Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/03d1f8a9-52c2-3b5d-88ce-e2b2d71280df.roa
File: 03d1f8a9-52c2-3b5d-88ce-e2b2d71280df.roa (raw, json)
Hash identifier: 2+oy6fnFU3uJIIHPgPB05V1+/FYSdTIAbJxyjjti7j4=
Subject key identifier: 2A:8E:08:70:48:E1:84:C5:11:BD:CC:A5:00:F0:62:CE:5A:37:34:BE
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4905020BD353327FADDF0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/03d1f8a9-52c2-3b5d-88ce-e2b2d71280df.roa
Signing time: Fri 08 Nov 2024 15:05:03 +0000
ROA not before: Fri 08 Nov 2024 15:05:03 +0000
ROA not after: Thu 06 Feb 2025 15:05:03 +0000
asID: 81
IP address blocks: 204.84.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:90:50:20:bd:35:33:27:fa:dd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:03 2024 GMT
Not After : Feb 6 15:05:03 2025 GMT
Subject: CN=94b95b9d-a09f-4ecc-837c-1629784de0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:15:0d:60:46:08:5c:08:b0:5f:e3:35:c7:7a:
a8:79:79:98:4e:6f:1e:14:36:0e:cc:71:59:50:a6:
08:61:3c:e1:16:07:13:1b:99:81:78:ee:ed:8b:87:
cd:62:eb:1d:16:3c:59:dd:e0:05:8b:81:be:9b:b1:
d3:2b:65:b4:c3:84:28:a5:38:b6:79:e2:7d:2b:d8:
20:d3:30:82:59:81:f1:b6:11:e2:ac:6b:16:7e:f9:
6d:11:0b:07:03:88:9c:f2:2c:16:02:a4:9b:f9:4b:
3c:57:f6:fd:7f:b8:06:79:df:e7:9f:0a:fb:d4:cd:
4d:6c:71:04:af:5d:61:48:ba:88:6b:8a:23:00:c6:
c5:18:87:00:e1:42:1d:e1:d8:27:21:97:0f:63:91:
23:d3:14:fa:7f:a5:ac:bb:86:f8:b7:56:92:07:d8:
5b:30:63:17:ba:14:54:26:c2:c5:db:37:54:b9:72:
dc:e8:63:e1:5a:66:fb:70:27:ce:a5:71:45:bc:69:
61:4b:b9:48:8f:8a:ed:ba:5d:25:3a:92:e4:ed:4c:
56:bc:a8:f5:61:0c:5f:b6:b0:e3:a3:c8:00:40:fe:
bd:04:68:b2:6c:37:86:bb:7c:ba:85:22:34:75:8c:
21:8e:dc:4e:68:96:4d:67:04:b7:09:9e:c4:14:2b:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8E:08:70:48:E1:84:C5:11:BD:CC:A5:00:F0:62:CE:5A:37:34:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/03d1f8a9-52c2-3b5d-88ce-e2b2d71280df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:72:f8:d5:7e:c8:15:83:87:c7:4d:69:7d:b2:07:3b:a7:7c:
39:30:67:9e:75:42:b5:16:2a:25:5c:6a:44:a9:76:d0:2b:92:
50:a6:7f:52:92:a4:f8:ee:a2:ce:50:a0:fe:bb:89:72:8d:dc:
f9:9e:8d:8b:96:d7:5e:78:2e:93:89:8f:b5:5e:b0:1a:d8:0a:
bc:69:aa:16:33:d1:a4:47:ca:18:bd:82:bc:27:be:d7:da:85:
9f:1f:c0:f3:8a:6f:16:97:ac:3d:ef:2f:53:ca:38:0f:87:31:
30:46:72:aa:85:0f:5d:52:1c:58:cf:7a:b7:b1:78:5c:9a:e5:
33:88:89:a6:27:78:00:30:53:b8:c5:95:54:df:7a:ee:60:c3:
f9:f7:2f:e9:84:41:8f:9d:24:ca:06:c0:4d:8e:8f:8c:26:04:
81:b8:b8:1e:e6:cc:ea:61:9e:49:f2:a7:26:e2:11:d0:a2:27:
13:18:7c:9a:67:dd:41:29:0a:c9:6d:4e:74:a3:92:ae:3b:40:
0a:aa:38:c0:a0:47:23:0a:fe:b9:cb:3a:1b:d9:2b:0d:39:f5:
00:9e:79:52:21:7b:99:cf:16:af:8c:a0:4c:de:1f:a3:41:be:
c2:0b:21:d9:8d:eb:cf:53:b6:4d:39:30:44:ac:a6:d4:c8:9e:
ee:a0:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:57:39 2025 by rpki-client