Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1b5612b2-ba4a-378d-ac99-2c7947998b75.roa
File: 1b5612b2-ba4a-378d-ac99-2c7947998b75.roa (raw, json)
Hash identifier: ymzicAHnhjkHTNUeEmjBTRBg1ZpLhH+xC1O9TleOH5E=
Subject key identifier: 4A:99:5C:F2:33:C6:65:B3:BE:B0:10:41:94:5E:F2:5B:97:7B:54:78
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848186A8F6A1E0F4D01E3604C80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1b5612b2-ba4a-378d-ac99-2c7947998b75.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 54744
IP address blocks: 208.184.226.0/24 maxlen: 24
208.184.228.0/24 maxlen: 24
208.184.229.0/24 maxlen: 24
208.184.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:8f:6a:1e:0f:4d:01:e3:60:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=1a5facea-fc54-49ba-88bb-20e7654bd459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:45:15:9f:88:1a:79:dc:00:38:53:05:cf:
73:ad:83:ef:02:79:65:09:87:ba:0e:74:a0:62:1b:
3d:b9:3a:df:20:69:6d:91:ca:0a:9a:6e:04:d8:f4:
a1:bd:ce:ed:cc:76:7a:98:d6:9f:9e:89:38:36:5f:
c0:1a:4e:ba:e7:ad:ce:8e:1d:b8:5d:7a:c4:21:43:
d2:37:03:c9:a7:e4:43:21:06:e2:34:1c:ef:f5:50:
bc:5d:92:1e:2b:90:6f:fd:ba:58:a5:14:9a:e0:2a:
af:c6:ff:8b:dd:3a:89:d3:07:b3:f1:db:70:7e:69:
1f:23:cf:8e:b2:aa:ef:f7:07:ae:71:ea:a2:b3:65:
e5:09:34:93:c1:bc:a6:ea:7b:83:77:91:b7:ff:28:
82:22:50:93:b5:9f:2d:dd:d6:54:f1:39:06:14:aa:
f4:88:0e:33:c9:ec:71:cd:4b:f7:53:de:69:f8:82:
f1:90:42:0b:86:4d:8b:0a:e6:1f:a3:5e:8e:b9:3b:
7b:bc:3d:49:5e:5f:a5:d3:9e:c6:03:33:ce:30:45:
7a:e3:27:23:c6:9a:6a:95:a5:e4:74:30:43:f2:41:
85:36:4d:8b:2e:98:39:23:dd:e0:2e:08:62:2b:cf:
69:4d:39:58:ee:21:f9:76:84:3c:2b:06:d6:5e:5c:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:99:5C:F2:33:C6:65:B3:BE:B0:10:41:94:5E:F2:5B:97:7B:54:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1b5612b2-ba4a-378d-ac99-2c7947998b75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.184.226.0/24
208.184.228.0/23
208.184.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:eb:63:f9:e9:b8:02:ba:09:ee:ce:4b:66:f2:79:45:24:fd:
d7:96:b5:be:59:08:2b:06:d7:a5:51:a0:82:1c:c8:fb:d3:27:
e1:5d:df:be:28:d5:88:49:f1:78:ce:8b:1b:07:48:36:31:65:
e1:14:42:5b:0b:b2:36:59:80:19:84:f7:50:23:d2:e9:43:2a:
2d:e8:cc:a8:a9:76:3f:73:5a:75:57:ff:1e:a5:66:b1:f4:a6:
50:90:fd:b8:50:5c:0e:bd:5e:58:4f:b0:d4:20:93:28:bf:24:
5e:9b:a3:46:28:9f:64:df:0d:b3:b6:44:e7:d0:57:df:22:30:
15:4b:0c:43:55:d3:e5:17:1e:46:ac:69:d2:b5:e0:58:8f:8b:
4b:3f:73:2e:0e:38:35:97:86:57:1e:f2:67:04:4c:0d:fb:6b:
be:3a:85:75:61:bb:4e:35:be:3e:d3:27:01:86:0a:27:68:be:
d4:29:d8:71:10:5f:48:23:2c:95:34:84:c6:75:c2:e2:79:c1:
01:57:49:33:38:52:f3:fb:24:dc:03:d4:a5:bf:0c:b8:1f:1d:
df:2a:4b:f4:4e:20:bb:8b:07:25:fe:27:fa:d5:28:7c:be:0c:
64:72:28:8b:88:21:73:42:86:5b:1c:c0:40:28:0e:6b:27:43:
da:e7:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:21 2025 by rpki-client