Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/05d0709d-1e91-37c6-96c6-c2695900ecb0.roa
File: 05d0709d-1e91-37c6-96c6-c2695900ecb0.roa (raw, json)
Hash identifier: YYEoepVgYAsxLg3ydVaINovLLvhXSKwneKSsxyWIBcc=
Subject key identifier: 7D:EE:23:D2:98:EB:75:85:F1:C7:88:29:07:B6:7C:5F:AF:DE:BB:9C
Certificate issuer: /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial: 010D0C9F43285848372016A897A948366B866E80
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/05d0709d-1e91-37c6-96c6-c2695900ecb0.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 996
IP address blocks: 204.235.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:16:a8:97:a9:48:36:6b:86:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=dd3c92ff-926d-4034-92f6-6d5ec500bb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:44:4f:b6:aa:be:b4:3f:12:ad:6b:73:34:
50:6a:78:cd:fc:d1:52:28:fa:a8:32:70:93:d3:ee:
0f:86:0a:f6:38:46:09:e0:b3:a3:b5:62:cf:40:38:
a9:bb:57:13:5d:d8:9f:a2:dc:c4:7e:4c:04:51:16:
61:56:94:37:79:0c:7f:b2:d0:03:30:69:a1:23:4a:
53:c5:68:8f:ea:52:9c:40:07:bc:6e:ec:cc:79:e0:
ff:4c:c8:1a:ce:85:24:69:c8:37:78:a6:6f:97:da:
d8:47:63:46:ca:a9:2a:37:88:fe:52:9e:3c:0d:65:
64:c2:47:b0:ce:57:0a:08:14:d3:7f:f8:4b:00:55:
57:be:40:4a:81:fa:34:f9:71:21:9e:5f:a0:ab:ea:
e7:0d:f6:7b:aa:5b:61:56:40:b4:1c:b4:e1:08:ce:
99:75:d5:b9:97:e4:25:d8:7c:f5:3c:6a:bc:48:ae:
50:9a:30:df:9f:18:b2:01:7c:65:c7:6f:f2:15:42:
c4:92:a0:a9:b6:31:7e:55:08:e7:ce:f3:a1:d9:60:
e7:9d:70:6d:d4:2c:98:27:70:dd:83:29:65:55:9b:
d1:5e:b4:75:d9:b0:90:2b:93:f7:1d:44:93:73:c3:
44:7c:e0:62:a4:f8:6d:bc:b3:a1:d5:19:57:7b:8c:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:23:D2:98:EB:75:85:F1:C7:88:29:07:B6:7C:5F:AF:DE:BB:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/05d0709d-1e91-37c6-96c6-c2695900ecb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
X509v3 Authority Key Identifier:
keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:cc:f1:bc:5b:41:d1:5a:c2:c4:53:b8:b8:d1:ab:00:8f:84:
cf:e2:ae:e2:c4:8f:32:9b:33:13:55:c3:82:3c:d6:92:0c:bf:
c6:67:ac:ae:94:bc:06:cf:54:26:86:5d:35:e8:30:0c:db:ff:
fb:81:d2:19:36:0a:09:59:3d:c5:9d:88:17:45:49:3b:c5:0f:
08:11:b9:30:76:9f:95:9f:00:bb:c6:36:06:6b:3d:69:c6:ba:
80:82:5b:4b:36:1c:27:0a:34:35:23:cf:71:e8:35:89:16:b8:
ca:8a:53:d0:e2:fb:f0:94:2b:74:9f:09:7e:8a:5d:e9:29:e0:
bd:70:69:b5:35:1e:a0:9b:3c:d4:a7:56:40:85:91:e9:9c:37:
10:11:9e:e4:99:d9:d2:23:5e:56:9b:f3:1a:26:c4:87:66:71:
12:9c:1e:9a:6b:0f:4e:a5:c9:51:fe:c0:10:65:d9:22:3c:99:
84:7d:9f:c5:9f:7a:9f:71:21:54:fe:59:39:49:d5:ee:3b:d0:
fe:a3:db:87:93:5d:d7:35:ca:38:22:78:09:a8:cc:dc:c5:3d:
c2:92:91:b7:6c:3d:14:51:cf:2c:c4:6e:af:04:52:19:c6:67:
f1:6e:4a:e2:5e:25:b2:ae:6e:76:ef:19:ae:a0:31:f9:f7:cc:
ec:6c:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:42:23 2025 by rpki-client