Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4873c88b-4e68-3eb2-b5d5-547fa0b546f3.roa
File: 4873c88b-4e68-3eb2-b5d5-547fa0b546f3.roa (raw, json)
Hash identifier: P7u/Tf+bhLEk/eW0y38sLZIRSjBNm4bnyv1r8MYqkR0=
Subject key identifier: CB:47:85:04:C9:8A:4D:ED:E7:88:C7:0B:64:78:3D:77:A3:A8:EF:00
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F4328584839EAC06A647EA1A2FE1C5280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4873c88b-4e68-3eb2-b5d5-547fa0b546f3.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 400385
IP address blocks: 64.184.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c0:6a:64:7e:a1:a2:fe:1c:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=017ba65f-aaf3-4f73-a9c2-c5320f62658c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:c4:65:7f:4c:20:d0:31:4d:9f:3b:52:c1:
1f:87:b0:c9:01:c3:21:0f:65:0d:21:03:ec:72:70:
26:99:bf:71:bf:a8:15:8b:f6:bc:3b:22:fc:47:6d:
f7:33:f6:bf:d7:2f:f6:33:96:9f:6c:0d:e0:e4:4f:
7e:bd:45:b1:de:80:5b:9a:e4:24:f7:a3:72:83:be:
2e:bd:2d:24:5a:fe:d3:31:a8:d7:ab:56:20:c2:dd:
62:a4:47:37:32:e2:07:56:85:56:c1:87:a0:88:19:
2a:4a:e6:79:7b:4b:49:fd:71:fc:68:8f:a0:7a:d3:
77:54:b7:a7:fa:f8:a0:5d:98:3e:69:b3:ab:76:3d:
05:c9:42:f1:dc:21:0e:ec:0a:f4:10:b5:25:d0:82:
7f:65:f7:7f:aa:62:8b:e7:35:a0:82:0c:e6:e5:9c:
92:8e:0b:79:cc:5d:3b:e6:7b:06:05:90:3c:bb:76:
0c:7b:cd:24:0f:4f:e2:8a:10:e6:55:25:9b:ab:41:
fe:75:e1:db:30:ed:91:0c:50:45:94:56:58:e1:2e:
dc:79:ec:74:1e:f5:35:86:e5:6d:e9:88:e6:d4:e5:
52:b6:dc:78:05:14:0a:20:18:fe:ea:0d:93:b3:be:
f6:f9:c2:ed:c2:e4:2d:f6:67:f0:21:bf:b3:df:20:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:47:85:04:C9:8A:4D:ED:E7:88:C7:0B:64:78:3D:77:A3:A8:EF:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4873c88b-4e68-3eb2-b5d5-547fa0b546f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
64.184.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:03:ac:79:6d:68:e6:8a:36:d0:a1:b2:1d:06:20:35:0b:20:
c4:1f:9e:43:04:44:da:c0:c2:ee:3b:23:46:f0:70:7a:f6:df:
c4:28:0f:7d:75:13:62:78:e2:14:84:a8:3c:f7:cd:77:f4:48:
79:e9:b6:72:5f:31:bd:fd:a8:c9:e4:6a:6d:1f:4a:39:14:84:
11:ba:d2:31:a1:d4:49:60:f2:82:36:8e:93:b2:cf:e3:6f:99:
09:88:47:0e:96:21:5b:52:6d:bb:5b:73:6d:4a:f7:6e:fb:77:
e3:7f:2e:a5:52:81:e3:81:dd:f1:b8:bb:c5:12:4d:47:74:29:
7d:a1:76:b5:54:05:ec:b3:97:65:52:d0:44:c5:85:3d:f6:9a:
c9:57:22:8b:b5:36:20:1e:07:fe:3e:fa:1e:6f:88:44:16:e2:
01:fa:fb:1b:0a:8c:17:7f:b7:27:97:8f:f7:49:6a:58:62:53:
86:c8:cf:c6:f9:e6:12:f8:30:e3:62:cc:fb:97:e3:98:b2:5d:
6b:04:7b:28:2b:82:ea:5b:7d:39:cd:80:82:d1:dd:51:82:82:
b4:68:15:86:f4:12:5d:df:0b:d3:98:11:f1:7e:80:27:c8:df:
4d:28:69:d9:f5:9c:80:67:ee:93:5e:8f:27:55:83:a5:a1:2b:
6d:f4:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:28 2025 by rpki-client