f2:9d:d8:44:7a:c5:c8:08:d4:58:3f:16:f3:20:2a:18:a1:
b2:c6:ac:62:8b:e6:05:54:b1:6d:c6:69:88:ee:92:31:02:85:
2c:10:94:87:52:cc:8c:d5:95:78:6f:e0:7b:1f:aa:3b:60:55:
e1:bf:d2:e1:b5:e8:6a:8a:13:9c:ed:0a:af:ab:da:e2:c2:7a:
e4:45:42:57:33:e7:ab:12:8b:65:c3:45:38:fd:e9:9b:21:ab:
c2:04:b6:ca:99:51:ad:95:f1:07:3b:e6:fb:55:1f:30:e1:3a:
9f:ef:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:41 2025 by rpki-client