Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/657d2dba-bf60-3106-9f26-ebf1ee3f6257.roa
File: 657d2dba-bf60-3106-9f26-ebf1ee3f6257.roa (raw, json)
Hash identifier: /G2lnI9tiSqaJA5sXMzVifLnjQ36B5aPFzli2qiCxLc=
Subject key identifier: BC:BF:77:B0:E3:99:7F:65:DB:92:0F:CC:24:83:86:67:3E:50:14:BC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289AC271597293FD39BDA20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/657d2dba-bf60-3106-9f26-ebf1ee3f6257.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 151.213.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:ac:27:15:97:29:3f:d3:9b:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=800d1529-bec8-49e5-8e2f-95c043bfca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:18:8c:a5:d1:3d:dd:24:64:c3:c0:fa:c3:7a:
c7:1a:a5:f5:a2:bb:9e:1a:8e:3c:66:95:70:a5:df:
89:a4:15:b6:2b:b0:a6:dc:7c:32:ac:18:18:86:78:
85:a8:d2:0c:56:fd:af:f1:f6:13:d5:60:f3:f5:24:
24:8b:3f:21:91:57:fa:1a:b7:bc:d2:e1:57:6d:36:
14:65:18:b2:31:08:3d:77:be:5a:cb:1e:4d:8a:79:
26:db:c7:fd:2b:e1:b3:ae:51:df:5a:d5:3e:cf:cd:
2e:8c:26:05:ad:77:16:56:60:8c:ea:c0:2e:07:bc:
0a:8d:7a:54:89:31:37:3a:9f:3b:48:e5:95:41:b3:
b8:50:0d:d0:99:06:a3:ea:87:c3:c5:bf:c4:36:fe:
a4:ea:1e:c8:b3:c7:a5:7a:dc:11:e1:15:68:b5:26:
ae:e0:81:a9:7c:8d:6d:b4:99:a9:1e:42:20:14:14:
2d:90:1c:6e:74:5a:88:96:1c:37:a6:40:d2:ef:09:
58:01:8d:ea:31:da:e5:a5:a9:e6:72:89:17:48:9c:
a2:7d:a7:21:04:d0:a8:5b:df:a3:f9:e1:f5:0e:ae:
a0:70:3d:22:30:c0:12:f6:f8:80:9b:64:f5:4a:52:
3b:60:18:df:d5:93:5c:13:ee:b2:65:3d:48:51:2e:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BF:77:B0:E3:99:7F:65:DB:92:0F:CC:24:83:86:67:3E:50:14:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/657d2dba-bf60-3106-9f26-ebf1ee3f6257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
151.213.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:d3:76:f6:fa:00:e5:13:89:14:63:19:50:53:31:4f:a9:12:
35:38:50:6d:80:43:87:03:d8:be:36:a5:ee:19:8a:b5:30:6c:
df:0e:75:df:5b:d6:43:42:20:68:5f:d3:dc:75:cd:70:99:af:
cf:ae:6d:be:ed:aa:06:7b:9c:b5:1e:f9:c9:7c:fd:95:52:5b:
57:59:cf:c4:90:ac:4e:45:29:ab:01:ba:b6:a9:2a:6b:f2:73:
e4:ae:71:1b:d8:fa:55:c4:f8:43:44:ba:6e:4b:26:7e:f5:0e:
63:03:31:48:af:42:f8:c3:44:43:dc:b2:f8:c9:28:ab:95:6b:
c3:d2:92:9a:ae:b8:52:4f:e6:89:0b:89:fd:86:1c:13:9a:08:
56:da:ce:76:15:ad:4b:b5:eb:ac:eb:0a:13:6e:df:06:f0:f4:
ae:a1:1a:e6:fe:3b:37:84:4e:da:57:bc:a5:c8:25:c7:1f:73:
df:f6:41:ce:12:71:94:fd:df:ac:d7:bb:21:57:fc:24:4a:8c:
c9:83:1b:19:95:e6:ab:07:0b:be:50:c7:5d:79:89:cb:85:ef:
4b:8d:77:8d:c7:81:2d:ff:5d:49:e8:45:6d:55:fa:07:23:2f:
de:f7:95:3e:49:e1:6c:d6:1b:30:0c:3c:2c:a5:fa:76:b9:9c:
48:09:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:38 2025 by rpki-client