Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdeb6841-84c5-3092-96a3-3d4d9591f3f4.roa
File: fdeb6841-84c5-3092-96a3-3d4d9591f3f4.roa (raw, json)
Hash identifier: 4NsDXzT/O1T6+c12iiFM4mZ/WzAfOU8AlJHLD7ehORw=
Subject key identifier: AE:43:0E:76:36:E7:8C:6E:39:8C:6E:DD:25:9D:D4:D1:40:13:5B:FB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858455332EDC9DEEE926EAB79AB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdeb6841-84c5-3092-96a3-3d4d9591f3f4.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 71.28.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:32:ed:c9:de:ee:92:6e:ab:79:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=530cc16a-c5d1-4ecc-80a8-ef946a2c21fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:6b:44:8d:e6:ff:c8:64:f8:23:92:0d:1d:
b3:28:67:54:21:10:14:fc:e0:f0:ea:15:dc:0c:84:
49:63:85:93:ff:bb:92:a2:49:b5:1a:f9:2f:14:e3:
4d:87:9a:b5:fa:5f:78:56:1d:4a:4f:ce:91:48:35:
13:bc:a2:01:95:c0:60:0d:2f:7f:cf:86:24:02:91:
1b:91:02:fd:86:9f:41:e9:bb:d9:60:5e:15:b0:45:
5c:aa:31:05:ca:8b:62:b8:a2:42:8d:6e:7a:83:f0:
16:b5:26:d3:c6:44:5c:91:dc:60:9e:76:27:4a:94:
89:8b:35:ae:d0:62:c5:e8:a8:10:d6:6c:69:9c:63:
6a:87:83:b2:c2:3d:a3:7b:55:96:90:eb:78:d0:05:
35:65:ac:08:b6:2c:50:98:60:ea:c4:e5:c2:8d:69:
d4:79:91:e3:3f:d7:21:f7:db:9d:4d:7a:1a:cd:99:
02:99:0c:32:0c:ee:d9:fa:fd:c0:07:4d:b8:b8:b7:
38:f1:b5:c3:05:e3:d8:ea:c8:25:ca:aa:f7:6b:5b:
46:86:da:23:10:77:e0:4b:02:8e:b9:10:d4:15:cb:
38:b0:a1:b1:f9:c8:8d:b4:5b:a0:0e:a3:07:a0:ce:
40:40:0f:88:3a:c9:98:b8:25:42:f7:33:5b:9b:61:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:0E:76:36:E7:8C:6E:39:8C:6E:DD:25:9D:D4:D1:40:13:5B:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdeb6841-84c5-3092-96a3-3d4d9591f3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:fd:b8:87:a3:63:b3:c8:42:2f:be:93:17:8b:27:25:d8:fb:
61:dc:74:4b:04:10:f3:65:00:d1:26:7c:d3:a3:37:45:08:76:
12:4b:a3:1d:01:09:1d:c3:5c:44:54:90:14:fa:d0:a8:6b:2d:
7d:91:6d:4b:b6:57:b6:08:43:2f:d1:40:92:22:2f:19:8b:cf:
79:8a:8d:3b:af:6b:d1:57:14:ba:6a:27:1d:be:3e:69:31:74:
7a:d0:0c:e4:2c:08:80:ac:78:8f:c9:31:bf:63:61:0f:2a:bf:
9e:9f:7b:5d:74:5e:ac:35:a6:e6:2f:35:93:06:fe:14:be:51:
cb:6e:3e:1f:34:79:18:33:fc:de:a2:25:11:f1:18:93:6b:d5:
21:6c:d8:3b:bd:3d:1f:02:fe:12:07:c4:4d:3c:d8:03:45:4a:
d2:b4:8b:b3:c1:b8:29:24:bf:dc:94:04:11:20:91:e7:10:c3:
d0:5b:4b:d5:eb:ce:d4:9c:0e:c3:af:50:ea:06:37:9f:8a:ce:
1c:b6:07:a4:94:2a:98:42:1d:8c:b9:1a:0f:66:45:9d:bd:76:
22:aa:e3:93:7a:33:2b:49:a9:10:3e:50:b0:ed:53:ef:34:9e:
05:99:7e:a5:2c:9b:8a:ff:96:51:f9:d5:d4:e2:fa:d6:25:ba:
da:60:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:51 2025 by rpki-client