Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/b2f237d3-15b5-3dc7-b024-193c376d3d40.roa
File: b2f237d3-15b5-3dc7-b024-193c376d3d40.roa (raw, json)
Hash identifier: pFInT87n907EX/mvl/lqfR0hfiLPXG0n4bM/Wh5ouZE=
Subject key identifier: E7:B8:08:37:43:A8:AE:34:DE:6F:84:13:58:DB:EA:DB:52:87:11:2E
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F43285847791AC3EBDEF0097131760040
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/b2f237d3-15b5-3dc7-b024-193c376d3d40.roa
Signing time: Tue 08 Oct 2024 12:26:41 +0000
ROA not before: Tue 08 Oct 2024 12:26:41 +0000
ROA not after: Mon 06 Jan 2025 13:26:41 +0000
asID: 40065
IP address blocks: 67.220.64.0/24 maxlen: 24
67.220.66.0/23 maxlen: 24
67.220.70.0/23 maxlen: 24
67.220.75.0/24 maxlen: 24
67.220.76.0/22 maxlen: 24
67.220.90.0/24 maxlen: 24
67.220.91.0/24 maxlen: 24
67.220.92.0/24 maxlen: 24
67.220.93.0/24 maxlen: 24
67.220.94.0/24 maxlen: 24
68.168.16.0/24 maxlen: 24
68.168.17.0/24 maxlen: 24
68.168.18.0/23 maxlen: 24
68.168.20.0/22 maxlen: 24
68.168.24.0/22 maxlen: 24
68.168.28.0/23 maxlen: 24
68.168.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:79:1a:c3:eb:de:f0:09:71:31:76:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Oct 8 12:26:41 2024 GMT
Not After : Jan 6 13:26:41 2025 GMT
Subject: CN=b622bf9d-748f-4469-846e-25be236dc906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:9e:99:ca:4f:cc:e1:c5:5f:e5:00:c9:a1:
c5:22:5d:c0:dc:71:bc:47:01:98:fd:16:d4:b5:6f:
c3:14:09:56:a3:d7:88:3d:66:f4:6f:3a:5d:8e:93:
8d:f7:4b:eb:35:f3:9b:5f:c5:42:32:15:04:b2:16:
02:bc:6d:f1:c5:2f:37:9e:76:09:53:9e:07:d7:89:
c0:52:d9:4d:3b:76:9e:17:bd:cb:3d:f6:28:86:28:
d6:da:22:d3:b1:a6:28:fc:bb:18:22:2c:72:76:40:
75:ba:32:9f:8a:78:b5:4a:23:7b:36:bf:fd:84:4d:
cf:0d:8f:33:48:99:51:fe:43:33:2d:47:4f:ca:63:
75:b9:9d:f2:13:3f:94:e9:6a:69:f7:ef:8e:51:7e:
25:78:5c:73:0e:4d:7d:b3:28:c6:06:29:77:1d:87:
47:88:06:76:8b:d0:c2:ef:07:33:58:e5:e5:01:cd:
ca:76:f4:08:45:30:54:fb:c8:ca:61:be:a7:e7:0c:
cc:a2:b2:27:1c:20:f5:4c:f1:4f:78:8f:d5:53:c1:
73:25:84:36:e0:b5:7a:0f:63:f9:f7:70:87:21:89:
c4:1f:f5:85:bd:0f:34:3d:3a:98:a5:39:99:17:5a:
51:15:2b:ac:1b:dc:db:62:fc:30:af:c2:fa:59:76:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B8:08:37:43:A8:AE:34:DE:6F:84:13:58:DB:EA:DB:52:87:11:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/b2f237d3-15b5-3dc7-b024-193c376d3d40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.64.0/24
67.220.66.0/23
67.220.70.0/23
67.220.75.0-67.220.79.255
67.220.90.0-67.220.94.255
68.168.16.0-68.168.30.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:93:20:49:56:60:a7:f0:9a:9e:31:03:01:04:42:29:02:84:
66:ab:a2:b2:7f:17:46:e6:8c:50:f5:46:37:6c:ba:d2:20:89:
19:bd:d7:75:5b:cf:4a:f1:6e:48:b0:aa:3a:12:ea:fb:6a:df:
ed:da:2a:89:fd:a9:c4:48:f7:69:b4:39:5c:7c:b6:38:cd:e9:
b9:c0:9f:8d:ae:c9:2b:70:ad:db:b4:52:60:44:a8:25:e6:0b:
41:12:1d:e1:f5:0a:f3:5d:7e:d7:9f:3f:71:48:7b:cd:73:dc:
2f:5a:02:8e:50:be:09:12:a5:88:5b:63:0d:ba:06:f2:95:90:
71:1d:dd:a5:a6:51:47:83:02:4e:1c:5e:02:ca:f7:e4:a4:c0:
f2:26:f5:48:0c:00:7d:49:a4:0e:41:a2:e4:bf:8c:e0:df:37:
8c:96:8a:15:74:f9:7e:b4:1e:01:3f:db:19:d3:e2:18:e9:cc:
de:86:43:a1:49:c9:1e:4a:74:57:5b:67:9f:53:f6:42:17:7e:
30:a6:84:67:54:e0:87:83:d2:f1:a3:d3:56:4a:87:82:b6:b6:
83:0f:82:64:17:55:c7:73:5e:0c:24:49:1b:2b:ef:7d:8f:c1:
44:1b:7b:1f:37:23:09:8b:a6:54:b7:20:fe:24:f1:e8:7b:83:
8f:38:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:29:53 2025 by rpki-client