Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/31554b48-e878-3d6a-a3f3-0284b1429bf0.roa
File: 31554b48-e878-3d6a-a3f3-0284b1429bf0.roa (raw, json)
Hash identifier: 6wZstt0DKtUhz9znw6PX2aex0D1DF/mHAj0PHGK+JjQ=
Subject key identifier: 70:90:DF:99:EE:05:E3:8E:E7:35:5F:3D:7A:CA:10:0D:41:CA:4D:7F
Certificate issuer: /CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Certificate serial: 010D0C9F4328584763B0432CDE2E6F69C92B2680
Authority key identifier: D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/31554b48-e878-3d6a-a3f3-0284b1429bf0.roa
Signing time: Mon 30 Sep 2024 20:20:07 +0000
ROA not before: Mon 30 Sep 2024 20:20:07 +0000
ROA not after: Sun 29 Dec 2024 21:20:07 +0000
asID: 26777
IP address blocks: 204.13.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:63:b0:43:2c:de:2e:6f:69:c9:2b:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Validity
Not Before: Sep 30 20:20:07 2024 GMT
Not After : Dec 29 21:20:07 2024 GMT
Subject: CN=cf13ec54-6235-4483-8884-1702c3a1450e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:05:ab:2d:ff:b9:5b:3a:55:04:21:b1:e0:
76:bb:04:8c:c5:01:5e:17:21:17:01:9e:4c:15:82:
7d:07:2f:84:b0:ef:f1:05:7f:ad:97:05:c6:e8:3b:
9e:ec:c7:0d:2b:57:50:a0:72:d6:44:91:cd:c6:1a:
a5:bd:ce:be:d9:3c:65:78:fa:ee:54:65:96:9b:b5:
10:fc:e6:44:df:6d:03:e9:c3:e3:0e:d5:de:c5:33:
88:cc:37:72:9c:45:e6:10:a5:48:b8:57:89:22:7f:
4e:8f:b9:25:c0:02:93:ef:66:3c:db:13:b5:b0:7d:
8d:c7:fe:42:d2:e3:32:92:16:86:d0:ee:0d:09:6c:
21:bf:52:eb:c3:1a:e9:00:d8:fa:74:9a:b3:96:b3:
0a:cb:8b:7e:b2:48:07:b0:b8:29:bb:09:21:54:17:
67:f9:40:94:b7:2f:09:96:0f:56:45:85:4a:0d:2c:
de:ba:fd:9a:1b:9a:2d:bb:9d:e1:8c:d5:53:5c:09:
57:0b:95:7e:9d:e1:56:9a:32:12:12:6e:97:66:72:
82:69:6b:48:f4:4c:74:f0:46:5a:b7:95:a6:75:35:
33:0a:04:44:8e:49:a1:a1:60:75:6c:8f:3d:e0:68:
d9:79:5c:a9:36:ee:24:5e:81:68:1d:d0:f4:4a:c3:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:DF:99:EE:05:E3:8E:E7:35:5F:3D:7A:CA:10:0D:41:CA:4D:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/31554b48-e878-3d6a-a3f3-0284b1429bf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl
X509v3 Authority Key Identifier:
keyid:D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
sbgp-ipAddrBlock: critical
IPv4:
204.13.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:65:a8:f4:5f:a0:1e:6a:06:aa:8e:67:a3:de:b7:87:7b:18:
e4:4e:18:f3:69:30:d2:3b:f5:82:9b:4c:e6:d5:91:80:2a:e1:
2d:06:bd:f9:f4:12:3d:af:68:32:15:ea:8f:37:4a:25:46:2e:
d7:56:0b:67:df:8d:67:26:bc:a3:91:33:66:7c:ae:10:60:d3:
74:22:5c:99:cc:ad:37:47:e6:c2:63:43:72:45:99:14:11:d4:
76:56:47:21:87:a6:a1:34:7b:eb:08:53:f5:55:34:b2:89:0f:
34:37:db:9a:93:0b:88:74:0c:db:0f:04:63:ed:ca:61:81:95:
03:3d:8d:64:97:d3:8c:f0:df:53:7f:87:6e:82:ce:47:62:fc:
82:dd:2d:84:45:1a:df:73:d6:da:ce:d3:49:e4:c8:e9:0e:19:
b0:9c:70:28:22:eb:35:da:55:25:d5:e4:28:c1:7d:08:f6:d8:
1a:59:1b:22:95:b5:c8:5f:36:b6:5e:22:d0:05:71:99:b1:ed:
8e:d6:27:cc:de:85:82:7a:9c:4b:b9:8a:6f:8d:cf:da:89:4b:
b4:d9:50:eb:e3:26:95:a7:57:8c:13:24:da:13:54:8a:9b:61:
73:af:bf:17:03:9d:ac:01:9b:56:1e:0f:3a:4d:f5:56:de:e7:
40:ec:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:29 2025 by rpki-client