Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/3b3f4953-caf6-3964-8a2a-a2e9565e05f7.roa
File: 3b3f4953-caf6-3964-8a2a-a2e9565e05f7.roa (raw, json)
Hash identifier: mkRtPGN8568rb13PYeSf5TYAbvrC2bIYkMDYGVQJX4s=
Subject key identifier: DE:5D:2A:4C:0C:D9:3A:4B:FE:B4:A3:E2:84:4D:EB:EF:2D:74:1D:C8
Certificate issuer: /CN=15106386-88d8-4103-adeb-a6e7c684ed09
Certificate serial: 010D0C9F432858482D5A94046CDDE264BFA85BAC
Authority key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/3b3f4953-caf6-3964-8a2a-a2e9565e05f7.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 212238
IP address blocks: 207.174.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:94:04:6c:dd:e2:64:bf:a8:5b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15106386-88d8-4103-adeb-a6e7c684ed09
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=6c5867d3-75dc-47c6-96e5-4a151d0ca1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:91:20:6d:00:b5:4b:84:c3:fc:46:90:9a:
83:d2:c7:7b:7a:2c:ee:4d:50:1c:7a:19:78:e9:15:
8a:14:ab:c3:a6:96:de:89:0e:59:8d:4f:bd:ed:56:
8b:cc:23:82:3a:10:fb:e1:72:70:a9:5d:7a:cc:ab:
f0:3a:f2:dc:62:da:61:ef:de:56:f3:ef:d8:72:23:
c7:c2:ae:6c:db:18:70:1e:9f:b7:75:d6:85:e3:68:
4b:56:84:e2:38:dc:ee:d1:c7:11:40:02:9d:77:49:
ba:fa:54:f2:2e:a9:b5:6e:d0:24:1a:ab:44:76:61:
c2:02:c6:c0:06:e1:eb:df:1c:19:5b:54:4f:91:60:
68:e1:be:6d:e5:2f:1f:94:ff:fc:4c:fa:a2:0b:da:
a2:b0:33:3c:20:64:fd:f0:5c:ba:64:6c:f0:50:ea:
c5:15:ff:38:c7:9a:0c:7d:03:d0:f5:fe:11:82:f2:
38:7a:50:40:95:b5:cd:e1:1c:57:a3:f6:b2:38:fc:
e2:b6:1a:ac:cd:f3:19:40:28:6b:69:24:98:bb:b3:
6f:e2:10:c1:df:21:cc:8b:71:23:9f:f5:6a:0e:e5:
8e:6b:3d:ec:22:3e:25:75:e2:da:4e:01:d2:d1:fc:
c3:ef:d8:22:82:02:ad:14:20:07:a8:0c:7c:f3:22:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:2A:4C:0C:D9:3A:4B:FE:B4:A3:E2:84:4D:EB:EF:2D:74:1D:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/3b3f4953-caf6-3964-8a2a-a2e9565e05f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl
X509v3 Authority Key Identifier:
keyid:97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:e4:62:26:f5:40:a7:d5:72:60:7c:8f:ad:eb:9f:6d:ae:b7:
09:52:fa:cb:1d:3e:22:3c:9e:dd:85:ca:0e:73:e2:8c:ef:b1:
47:fa:a8:c3:3f:91:67:df:6d:ca:57:1c:af:be:00:43:73:7f:
f6:75:d8:05:da:63:43:1c:23:5c:37:f8:a3:40:80:38:39:4f:
e6:50:c8:c9:d0:c7:b5:ef:e3:06:be:65:1e:01:df:5a:76:7d:
0e:5e:dd:bc:2c:97:e9:12:62:aa:67:02:3f:05:8c:58:fb:0a:
33:3f:1f:6d:39:17:a9:52:33:40:f8:ef:ff:dc:de:d4:54:81:
f6:be:7a:31:bf:17:e0:eb:1a:5b:5b:ab:24:00:75:e5:56:69:
00:de:f0:7a:6f:b9:b6:99:4c:65:e7:7a:ad:f5:0b:89:e3:8a:
b8:34:d4:56:e0:1e:6c:0f:5e:87:dd:88:68:3d:ac:49:58:87:
83:cc:83:d1:6e:ff:1e:c8:bc:1d:24:fb:44:c7:55:d1:3f:3a:
7f:3c:5c:3e:03:e3:bf:2e:af:a0:4b:40:f7:7c:f5:57:02:65:
53:e9:f4:0d:4a:b9:aa:d6:6e:49:74:53:ea:15:b9:47:7a:ce:
54:04:59:bd:4d:83:7d:f4:bd:cc:4e:15:3a:96:d6:48:2f:36:
32:27:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:49 2025 by rpki-client