Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/ddc8494a-1e29-3e70-9a1b-5cac348061b7.roa
File: ddc8494a-1e29-3e70-9a1b-5cac348061b7.roa (raw, json)
Hash identifier: bKqLU4yyT+j194AivkGWBt7uyBmmgjFCxB5ZITFa/Ag=
Subject key identifier: 65:4E:DA:B2:8F:93:CE:AF:4A:65:EC:64:8A:B0:C2:41:55:39:EA:68
Certificate issuer: /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial: 010D0C9F43285842242900E9BFD4838A95F73180
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/ddc8494a-1e29-3e70-9a1b-5cac348061b7.roa
Signing time: Wed 07 Jun 2023 14:16:59 +0000
ROA not before: Wed 07 Jun 2023 14:16:59 +0000
ROA not after: Tue 05 Sep 2023 14:16:59 +0000
asID: 1640
IP address blocks: 76.72.192.0/23 maxlen: 23
76.72.194.0/24 maxlen: 24
76.72.195.0/24 maxlen: 24
76.72.196.0/24 maxlen: 24
76.72.197.0/24 maxlen: 24
76.72.198.0/23 maxlen: 23
76.72.200.0/22 maxlen: 22
76.72.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:24:29:00:e9:bf:d4:83:8a:95:f7:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
Validity
Not Before: Jun 7 14:16:59 2023 GMT
Not After : Sep 5 14:16:59 2023 GMT
Subject: CN=9f01b94a-bcb6-4a6a-b75f-5043d3169aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:ff:96:c3:8f:a5:d9:a6:d9:e9:5c:92:6e:
10:7e:4e:64:7c:82:10:30:cc:c2:7f:02:f5:2b:90:
97:aa:2f:1b:ae:d4:b0:a4:70:9e:25:43:d6:04:a2:
78:a2:67:c2:41:f0:d3:dc:45:d9:6d:c0:83:7c:df:
98:d1:57:0e:da:2f:18:f7:89:1d:dd:fe:c2:96:29:
c9:48:3e:b4:92:33:97:98:e8:79:02:c9:47:6a:6c:
0c:f8:79:08:c8:4a:2f:e7:f2:54:a7:b8:c6:53:df:
3a:e3:34:4d:7f:aa:94:fa:9f:78:1f:da:1f:b3:49:
45:41:cc:be:6c:0b:9c:e1:90:c1:dd:71:6f:9d:49:
10:52:e0:43:19:aa:cf:9c:c3:14:40:f8:26:85:70:
0d:de:2f:fc:53:58:5f:49:8a:22:27:61:c7:11:a0:
b7:11:53:36:63:fb:f7:4f:a6:1f:9f:af:46:43:57:
41:5b:c5:42:d8:8d:be:0f:a3:a1:d9:b4:fe:e6:17:
69:17:2d:82:79:34:9d:0c:de:ba:68:37:96:84:0a:
7f:de:95:8d:7f:05:10:5e:08:64:07:7b:cd:21:4e:
4a:a3:b1:bf:23:4d:1e:37:64:53:e6:01:d7:ed:c5:
5c:fa:e4:f8:ff:21:61:98:4c:6f:d3:a3:0e:24:f5:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4E:DA:B2:8F:93:CE:AF:4A:65:EC:64:8A:B0:C2:41:55:39:EA:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/ddc8494a-1e29-3e70-9a1b-5cac348061b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
X509v3 Authority Key Identifier:
keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
sbgp-ipAddrBlock: critical
IPv4:
76.72.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:27:e8:56:97:88:61:50:8e:76:f2:9e:39:82:02:cf:99:b9:
55:4a:fa:3c:64:8f:fc:a9:3e:c4:8a:16:dd:dc:88:c8:d9:a8:
e6:83:d8:e6:c8:88:97:0a:cf:b5:12:af:31:cd:d4:9f:fa:c5:
68:4b:cc:46:2c:03:94:d3:c2:46:49:00:69:d3:42:01:01:fc:
e1:f4:64:28:54:83:4a:2a:74:ec:1e:73:34:20:e0:3f:03:6e:
50:01:25:a1:ae:8b:46:0b:ec:7b:1a:9b:e9:72:df:b7:18:46:
ae:cb:c2:27:a6:ce:66:3a:f6:1f:ea:48:98:d5:2a:ee:b8:29:
07:19:91:ab:48:88:21:36:b2:9b:8b:3b:59:27:0a:f4:74:63:
aa:9b:3b:e6:b6:b3:da:33:5c:49:7e:f2:b0:28:25:61:7d:89:
94:02:b5:a3:2d:9d:d7:cf:d1:a2:d0:99:9e:b4:3e:ce:f2:cc:
a0:15:d5:cb:17:dc:30:46:d8:37:49:07:31:11:b7:48:38:07:
2e:ac:b1:f7:e5:fc:35:52:5d:6e:65:12:7e:ab:f9:b8:f3:cb:
1f:17:13:9b:9c:62:94:d5:cc:62:15:46:be:90:e9:a0:ad:3e:
44:2e:ff:56:2d:06:7b:8e:63:87:9f:90:96:ce:c5:12:57:2b:
d9:2a:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:58 2025 by rpki-client