Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4843535-0476-3b6c-8569-2830471f6e89.roa
File: a4843535-0476-3b6c-8569-2830471f6e89.roa (raw, json)
Hash identifier: q3s93cHl7Xt2ow12vwGtHMob/ZmdC6AEJze68E6GTbA=
Subject key identifier: 62:6E:53:71:84:DB:FB:EC:6A:37:CF:60:7F:04:BC:AE:68:43:54:AF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584472CD92357B5B22970A4247B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4843535-0476-3b6c-8569-2830471f6e89.roa
Signing time: Fri 05 Jan 2024 03:55:29 +0000
ROA not before: Fri 05 Jan 2024 03:55:29 +0000
ROA not after: Thu 04 Apr 2024 02:55:29 +0000
asID: 7029
IP address blocks: 71.28.204.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:cd:92:35:7b:5b:22:97:0a:42:47:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 5 03:55:29 2024 GMT
Not After : Apr 4 02:55:29 2024 GMT
Subject: CN=a42448bf-d3b5-4ad4-8f11-8056a5edfc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:45:ef:13:7b:82:1b:82:8f:f7:1c:ac:ad:
d9:7e:e8:06:ba:4e:ba:15:31:1c:50:06:82:a3:78:
54:42:b7:18:31:c0:34:5e:d2:4c:57:3a:11:85:c2:
95:c8:a1:22:90:49:2a:ce:13:b5:57:12:50:19:58:
63:11:df:88:82:fd:b3:22:d2:33:35:10:d1:4f:28:
9d:cb:d8:7b:da:8b:ea:1a:84:9b:c5:7f:d4:ae:aa:
c1:2a:98:1d:61:d0:9f:2c:02:92:8f:be:81:ab:ad:
e7:52:0a:e7:2f:99:b0:40:9d:1c:21:19:d0:ba:de:
27:e4:a2:8a:d9:2d:1b:30:97:4e:f1:04:13:bc:5b:
2b:c3:f7:70:27:df:89:a7:ee:24:92:99:16:97:e2:
ea:29:6e:38:a3:7f:e0:63:3b:f6:e7:c7:7c:2a:1f:
71:5d:4f:e2:14:6c:74:69:e2:fc:a0:c7:2e:35:88:
7f:33:ea:b6:c7:2d:ab:98:2a:81:62:e5:42:70:5f:
a8:b6:b4:2b:fc:14:30:a0:d7:5e:42:75:a3:5b:d7:
17:47:26:be:ed:b9:22:b5:73:34:26:2c:a1:84:7e:
ba:bb:52:64:82:d4:fd:ac:62:a1:b9:6a:a6:1f:84:
03:9e:7c:da:41:c5:c8:82:a9:c2:9c:28:c4:7d:31:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:53:71:84:DB:FB:EC:6A:37:CF:60:7F:04:BC:AE:68:43:54:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4843535-0476-3b6c-8569-2830471f6e89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:d8:06:e6:52:10:8f:79:21:d2:db:89:f1:2f:91:e9:13:49:
23:01:0d:ed:49:82:ba:4b:81:9a:80:ad:c4:92:67:c9:57:d3:
77:9d:61:14:08:b6:6d:b6:20:70:b4:bb:2a:e4:f7:1d:4a:fe:
7b:ef:8e:7d:a7:cb:09:c0:0a:fb:00:6f:12:05:42:04:af:65:
ee:82:14:40:dc:02:4c:75:9b:2b:b5:85:f4:45:d7:53:23:62:
d9:12:fa:55:a0:ab:4b:7c:90:85:47:1e:64:b8:f8:90:66:16:
20:47:bc:b9:af:59:40:74:24:69:83:fa:44:97:fd:fb:fd:88:
95:0b:62:93:d3:f3:e7:b3:6a:be:9c:be:00:b3:cf:e5:e8:a6:
b6:35:cc:05:7d:d1:85:44:e2:07:dd:f1:ed:37:73:96:a9:b7:
8a:00:7b:9e:2e:92:a3:d7:03:f8:bb:a2:f3:bc:2f:44:92:5c:
9e:bd:ce:9f:7a:8a:00:2d:00:78:54:1e:7f:a9:82:6f:83:e9:
c7:62:09:f3:a0:62:25:3d:55:77:bb:f1:23:fe:27:a5:86:62:
b3:36:66:39:08:47:82:c2:ed:11:f6:bc:e6:7c:af:4c:37:48:
15:61:50:2b:7a:98:22:65:8d:0d:ef:62:6d:16:b5:27:e5:00:
a6:0a:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:05 2025 by rpki-client