Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0dd0b6ef-8061-3cd8-b70c-1dced95d69a7.roa
File: 0dd0b6ef-8061-3cd8-b70c-1dced95d69a7.roa (raw, json)
Hash identifier: ED7RaFMKMqy64zM2yjYOZJpG+48frFSHTncEgSYJXC0=
Subject key identifier: 1C:BF:80:89:C9:29:32:DA:32:79:BE:CD:B8:10:A1:04:C2:B0:6C:F6
Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial: 010D0C9F432858487BF8F2B29659F3F008AD5880
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0dd0b6ef-8061-3cd8-b70c-1dced95d69a7.roa
Signing time: Thu 09 Jan 2025 05:52:55 +0000
ROA not before: Thu 09 Jan 2025 05:52:55 +0000
ROA not after: Wed 09 Apr 2025 04:52:55 +0000
asID: 142064
IP address blocks: 206.168.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:f8:f2:b2:96:59:f3:f0:08:ad:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Validity
Not Before: Jan 9 05:52:55 2025 GMT
Not After : Apr 9 04:52:55 2025 GMT
Subject: CN=f5080d57-a7f2-44c3-b6df-0643daf42567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:49:d7:20:5c:1b:3c:94:2a:20:ad:84:23:ec:
ae:76:3a:cc:d8:83:b8:af:7a:87:3f:8d:67:36:02:
e3:1e:14:7f:ab:bf:93:f6:de:c7:0d:14:9f:85:30:
2e:f3:f4:88:28:11:a4:3b:2c:5d:ea:04:4e:89:2e:
02:14:9b:ca:28:6c:d2:ee:35:81:9b:9a:bb:be:cd:
a3:32:02:c9:c2:0e:22:a3:7d:da:23:d4:e5:7c:58:
ce:e0:32:6a:2e:37:89:0a:c9:f8:52:f9:9a:2a:99:
b9:5d:77:d4:46:9e:d2:2c:5f:d1:18:82:a5:59:66:
ae:46:81:7d:ca:fe:ab:d0:56:6a:27:8c:16:6c:47:
42:43:42:d7:a3:09:62:22:df:a7:04:c1:ab:95:2a:
32:ab:be:f3:45:98:99:fd:13:6f:0a:33:a7:10:14:
09:c3:ca:fd:21:81:73:8c:b3:8b:01:fc:2c:30:ed:
b4:18:9a:19:ad:ee:62:4e:ab:41:a9:bd:de:19:7a:
bb:80:1f:4b:bc:33:28:5c:31:68:df:61:ea:36:2e:
e3:3b:94:4c:c1:33:84:2a:60:a0:cb:6c:ab:ab:ba:
65:5a:6e:20:7e:5c:4c:dc:a6:48:10:c7:9e:db:f7:
09:90:e2:41:58:b8:04:d9:1a:e4:00:7b:c8:94:cc:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BF:80:89:C9:29:32:DA:32:79:BE:CD:B8:10:A1:04:C2:B0:6C:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/0dd0b6ef-8061-3cd8-b70c-1dced95d69a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl
X509v3 Authority Key Identifier:
keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:d7:bd:d7:7c:c4:78:ea:02:c6:43:24:9a:76:f3:76:e2:86:
e6:35:4c:34:93:fb:02:f2:cd:d4:d2:28:1c:55:8a:40:61:f4:
71:83:2f:e3:24:b2:66:5b:49:a9:0b:fd:9d:7d:dc:11:17:2e:
59:97:a6:62:57:e7:bf:ba:fc:47:e9:05:64:cd:d1:d1:11:23:
4a:73:13:e4:51:3e:62:8c:c2:d4:34:2d:ff:98:9c:b0:ba:79:
4e:f0:25:3a:3a:f2:17:4a:2a:5f:96:46:58:6a:60:4f:86:85:
27:f8:b3:d8:2c:4b:aa:c2:1d:7f:f2:ca:66:8b:b4:2b:af:d4:
44:b5:79:14:3d:72:0c:eb:aa:33:36:a7:fe:be:2b:06:59:68:
13:c8:61:a9:26:60:ea:ca:8c:52:76:06:e9:ea:84:17:ed:a4:
3a:0e:be:ca:e1:c8:79:93:be:83:83:f1:81:17:83:79:e3:77:
18:4a:48:da:3c:f9:62:ac:24:1c:a5:b3:a2:52:fc:fe:6d:fe:
e3:55:44:c3:d1:e1:cd:2c:b2:7d:17:ab:e9:5e:a8:70:e3:90:
76:d6:0e:e6:87:a9:0d:e7:e6:ed:2b:91:90:32:dc:bb:b8:4c:
90:b0:05:94:ea:84:cb:fb:a1:7a:eb:8d:9c:a2:fb:15:93:dc:
07:f8:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:33 2025 by rpki-client