Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6311bb49-8a25-3ed2-ae74-1834829d42da.roa
File: 6311bb49-8a25-3ed2-ae74-1834829d42da.roa (raw, json)
Hash identifier: uSWFvk/ZBOUPffsrdwH08obpoYppS826Z0SwTjVk2F0=
Subject key identifier: EA:BA:87:0A:D1:2F:83:FE:AB:42:F5:E1:3B:A6:3F:79:97:7D:4B:B6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB9826505F3150B3AE180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6311bb49-8a25-3ed2-ae74-1834829d42da.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 204.84.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b9:82:65:05:f3:15:0b:3a:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=502e8771-64b1-40d1-8d82-d19a0f1eb435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:d5:1d:17:ff:45:be:57:dc:ca:bc:f4:5a:
eb:87:34:94:33:8b:ca:f7:b4:d0:03:c9:85:b6:07:
2f:bd:ad:fe:04:61:d5:3d:69:36:cf:4a:56:ce:12:
7f:79:c6:11:68:cb:3b:b3:7e:67:4f:39:5b:20:e8:
82:5e:25:30:17:ea:06:11:6c:83:5c:ad:bf:03:e1:
1e:70:b5:da:55:c3:f2:d6:00:fd:f8:fe:20:25:ea:
2f:9b:f4:0c:ee:53:45:00:8d:23:c1:a4:39:0e:00:
2e:4b:b1:e8:13:34:8a:5a:27:f0:27:db:a0:62:ca:
a9:6c:2a:10:7e:33:f0:5c:98:45:3d:55:e9:03:c8:
c7:44:62:3b:10:d9:e6:97:0f:3a:53:f0:50:d8:4d:
95:5e:c0:2e:18:59:31:7d:4f:f0:62:08:fb:31:5d:
cd:67:04:cb:51:e6:b7:f8:30:22:4b:e0:87:97:c1:
0e:c4:d8:97:93:9e:86:b5:d1:21:65:0d:7e:14:0f:
b8:83:b8:53:cc:81:53:2c:da:17:58:bc:92:30:b7:
a1:eb:61:58:95:02:98:09:30:71:e9:83:5a:5d:00:
12:5f:91:af:70:fc:d6:b0:1c:e9:99:f9:73:95:34:
e9:e1:65:91:31:8c:f8:68:2e:82:ac:c3:74:7f:36:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BA:87:0A:D1:2F:83:FE:AB:42:F5:E1:3B:A6:3F:79:97:7D:4B:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6311bb49-8a25-3ed2-ae74-1834829d42da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:04:7a:d5:8c:ad:74:da:66:6b:16:83:71:b5:1c:0f:60:83:
42:93:a5:e6:a7:43:e6:b7:2e:2e:9f:6b:be:9f:88:7b:2d:f2:
ec:50:f6:f5:36:da:01:9e:bb:50:3b:d4:1c:5b:d9:a6:0a:ab:
09:39:37:fc:2b:1c:9b:81:04:15:39:3d:a5:e7:7a:fd:57:53:
0b:22:1a:4b:bf:eb:b5:b0:c2:fc:8f:ab:65:08:49:b3:99:8b:
c7:f4:f1:8b:6d:f7:b5:77:be:a8:cd:81:d1:63:10:4b:07:33:
bf:8c:96:42:b7:36:af:67:6e:ea:b3:de:1f:db:1b:b3:0a:eb:
24:bb:aa:83:d0:00:1a:46:d2:63:cc:80:89:f6:28:32:9d:6b:
95:ff:bd:53:86:b7:9f:5d:46:32:ee:37:c9:fd:27:31:c1:6a:
94:70:25:3c:ec:47:f0:84:80:00:c4:28:f2:56:76:b0:f4:31:
5e:82:6c:64:6a:7b:06:5a:31:f5:26:4a:63:eb:8e:32:dc:5f:
90:8e:f7:ba:87:3f:e2:fa:a5:7c:d5:2e:d2:65:bf:44:9c:4a:
d9:fc:f3:41:e8:ff:2d:fb:86:33:f6:b1:8d:02:9a:e6:c0:f2:
a1:7c:fb:21:43:52:b7:4e:f0:e3:80:db:3a:8e:2b:3e:d6:bd:
27:cd:63:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:28 2025 by rpki-client